<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="719">
<package pkgid="2a28a9951929492068260be0e8629f608d4ad18d33e2df60baf6374ff10cc50f" name="GeoIP" arch="x86_64">
  <version epoch="0" ver="1.6.12" rel="14.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.6.12-10.0.cf" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.6.12-14.0.cf" date="1677844800">- Use SPDX-format license tag
- Package LICENSE file</changelog>
</package>
<package pkgid="452406403462b865af16a359a7b2906aae13b5188840c2668ec51d2ca246e421" name="GeoIP-GeoLite-data" arch="noarch">
  <version epoch="0" ver="2018.06" rel="12.fc29"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.06-8" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.06-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.06-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.06-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2018.06-12" date="1677844800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="fd6c562fe2fc9ac942657ea282dbf2e99fe4ad6929c70525055083d886fff64b" name="GeoIP-GeoLite-data-extra" arch="noarch">
  <version epoch="0" ver="2018.06" rel="12.fc29"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.06-8" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.06-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.06-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2018.06-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2018.06-12" date="1677844800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="d4dafaf09b2ff0dfa623d834c31b3f30ad9c68005ec89b1f35e4dab5aa314e2c" name="GeoIP-devel" arch="x86_64">
  <version epoch="0" ver="1.6.12" rel="14.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.6.12-10.0.cf" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.6.12-14.0.cf" date="1677844800">- Use SPDX-format license tag
- Package LICENSE file</changelog>
</package>
<package pkgid="ec089170b15d3932d8db0bd75f32d7445224c1f7609ab22a06a21692ba80b023" name="Judy" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="42.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-37" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-38" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-39" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-41" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-42" date="1769774400">- Start providing the lower-case 'judy-devel' name for compatibility with
  other RPM based distributions (rhbz#2435466)</changelog>
</package>
<package pkgid="cb3fea728206c83a5a920a7a4c4e5664dce59e310619e7aa16475b15cbb9208c" name="Judy-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="42.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-37" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-38" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-39" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-41" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-42" date="1769774400">- Start providing the lower-case 'judy-devel' name for compatibility with
  other RPM based distributions (rhbz#2435466)</changelog>
</package>
<package pkgid="8dcc5dee0b50a9134db906f31890d02866075f9a8303d3505a07e1050686bac1" name="bluefish" arch="x86_64">
  <version epoch="0" ver="2.2.16" rel="3.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-5" date="1702468800">- Fix use of incompatible pointer types (upstream rev 8991)
- Fix improper use of pointer: https://sourceforge.net/p/bluefish/tickets/80/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-7" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-1" date="1710763200">- Update to 2.2.15 (rhbz#2269978)
  - Bluefish 2.2.15 is a minor maintenance release
  - New feature: it can highlight the indenting level with a vertical line,
    which is very useful during python programming and helps with a lot more
    programming languages
  - Fix zencoding for python releases newer than 3.12
  - Add a retry button when opening files from a remote location
  - Tiny performance improvement when scrolling
  - Fix a bug in the bookmarks function and the visible indenting function
    that potentially could lead to a crash
  - The perl syntax detection has been greatly improved
  - YAML syntax detection has been added
  - The code has several fixes to make it compile on modern Mac OSX releases
    and to make it compile with the clang compiler
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-2" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-4" date="1726833600">- Switch from enchant to enchant2 for spell checking where it's available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-1" date="1727006400">- Update to 2.2.16 (rhbz#2314037)
  - Bluefish 2.2.16 is mostly a maintenance release
  - New feature: Bookmarks can now be generated from external commands such as
    ctags
  - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
  - The old built-in javascript beautifier has been removed; Bluefish now uses
    the jsbeautify from your system (if available)
  - The word-wrap function has been fixed
- Add fix for type issue causing FTBFS with gcc 14
  (https://sourceforge.net/p/bluefish/tickets/95/)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-3" date="1737028801">- Fix for gcc 15</changelog>
</package>
<package pkgid="35e9b80b9d37ddb18f05a2491d6887bd23ed9fd0ebae228ff9d1e1c5815d5919" name="bluefish-shared-data" arch="noarch">
  <version epoch="0" ver="2.2.16" rel="3.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-5" date="1702468800">- Fix use of incompatible pointer types (upstream rev 8991)
- Fix improper use of pointer: https://sourceforge.net/p/bluefish/tickets/80/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-7" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-1" date="1710763200">- Update to 2.2.15 (rhbz#2269978)
  - Bluefish 2.2.15 is a minor maintenance release
  - New feature: it can highlight the indenting level with a vertical line,
    which is very useful during python programming and helps with a lot more
    programming languages
  - Fix zencoding for python releases newer than 3.12
  - Add a retry button when opening files from a remote location
  - Tiny performance improvement when scrolling
  - Fix a bug in the bookmarks function and the visible indenting function
    that potentially could lead to a crash
  - The perl syntax detection has been greatly improved
  - YAML syntax detection has been added
  - The code has several fixes to make it compile on modern Mac OSX releases
    and to make it compile with the clang compiler
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-2" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-4" date="1726833600">- Switch from enchant to enchant2 for spell checking where it's available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-1" date="1727006400">- Update to 2.2.16 (rhbz#2314037)
  - Bluefish 2.2.16 is mostly a maintenance release
  - New feature: Bookmarks can now be generated from external commands such as
    ctags
  - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
  - The old built-in javascript beautifier has been removed; Bluefish now uses
    the jsbeautify from your system (if available)
  - The word-wrap function has been fixed
- Add fix for type issue causing FTBFS with gcc 14
  (https://sourceforge.net/p/bluefish/tickets/95/)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-3" date="1737028801">- Fix for gcc 15</changelog>
</package>
<package pkgid="58de59911233573c3c2fa039d2735524dc754b416cac7cec0d64941eb4fb53c6" name="btcflash" arch="x86_64">
  <version epoch="11" ver="1.1" rel="2.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="d42c9c1d417bee1154c6d2a91f16788406697b445900bbcc275fce957fdd1bcb" name="btcflash" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="8b14c0904069c5a292f24c39bf3780120d2b58da2be808040afbdc09b323a778" name="bw-whois" arch="noarch">
  <version epoch="0" ver="5.5.2" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.5.2-4" date="1674129600">- Use SPDX-format license tag
- Drop pointless use of %{name} macro
- Use %license unconditionally</changelog>
</package>
<package pkgid="cd62b470b25ae593f52bb06bf84763533906e081b15b9b50b8a57ade54ea229a" name="c-ares" arch="i686">
  <version epoch="0" ver="1.34.6" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32.1-1.0.cf" date="1720440000">- Update to 1.32.1
  This is a feature and bugfix release
  Features:
  - Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
    by specifying 'ARES_FLAG_DNS0x20', disabled by default (GH#800)
  - Rework query timeout logic to automatically adjust timeouts based on
    network conditions; the timeout specified is now only used as a hint until
    there is enough history to calculate a more valid timeout (GH#794)
  Changes:
  - Enable Query Cache by default (GH#786)
  - DNS RR TXT strings should not be automatically concatenated as there are
    use cases outside of RFC 7208; in order to maintain ABI compliance, the
    ability to retrieve TXT strings concatenated is retained as well as a new
    API to retrieve the individual strings, which restores behaviour from
    c-ares 1.20.0 (GH#801)
  - Clean up header inclusion logic to make hacking on code easier (GH#797)
  - GCC/Clang: Enable even more strict warnings to catch more coding flaws
  - MSVC: Enable '/W4' warning level (GH#792)
  Bugfixes:
  - Enhance Windows DNS configuration change detection to also detect manual
    DNS configuration changes (GH#785)
  - Various legacy MacOS Build fixes (GH#782)
  - Ndots value of zero in resolv.conf was not being honoured
  - Watt-32 build support had been broken for some time (GH#781)
  - Distribute 'ares_dns_rec_type_tostr' manpage (GH#778)
  - Tests: Fix thread race condition in test cases for EventThread (GH#803)
  - Windows: Fix building with UNICODE (GH#802)
  - Thread Safety: 'ares_timeout()' was missing lock
  - Fix building with DJGPP (32-bit protected mode DOS) (GH#789)
  - Channel lock needs to be recursive to ensure calls into c-ares functions
    can be made from callbacks, otherwise deadlocks will occur (fixes
    regression introduced in 1.32.0)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32.3-1.0.cf" date="1721908800">- Update to 1.32.3
  This is a bugfix release
  Changes:
  - Prevent complex recursion during query requeuing and connection clean-up
    for stability
  - Better propagate error codes in requeue situations
  - Try to prevent SIGPIPE from being generated and delivered to integrations
  Bugfixes:
  - Windows: Rework EventThread AFD code for better stability (GH#811)
  - Windows: If an IP address was detected to have changed, it could lead to a
    crash due to a bad pointer (regression introduced in 1.31.0)
  - Windows: Use 'QueryPerformanceCounters()' instead of 'GetTickCount64()' for
    better time accuracy (~15ms -&gt; ~1us)
  - Windows 32-bit config change callback needs to be tagged as 'stdcall',
    otherwise it could result in a crash
  - Tests that need accurate timing should not depend on internal symbols as
    there are C++ equivalents in 'std::chrono' (GH#809)
  - Kqueue (MacOS, *BSD): If the open socket count exceeded 8 (unlikely), it
    would try to allocate a new buffer that was too small
  - Missing manpage for 'ares_dns_record_set_id()'
  - Memory leak in 'ares__hosts_entry_to_hostent()' due to allocation strategy
    (GH#824)
  - UDP write failure detected via ICMP unreachable should trigger faster
    failover (GH#821)
  - Fix pycares test case regression due to wrong error code being returned
    (regression from 1.31.0) (GH#820)
  - Fix possible Windows crash during 'ares_destroy()' when using event threads
  - 'ARES_OPT_MAXTIMEOUTMS' wasn't being honored in all cases</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.0-1.0.cf" date="1722945600">- Update to 1.33.0
  This is a feature and bugfix release
  Features:
  - Add DNS cookie support (RFC7873+RFC9018) to help prevent off-path cache
    poisoning attacks (GH#833)
  - Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
    on supported systems (GH#840)
  Changes:
  - Reorganize source tree (GH#822)
  - Refactoring of connection handling to prevent code duplication (GH#839)
  - New dynamic array data structure to prevent simple logic flaws in array
    handling in various code paths (GH#841)
  Bugfixes:
  - 'ares_destroy()' race condition during shutdown due to missing lock (GH#831)
  - Android: Preserve thread name after attaching it to JVM (GH#838)
  - Windows UWP (Store) support fix (GH#845)
- Test for TCP_FASTOPEN_CONNECT rather than MSG_FASTOPEN (GH#850)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.1-1.0.cf" date="1724846400">- Update to 1.33.1
  This is a bugfix release
  Bugfixes:
  - Work around systemd-resolved quirk that returns unexpected codes for single
    label names; also adds test cases to validate the work around works and
    will continue to work in future releases (GH#863)
    See also https://github.com/systemd/systemd/issues/34101
  - Fix sysconfig ndots default value; also adds containerized test case to
    prevent future regressions (GH#862)
  - Fix blank DNS name returning error code rather than valid record for
    commands like: 'adig -t SOA .'; also adds test case to prevent future
    regressions
  - Fix calculation of query times &gt; 1s
  - Fix building on old Linux releases that don't have 'TCP_FASTOPEN_CONNECT'
  - Fix minor Android build warnings (GH#848)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.1-1.0.cf" date="1728907200">- Update to 1.34.1
  This is a feature and bugfix release
  Features:
  - adig: Read arguments from adigrc (GH#856)
  - Add new pending write callback optimization via 'ares_set_pending_write_cb'
    (GH#857)
  * New function 'ares_process_fds()' (GH#875)
  - Failed servers should be probed rather than redirecting queries, which could
    cause unexpected latency (GH#877)
  - adig: Rework command line arguments to mimic dig from bind (GH#890)
  - Add new method for overriding network functions
    'ares_set_socket_function_ex()' to properly support all new functionality
    (GH#894)
  - Fix regression with custom socket callbacks due to DNS cookie support
    (GH#895)
  - ares_socket: Set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets
    (GH#887)
  - URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv()
    (GH#882)
  Changes:
  - Connection handling modularization (GH#857, GH#876)
  - Expose library/utility functions to tools (GH#860)
  - Remove 'ares__' prefix, just use 'ares_' for internal functions' (GH#872)
  Bugfixes:
  - Fix: Potential WIN32_LEAN_AND_MEAN redefinition (GH#869)
  - Fix googletest v1.15 compatibility (GH#874)
  - Fix pkgconfig thread dependencies (GH#884)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.2-1.0.cf" date="1729080000">- Update to 1.34.2
  - This release contains a fix for downstream packages detecting the c-ares
    version based on the contents of the header file rather than the
    distributed pkgconf or cmake files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.3-1.0.cf" date="1731326400">- Update to 1.34.3
  This is a bugfix release
  Changes:
  - Build the release package in an automated way so we can provide provenance
    as per SLSA3 (https://slsa.dev/) (GH#906)
  Bugfixes:
  - Some upstream servers are non-compliant with EDNS options; re-send queries
    without EDNS (GH#911)
  - Android: ≤7 needs sys/system_properties.h
  - Android: CMake needs '-D_GNU_SOURCE' and others (GH#914)
  - TSAN warns on missing lock, but lock isn't actually necessary (GH#915)
  - 'ares_getaddrinfo()' for 'AF_UNSPEC' should retry IPv4 if only IPv6 is
    received
  - 'ares_send()' shouldn't return 'ARES_EBADRESP', it's 'ARES_EBADQUERY'
  - Fix typos in man pages (GH#905)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.4-1.0.cf" date="1734436800">- Update to 1.34.4
  This is a bugfix release
  Changes:
  - QNX Port: Port to QNX 8, add primary config reading support, add CI build
    (GH#934, GH#937, GH#938)
  Bugfixes:
  - Empty TXT records were not being preserved (GH#922)
  - docs: Update deprecation notices for 'ares_create_query()' and
    'ares_mkquery()' (GH#910)
  - license: Some files weren't properly updated (GH#920)
  - Fix bind local device regression from 1.34.0 (GH#929, GH#931, GH#935)
  - CMake: Set policy version to prevent deprecation warnings (GH#932)
  - CMake: Shared and static library names should be the same on unix platforms
    like autotools uses (GH#933)
  - Update to latest autoconf archive macros for enhanced system compatibility
    (GH#936)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.5-1.0.cf" date="1744372800">- Update to 1.34.5
  This is a security release
  Security:
  - CVE-2025-31498: A use-after-free bug has been uncovered in read_answers()
    that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
  Changes:
  - Restore Windows XP support (GH#958)
  Bugfixes:
  - A missing mutex initialization would make busy polling for configuration
    changes (platforms other than Windows, Linux, MacOS) eat too much CPU
    (GH#974)
  - Pkgconfig may be generated wrong for static builds in relation to '-pthread'
    (GH#965)
  - Localhost resolution can fail if only one address family is in '/etc/hosts'
    (GH#947)
- Drop old ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.6-1.0.cf" date="1765540800">- Update to 1.34.6
  This is a security release
  Security:
  - CVE-2025-62408: Another use-after-free bug has been uncovered in
    read_answers() that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5
  Changes:
  - Ignore Windows IDN Search Domains until proper IDN support is added
    (GH#1034)
  Bugfixes:
  - Event Thread could stall when not notified of new queries on existing
    connections that are in a bad state (GH#1032)
  - Fix conversion of invalid service to port number in ares_getaddrinfo()
    (GH#1029)
  - Fix memory leak in ares_uri (GH#1012)
  - Ignore ares_event_configchg_init failures (GH#1009)
  - Use XOR for random seed generation on fallback logic (GH#994)
  - Fix clang build on Windows (GH#996)
  - Fix IPv6 link-local nameservers in /etc/resolv.conf (GH#996)
  - Fix a few build issues on MidnightBSD (GH#983)</changelog>
</package>
<package pkgid="5572a0c58e22c2626a9a2ead96a4cbb8b575b70a480aa67735122b78af43b5cc" name="c-ares" arch="x86_64">
  <version epoch="0" ver="1.34.6" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32.1-1.0.cf" date="1720440000">- Update to 1.32.1
  This is a feature and bugfix release
  Features:
  - Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
    by specifying 'ARES_FLAG_DNS0x20', disabled by default (GH#800)
  - Rework query timeout logic to automatically adjust timeouts based on
    network conditions; the timeout specified is now only used as a hint until
    there is enough history to calculate a more valid timeout (GH#794)
  Changes:
  - Enable Query Cache by default (GH#786)
  - DNS RR TXT strings should not be automatically concatenated as there are
    use cases outside of RFC 7208; in order to maintain ABI compliance, the
    ability to retrieve TXT strings concatenated is retained as well as a new
    API to retrieve the individual strings, which restores behaviour from
    c-ares 1.20.0 (GH#801)
  - Clean up header inclusion logic to make hacking on code easier (GH#797)
  - GCC/Clang: Enable even more strict warnings to catch more coding flaws
  - MSVC: Enable '/W4' warning level (GH#792)
  Bugfixes:
  - Enhance Windows DNS configuration change detection to also detect manual
    DNS configuration changes (GH#785)
  - Various legacy MacOS Build fixes (GH#782)
  - Ndots value of zero in resolv.conf was not being honoured
  - Watt-32 build support had been broken for some time (GH#781)
  - Distribute 'ares_dns_rec_type_tostr' manpage (GH#778)
  - Tests: Fix thread race condition in test cases for EventThread (GH#803)
  - Windows: Fix building with UNICODE (GH#802)
  - Thread Safety: 'ares_timeout()' was missing lock
  - Fix building with DJGPP (32-bit protected mode DOS) (GH#789)
  - Channel lock needs to be recursive to ensure calls into c-ares functions
    can be made from callbacks, otherwise deadlocks will occur (fixes
    regression introduced in 1.32.0)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32.3-1.0.cf" date="1721908800">- Update to 1.32.3
  This is a bugfix release
  Changes:
  - Prevent complex recursion during query requeuing and connection clean-up
    for stability
  - Better propagate error codes in requeue situations
  - Try to prevent SIGPIPE from being generated and delivered to integrations
  Bugfixes:
  - Windows: Rework EventThread AFD code for better stability (GH#811)
  - Windows: If an IP address was detected to have changed, it could lead to a
    crash due to a bad pointer (regression introduced in 1.31.0)
  - Windows: Use 'QueryPerformanceCounters()' instead of 'GetTickCount64()' for
    better time accuracy (~15ms -&gt; ~1us)
  - Windows 32-bit config change callback needs to be tagged as 'stdcall',
    otherwise it could result in a crash
  - Tests that need accurate timing should not depend on internal symbols as
    there are C++ equivalents in 'std::chrono' (GH#809)
  - Kqueue (MacOS, *BSD): If the open socket count exceeded 8 (unlikely), it
    would try to allocate a new buffer that was too small
  - Missing manpage for 'ares_dns_record_set_id()'
  - Memory leak in 'ares__hosts_entry_to_hostent()' due to allocation strategy
    (GH#824)
  - UDP write failure detected via ICMP unreachable should trigger faster
    failover (GH#821)
  - Fix pycares test case regression due to wrong error code being returned
    (regression from 1.31.0) (GH#820)
  - Fix possible Windows crash during 'ares_destroy()' when using event threads
  - 'ARES_OPT_MAXTIMEOUTMS' wasn't being honored in all cases</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.0-1.0.cf" date="1722945600">- Update to 1.33.0
  This is a feature and bugfix release
  Features:
  - Add DNS cookie support (RFC7873+RFC9018) to help prevent off-path cache
    poisoning attacks (GH#833)
  - Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
    on supported systems (GH#840)
  Changes:
  - Reorganize source tree (GH#822)
  - Refactoring of connection handling to prevent code duplication (GH#839)
  - New dynamic array data structure to prevent simple logic flaws in array
    handling in various code paths (GH#841)
  Bugfixes:
  - 'ares_destroy()' race condition during shutdown due to missing lock (GH#831)
  - Android: Preserve thread name after attaching it to JVM (GH#838)
  - Windows UWP (Store) support fix (GH#845)
- Test for TCP_FASTOPEN_CONNECT rather than MSG_FASTOPEN (GH#850)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.1-1.0.cf" date="1724846400">- Update to 1.33.1
  This is a bugfix release
  Bugfixes:
  - Work around systemd-resolved quirk that returns unexpected codes for single
    label names; also adds test cases to validate the work around works and
    will continue to work in future releases (GH#863)
    See also https://github.com/systemd/systemd/issues/34101
  - Fix sysconfig ndots default value; also adds containerized test case to
    prevent future regressions (GH#862)
  - Fix blank DNS name returning error code rather than valid record for
    commands like: 'adig -t SOA .'; also adds test case to prevent future
    regressions
  - Fix calculation of query times &gt; 1s
  - Fix building on old Linux releases that don't have 'TCP_FASTOPEN_CONNECT'
  - Fix minor Android build warnings (GH#848)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.1-1.0.cf" date="1728907200">- Update to 1.34.1
  This is a feature and bugfix release
  Features:
  - adig: Read arguments from adigrc (GH#856)
  - Add new pending write callback optimization via 'ares_set_pending_write_cb'
    (GH#857)
  * New function 'ares_process_fds()' (GH#875)
  - Failed servers should be probed rather than redirecting queries, which could
    cause unexpected latency (GH#877)
  - adig: Rework command line arguments to mimic dig from bind (GH#890)
  - Add new method for overriding network functions
    'ares_set_socket_function_ex()' to properly support all new functionality
    (GH#894)
  - Fix regression with custom socket callbacks due to DNS cookie support
    (GH#895)
  - ares_socket: Set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets
    (GH#887)
  - URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv()
    (GH#882)
  Changes:
  - Connection handling modularization (GH#857, GH#876)
  - Expose library/utility functions to tools (GH#860)
  - Remove 'ares__' prefix, just use 'ares_' for internal functions' (GH#872)
  Bugfixes:
  - Fix: Potential WIN32_LEAN_AND_MEAN redefinition (GH#869)
  - Fix googletest v1.15 compatibility (GH#874)
  - Fix pkgconfig thread dependencies (GH#884)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.2-1.0.cf" date="1729080000">- Update to 1.34.2
  - This release contains a fix for downstream packages detecting the c-ares
    version based on the contents of the header file rather than the
    distributed pkgconf or cmake files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.3-1.0.cf" date="1731326400">- Update to 1.34.3
  This is a bugfix release
  Changes:
  - Build the release package in an automated way so we can provide provenance
    as per SLSA3 (https://slsa.dev/) (GH#906)
  Bugfixes:
  - Some upstream servers are non-compliant with EDNS options; re-send queries
    without EDNS (GH#911)
  - Android: ≤7 needs sys/system_properties.h
  - Android: CMake needs '-D_GNU_SOURCE' and others (GH#914)
  - TSAN warns on missing lock, but lock isn't actually necessary (GH#915)
  - 'ares_getaddrinfo()' for 'AF_UNSPEC' should retry IPv4 if only IPv6 is
    received
  - 'ares_send()' shouldn't return 'ARES_EBADRESP', it's 'ARES_EBADQUERY'
  - Fix typos in man pages (GH#905)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.4-1.0.cf" date="1734436800">- Update to 1.34.4
  This is a bugfix release
  Changes:
  - QNX Port: Port to QNX 8, add primary config reading support, add CI build
    (GH#934, GH#937, GH#938)
  Bugfixes:
  - Empty TXT records were not being preserved (GH#922)
  - docs: Update deprecation notices for 'ares_create_query()' and
    'ares_mkquery()' (GH#910)
  - license: Some files weren't properly updated (GH#920)
  - Fix bind local device regression from 1.34.0 (GH#929, GH#931, GH#935)
  - CMake: Set policy version to prevent deprecation warnings (GH#932)
  - CMake: Shared and static library names should be the same on unix platforms
    like autotools uses (GH#933)
  - Update to latest autoconf archive macros for enhanced system compatibility
    (GH#936)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.5-1.0.cf" date="1744372800">- Update to 1.34.5
  This is a security release
  Security:
  - CVE-2025-31498: A use-after-free bug has been uncovered in read_answers()
    that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
  Changes:
  - Restore Windows XP support (GH#958)
  Bugfixes:
  - A missing mutex initialization would make busy polling for configuration
    changes (platforms other than Windows, Linux, MacOS) eat too much CPU
    (GH#974)
  - Pkgconfig may be generated wrong for static builds in relation to '-pthread'
    (GH#965)
  - Localhost resolution can fail if only one address family is in '/etc/hosts'
    (GH#947)
- Drop old ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.6-1.0.cf" date="1765540800">- Update to 1.34.6
  This is a security release
  Security:
  - CVE-2025-62408: Another use-after-free bug has been uncovered in
    read_answers() that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5
  Changes:
  - Ignore Windows IDN Search Domains until proper IDN support is added
    (GH#1034)
  Bugfixes:
  - Event Thread could stall when not notified of new queries on existing
    connections that are in a bad state (GH#1032)
  - Fix conversion of invalid service to port number in ares_getaddrinfo()
    (GH#1029)
  - Fix memory leak in ares_uri (GH#1012)
  - Ignore ares_event_configchg_init failures (GH#1009)
  - Use XOR for random seed generation on fallback logic (GH#994)
  - Fix clang build on Windows (GH#996)
  - Fix IPv6 link-local nameservers in /etc/resolv.conf (GH#996)
  - Fix a few build issues on MidnightBSD (GH#983)</changelog>
</package>
<package pkgid="67056f9597ce472ffce4ab6f7567115b9c5c3c8559e6298a99933751b7226213" name="c-ares-devel" arch="i686">
  <version epoch="0" ver="1.34.6" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32.1-1.0.cf" date="1720440000">- Update to 1.32.1
  This is a feature and bugfix release
  Features:
  - Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
    by specifying 'ARES_FLAG_DNS0x20', disabled by default (GH#800)
  - Rework query timeout logic to automatically adjust timeouts based on
    network conditions; the timeout specified is now only used as a hint until
    there is enough history to calculate a more valid timeout (GH#794)
  Changes:
  - Enable Query Cache by default (GH#786)
  - DNS RR TXT strings should not be automatically concatenated as there are
    use cases outside of RFC 7208; in order to maintain ABI compliance, the
    ability to retrieve TXT strings concatenated is retained as well as a new
    API to retrieve the individual strings, which restores behaviour from
    c-ares 1.20.0 (GH#801)
  - Clean up header inclusion logic to make hacking on code easier (GH#797)
  - GCC/Clang: Enable even more strict warnings to catch more coding flaws
  - MSVC: Enable '/W4' warning level (GH#792)
  Bugfixes:
  - Enhance Windows DNS configuration change detection to also detect manual
    DNS configuration changes (GH#785)
  - Various legacy MacOS Build fixes (GH#782)
  - Ndots value of zero in resolv.conf was not being honoured
  - Watt-32 build support had been broken for some time (GH#781)
  - Distribute 'ares_dns_rec_type_tostr' manpage (GH#778)
  - Tests: Fix thread race condition in test cases for EventThread (GH#803)
  - Windows: Fix building with UNICODE (GH#802)
  - Thread Safety: 'ares_timeout()' was missing lock
  - Fix building with DJGPP (32-bit protected mode DOS) (GH#789)
  - Channel lock needs to be recursive to ensure calls into c-ares functions
    can be made from callbacks, otherwise deadlocks will occur (fixes
    regression introduced in 1.32.0)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32.3-1.0.cf" date="1721908800">- Update to 1.32.3
  This is a bugfix release
  Changes:
  - Prevent complex recursion during query requeuing and connection clean-up
    for stability
  - Better propagate error codes in requeue situations
  - Try to prevent SIGPIPE from being generated and delivered to integrations
  Bugfixes:
  - Windows: Rework EventThread AFD code for better stability (GH#811)
  - Windows: If an IP address was detected to have changed, it could lead to a
    crash due to a bad pointer (regression introduced in 1.31.0)
  - Windows: Use 'QueryPerformanceCounters()' instead of 'GetTickCount64()' for
    better time accuracy (~15ms -&gt; ~1us)
  - Windows 32-bit config change callback needs to be tagged as 'stdcall',
    otherwise it could result in a crash
  - Tests that need accurate timing should not depend on internal symbols as
    there are C++ equivalents in 'std::chrono' (GH#809)
  - Kqueue (MacOS, *BSD): If the open socket count exceeded 8 (unlikely), it
    would try to allocate a new buffer that was too small
  - Missing manpage for 'ares_dns_record_set_id()'
  - Memory leak in 'ares__hosts_entry_to_hostent()' due to allocation strategy
    (GH#824)
  - UDP write failure detected via ICMP unreachable should trigger faster
    failover (GH#821)
  - Fix pycares test case regression due to wrong error code being returned
    (regression from 1.31.0) (GH#820)
  - Fix possible Windows crash during 'ares_destroy()' when using event threads
  - 'ARES_OPT_MAXTIMEOUTMS' wasn't being honored in all cases</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.0-1.0.cf" date="1722945600">- Update to 1.33.0
  This is a feature and bugfix release
  Features:
  - Add DNS cookie support (RFC7873+RFC9018) to help prevent off-path cache
    poisoning attacks (GH#833)
  - Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
    on supported systems (GH#840)
  Changes:
  - Reorganize source tree (GH#822)
  - Refactoring of connection handling to prevent code duplication (GH#839)
  - New dynamic array data structure to prevent simple logic flaws in array
    handling in various code paths (GH#841)
  Bugfixes:
  - 'ares_destroy()' race condition during shutdown due to missing lock (GH#831)
  - Android: Preserve thread name after attaching it to JVM (GH#838)
  - Windows UWP (Store) support fix (GH#845)
- Test for TCP_FASTOPEN_CONNECT rather than MSG_FASTOPEN (GH#850)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.1-1.0.cf" date="1724846400">- Update to 1.33.1
  This is a bugfix release
  Bugfixes:
  - Work around systemd-resolved quirk that returns unexpected codes for single
    label names; also adds test cases to validate the work around works and
    will continue to work in future releases (GH#863)
    See also https://github.com/systemd/systemd/issues/34101
  - Fix sysconfig ndots default value; also adds containerized test case to
    prevent future regressions (GH#862)
  - Fix blank DNS name returning error code rather than valid record for
    commands like: 'adig -t SOA .'; also adds test case to prevent future
    regressions
  - Fix calculation of query times &gt; 1s
  - Fix building on old Linux releases that don't have 'TCP_FASTOPEN_CONNECT'
  - Fix minor Android build warnings (GH#848)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.1-1.0.cf" date="1728907200">- Update to 1.34.1
  This is a feature and bugfix release
  Features:
  - adig: Read arguments from adigrc (GH#856)
  - Add new pending write callback optimization via 'ares_set_pending_write_cb'
    (GH#857)
  * New function 'ares_process_fds()' (GH#875)
  - Failed servers should be probed rather than redirecting queries, which could
    cause unexpected latency (GH#877)
  - adig: Rework command line arguments to mimic dig from bind (GH#890)
  - Add new method for overriding network functions
    'ares_set_socket_function_ex()' to properly support all new functionality
    (GH#894)
  - Fix regression with custom socket callbacks due to DNS cookie support
    (GH#895)
  - ares_socket: Set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets
    (GH#887)
  - URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv()
    (GH#882)
  Changes:
  - Connection handling modularization (GH#857, GH#876)
  - Expose library/utility functions to tools (GH#860)
  - Remove 'ares__' prefix, just use 'ares_' for internal functions' (GH#872)
  Bugfixes:
  - Fix: Potential WIN32_LEAN_AND_MEAN redefinition (GH#869)
  - Fix googletest v1.15 compatibility (GH#874)
  - Fix pkgconfig thread dependencies (GH#884)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.2-1.0.cf" date="1729080000">- Update to 1.34.2
  - This release contains a fix for downstream packages detecting the c-ares
    version based on the contents of the header file rather than the
    distributed pkgconf or cmake files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.3-1.0.cf" date="1731326400">- Update to 1.34.3
  This is a bugfix release
  Changes:
  - Build the release package in an automated way so we can provide provenance
    as per SLSA3 (https://slsa.dev/) (GH#906)
  Bugfixes:
  - Some upstream servers are non-compliant with EDNS options; re-send queries
    without EDNS (GH#911)
  - Android: ≤7 needs sys/system_properties.h
  - Android: CMake needs '-D_GNU_SOURCE' and others (GH#914)
  - TSAN warns on missing lock, but lock isn't actually necessary (GH#915)
  - 'ares_getaddrinfo()' for 'AF_UNSPEC' should retry IPv4 if only IPv6 is
    received
  - 'ares_send()' shouldn't return 'ARES_EBADRESP', it's 'ARES_EBADQUERY'
  - Fix typos in man pages (GH#905)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.4-1.0.cf" date="1734436800">- Update to 1.34.4
  This is a bugfix release
  Changes:
  - QNX Port: Port to QNX 8, add primary config reading support, add CI build
    (GH#934, GH#937, GH#938)
  Bugfixes:
  - Empty TXT records were not being preserved (GH#922)
  - docs: Update deprecation notices for 'ares_create_query()' and
    'ares_mkquery()' (GH#910)
  - license: Some files weren't properly updated (GH#920)
  - Fix bind local device regression from 1.34.0 (GH#929, GH#931, GH#935)
  - CMake: Set policy version to prevent deprecation warnings (GH#932)
  - CMake: Shared and static library names should be the same on unix platforms
    like autotools uses (GH#933)
  - Update to latest autoconf archive macros for enhanced system compatibility
    (GH#936)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.5-1.0.cf" date="1744372800">- Update to 1.34.5
  This is a security release
  Security:
  - CVE-2025-31498: A use-after-free bug has been uncovered in read_answers()
    that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
  Changes:
  - Restore Windows XP support (GH#958)
  Bugfixes:
  - A missing mutex initialization would make busy polling for configuration
    changes (platforms other than Windows, Linux, MacOS) eat too much CPU
    (GH#974)
  - Pkgconfig may be generated wrong for static builds in relation to '-pthread'
    (GH#965)
  - Localhost resolution can fail if only one address family is in '/etc/hosts'
    (GH#947)
- Drop old ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.6-1.0.cf" date="1765540800">- Update to 1.34.6
  This is a security release
  Security:
  - CVE-2025-62408: Another use-after-free bug has been uncovered in
    read_answers() that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5
  Changes:
  - Ignore Windows IDN Search Domains until proper IDN support is added
    (GH#1034)
  Bugfixes:
  - Event Thread could stall when not notified of new queries on existing
    connections that are in a bad state (GH#1032)
  - Fix conversion of invalid service to port number in ares_getaddrinfo()
    (GH#1029)
  - Fix memory leak in ares_uri (GH#1012)
  - Ignore ares_event_configchg_init failures (GH#1009)
  - Use XOR for random seed generation on fallback logic (GH#994)
  - Fix clang build on Windows (GH#996)
  - Fix IPv6 link-local nameservers in /etc/resolv.conf (GH#996)
  - Fix a few build issues on MidnightBSD (GH#983)</changelog>
</package>
<package pkgid="d355230cbaad54272b77db4825f27b3b48abe115be0d9b5f5510db3273ca9ab4" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.34.6" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32.1-1.0.cf" date="1720440000">- Update to 1.32.1
  This is a feature and bugfix release
  Features:
  - Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
    by specifying 'ARES_FLAG_DNS0x20', disabled by default (GH#800)
  - Rework query timeout logic to automatically adjust timeouts based on
    network conditions; the timeout specified is now only used as a hint until
    there is enough history to calculate a more valid timeout (GH#794)
  Changes:
  - Enable Query Cache by default (GH#786)
  - DNS RR TXT strings should not be automatically concatenated as there are
    use cases outside of RFC 7208; in order to maintain ABI compliance, the
    ability to retrieve TXT strings concatenated is retained as well as a new
    API to retrieve the individual strings, which restores behaviour from
    c-ares 1.20.0 (GH#801)
  - Clean up header inclusion logic to make hacking on code easier (GH#797)
  - GCC/Clang: Enable even more strict warnings to catch more coding flaws
  - MSVC: Enable '/W4' warning level (GH#792)
  Bugfixes:
  - Enhance Windows DNS configuration change detection to also detect manual
    DNS configuration changes (GH#785)
  - Various legacy MacOS Build fixes (GH#782)
  - Ndots value of zero in resolv.conf was not being honoured
  - Watt-32 build support had been broken for some time (GH#781)
  - Distribute 'ares_dns_rec_type_tostr' manpage (GH#778)
  - Tests: Fix thread race condition in test cases for EventThread (GH#803)
  - Windows: Fix building with UNICODE (GH#802)
  - Thread Safety: 'ares_timeout()' was missing lock
  - Fix building with DJGPP (32-bit protected mode DOS) (GH#789)
  - Channel lock needs to be recursive to ensure calls into c-ares functions
    can be made from callbacks, otherwise deadlocks will occur (fixes
    regression introduced in 1.32.0)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32.3-1.0.cf" date="1721908800">- Update to 1.32.3
  This is a bugfix release
  Changes:
  - Prevent complex recursion during query requeuing and connection clean-up
    for stability
  - Better propagate error codes in requeue situations
  - Try to prevent SIGPIPE from being generated and delivered to integrations
  Bugfixes:
  - Windows: Rework EventThread AFD code for better stability (GH#811)
  - Windows: If an IP address was detected to have changed, it could lead to a
    crash due to a bad pointer (regression introduced in 1.31.0)
  - Windows: Use 'QueryPerformanceCounters()' instead of 'GetTickCount64()' for
    better time accuracy (~15ms -&gt; ~1us)
  - Windows 32-bit config change callback needs to be tagged as 'stdcall',
    otherwise it could result in a crash
  - Tests that need accurate timing should not depend on internal symbols as
    there are C++ equivalents in 'std::chrono' (GH#809)
  - Kqueue (MacOS, *BSD): If the open socket count exceeded 8 (unlikely), it
    would try to allocate a new buffer that was too small
  - Missing manpage for 'ares_dns_record_set_id()'
  - Memory leak in 'ares__hosts_entry_to_hostent()' due to allocation strategy
    (GH#824)
  - UDP write failure detected via ICMP unreachable should trigger faster
    failover (GH#821)
  - Fix pycares test case regression due to wrong error code being returned
    (regression from 1.31.0) (GH#820)
  - Fix possible Windows crash during 'ares_destroy()' when using event threads
  - 'ARES_OPT_MAXTIMEOUTMS' wasn't being honored in all cases</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.0-1.0.cf" date="1722945600">- Update to 1.33.0
  This is a feature and bugfix release
  Features:
  - Add DNS cookie support (RFC7873+RFC9018) to help prevent off-path cache
    poisoning attacks (GH#833)
  - Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT
    on supported systems (GH#840)
  Changes:
  - Reorganize source tree (GH#822)
  - Refactoring of connection handling to prevent code duplication (GH#839)
  - New dynamic array data structure to prevent simple logic flaws in array
    handling in various code paths (GH#841)
  Bugfixes:
  - 'ares_destroy()' race condition during shutdown due to missing lock (GH#831)
  - Android: Preserve thread name after attaching it to JVM (GH#838)
  - Windows UWP (Store) support fix (GH#845)
- Test for TCP_FASTOPEN_CONNECT rather than MSG_FASTOPEN (GH#850)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33.1-1.0.cf" date="1724846400">- Update to 1.33.1
  This is a bugfix release
  Bugfixes:
  - Work around systemd-resolved quirk that returns unexpected codes for single
    label names; also adds test cases to validate the work around works and
    will continue to work in future releases (GH#863)
    See also https://github.com/systemd/systemd/issues/34101
  - Fix sysconfig ndots default value; also adds containerized test case to
    prevent future regressions (GH#862)
  - Fix blank DNS name returning error code rather than valid record for
    commands like: 'adig -t SOA .'; also adds test case to prevent future
    regressions
  - Fix calculation of query times &gt; 1s
  - Fix building on old Linux releases that don't have 'TCP_FASTOPEN_CONNECT'
  - Fix minor Android build warnings (GH#848)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.1-1.0.cf" date="1728907200">- Update to 1.34.1
  This is a feature and bugfix release
  Features:
  - adig: Read arguments from adigrc (GH#856)
  - Add new pending write callback optimization via 'ares_set_pending_write_cb'
    (GH#857)
  * New function 'ares_process_fds()' (GH#875)
  - Failed servers should be probed rather than redirecting queries, which could
    cause unexpected latency (GH#877)
  - adig: Rework command line arguments to mimic dig from bind (GH#890)
  - Add new method for overriding network functions
    'ares_set_socket_function_ex()' to properly support all new functionality
    (GH#894)
  - Fix regression with custom socket callbacks due to DNS cookie support
    (GH#895)
  - ares_socket: Set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets
    (GH#887)
  - URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv()
    (GH#882)
  Changes:
  - Connection handling modularization (GH#857, GH#876)
  - Expose library/utility functions to tools (GH#860)
  - Remove 'ares__' prefix, just use 'ares_' for internal functions' (GH#872)
  Bugfixes:
  - Fix: Potential WIN32_LEAN_AND_MEAN redefinition (GH#869)
  - Fix googletest v1.15 compatibility (GH#874)
  - Fix pkgconfig thread dependencies (GH#884)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.2-1.0.cf" date="1729080000">- Update to 1.34.2
  - This release contains a fix for downstream packages detecting the c-ares
    version based on the contents of the header file rather than the
    distributed pkgconf or cmake files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.3-1.0.cf" date="1731326400">- Update to 1.34.3
  This is a bugfix release
  Changes:
  - Build the release package in an automated way so we can provide provenance
    as per SLSA3 (https://slsa.dev/) (GH#906)
  Bugfixes:
  - Some upstream servers are non-compliant with EDNS options; re-send queries
    without EDNS (GH#911)
  - Android: ≤7 needs sys/system_properties.h
  - Android: CMake needs '-D_GNU_SOURCE' and others (GH#914)
  - TSAN warns on missing lock, but lock isn't actually necessary (GH#915)
  - 'ares_getaddrinfo()' for 'AF_UNSPEC' should retry IPv4 if only IPv6 is
    received
  - 'ares_send()' shouldn't return 'ARES_EBADRESP', it's 'ARES_EBADQUERY'
  - Fix typos in man pages (GH#905)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.4-1.0.cf" date="1734436800">- Update to 1.34.4
  This is a bugfix release
  Changes:
  - QNX Port: Port to QNX 8, add primary config reading support, add CI build
    (GH#934, GH#937, GH#938)
  Bugfixes:
  - Empty TXT records were not being preserved (GH#922)
  - docs: Update deprecation notices for 'ares_create_query()' and
    'ares_mkquery()' (GH#910)
  - license: Some files weren't properly updated (GH#920)
  - Fix bind local device regression from 1.34.0 (GH#929, GH#931, GH#935)
  - CMake: Set policy version to prevent deprecation warnings (GH#932)
  - CMake: Shared and static library names should be the same on unix platforms
    like autotools uses (GH#933)
  - Update to latest autoconf archive macros for enhanced system compatibility
    (GH#936)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.5-1.0.cf" date="1744372800">- Update to 1.34.5
  This is a security release
  Security:
  - CVE-2025-31498: A use-after-free bug has been uncovered in read_answers()
    that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-6hxc-62jh-p29v
  Changes:
  - Restore Windows XP support (GH#958)
  Bugfixes:
  - A missing mutex initialization would make busy polling for configuration
    changes (platforms other than Windows, Linux, MacOS) eat too much CPU
    (GH#974)
  - Pkgconfig may be generated wrong for static builds in relation to '-pthread'
    (GH#965)
  - Localhost resolution can fail if only one address family is in '/etc/hosts'
    (GH#947)
- Drop old ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34.6-1.0.cf" date="1765540800">- Update to 1.34.6
  This is a security release
  Security:
  - CVE-2025-62408: Another use-after-free bug has been uncovered in
    read_answers() that was introduced in v1.32.3
    See https://github.com/c-ares/c-ares/security/advisories/GHSA-jq53-42q6-pqr5
  Changes:
  - Ignore Windows IDN Search Domains until proper IDN support is added
    (GH#1034)
  Bugfixes:
  - Event Thread could stall when not notified of new queries on existing
    connections that are in a bad state (GH#1032)
  - Fix conversion of invalid service to port number in ares_getaddrinfo()
    (GH#1029)
  - Fix memory leak in ares_uri (GH#1012)
  - Ignore ares_event_configchg_init failures (GH#1009)
  - Use XOR for random seed generation on fallback logic (GH#994)
  - Fix clang build on Windows (GH#996)
  - Fix IPv6 link-local nameservers in /etc/resolv.conf (GH#996)
  - Fix a few build issues on MidnightBSD (GH#983)</changelog>
</package>
<package pkgid="6172c68960be40c828a32ee4955656a02b96e3bc50a6a1d5c12617861e290a9e" name="cdda2wav" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="1220f176dd8fb95e1a5b4b8e590be3921fa30071961164783445d8c89cc51dd1" name="cdda2wav" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="68ef8ac78a7020ca4e7178ad72ba4affa2e97576fc5ab29048f1d73dcec4eceb" name="cdrecord" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="afda615edaa2d16b837ebf8b3f1f48255047391f395be6f5f4107cd5a2dbeab3" name="cdrecord" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="9ea61eb5476a702ee6141a9ea8c67980ad72932814f1292cd9b1eeb88d8ab2c7" name="cdrtools-devel" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="846488d672ae3d92c5621eb87f519605ef5794fb7a0d8ed937148c43d6359f2c" name="cdrtools-devel" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="e57f55ec884737b452708a0e5668d30ff30182eafbf87aa5b950eff366e6e07a" name="cdrtools-libs" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="aadb81e43ed48eb39366b6b3dc6d12ad6c6d62e02d5ac84122d7c75ba627f9a0" name="cdrtools-libs" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="f41058024cd19e7e2659464448549582ddaf22e39077d2f620e4e9b0737541d4" name="check" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="3a52bb9be8356cfcd2e8b3713848f7031d10bc65cd444f1d6af9d52d995106a3" name="check-checkmk" arch="noarch">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="25e5f7e01dfdfbf6ea3ac179e905aa385e186688bdbb8f1dbaec99a94ed7fe0b" name="check-devel" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="f66e64c26945170d46536a308e4a37896fed23890cc80d090b25566145c89bf7" name="check-packages" arch="noarch">
  <version epoch="0" ver="1.1" rel="4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.1-3" date="1122292800">- started changelog
- rewrote spec file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.1-4" date="1124452800">- sort database files for neater/less output</changelog>
</package>
<package pkgid="ef22194cc879865ec982509011bebc77caa2e5ef25bb3ac2e7a61627f77fdc8f" name="check-static" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="ed7a32d636e5e2600ca5ec23f40c36d8359c8bcec3589c47bf6a618e8604a9af" name="city-fan.org-release" arch="noarch">
  <version epoch="0" ver="3" rel="23.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-14" date="1723809600">- Add support for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-15" date="1730289600">- Fedora 41 rebuild complete and released</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-16" date="1738843200">- Fedora 42 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-17" date="1745236800">- Fedora 42 rebuild complete and released
- Drop support for EOL distros prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-18" date="1751889600">- Include GPG key for Fedora 43 in package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-19" date="1755086400">- Fedora 43 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-20" date="1761739200">- Fedora 43 rebuild complete and released</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-21" date="1770379200">- Fedora 44 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-22" date="1771502400">- Fedora 44 rebuild complete</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-23" date="1777896000">- Fedora 44 released</changelog>
</package>
<package pkgid="e26256a14637feeb621260f97de84a2a6b7f55ed4ed43f050e61fa61405d9559" name="compat-libspf2" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="12"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-3" date="1089892800">- Install the libtool library in the devel package so that
  dependent libraries are found properly.
- Use the libtool supplied with the package rather than the
  system libtool.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-4" date="1090929600">- Use `alternatives' so that the spfquery and spfd programs can co-exist
  with versions from other implementations.
- Ensure thread-safe operation by building with -pthread.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-5" date="1091016000">- Revert -pthread option as it didn't improve anything.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-6" date="1091361600">- Fix case-sensitivity bug.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-7" date="1092657600">- Configure fix to find -lresolv on x64_64
- Portability fixes for x64_64</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-8" date="1098964800">- Downgrade alternatives priority to 20 so that other implementations
  of spfquery will be preferred; there is still a case-sensitivity bug
  in libspf2 and no sign of an imminent fix.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-9" date="1108900800">- Enhance detection of Mandrake build system
- Add support for building compat-libspf2 package
- alternatives is a prerequisite for the -progs subpackage only</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-10" date="1109246400">- Remove Provides: libspf2 in compat mode, which creates implicit conflicts
  with other libspf2 packages
- Further tweaks to detection of Mandrake build system
- Update patch for res_query detection</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-11" date="1245672000">- Remove redundant buildreqs glibc-devel and make
- Replace the huge autotools patch with a much smaller one made by using the
  same version of autoconf as upstream used to create the original
- Define RPM macros in global scope
- Remove Mandrake cruft
- Clarify license as BSD or LGPL version 2.1 or later
- Don't use deprecated "PreReq" tag
- Disable tests by default - don't seem to work any more (defunct DNS data?)
- Don't package static libraries and libtool libraries
- Own directory %{_includedir}/spf2/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-12" date="1330689600">- Make explicit compat-libspf2 package from old libspf2 1.0.4 branch
- Add subpackages so we can build against the compat library
- Provide/Obsolete libspf2 1.0.x
- Don't use macros for commands</changelog>
</package>
<package pkgid="23d4b35bf570277e3b604b4ffbe62ef57cabf39bbd948abd2a508ba2a4d62537" name="compat-libspf2-devel" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="12"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-3" date="1089892800">- Install the libtool library in the devel package so that
  dependent libraries are found properly.
- Use the libtool supplied with the package rather than the
  system libtool.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-4" date="1090929600">- Use `alternatives' so that the spfquery and spfd programs can co-exist
  with versions from other implementations.
- Ensure thread-safe operation by building with -pthread.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-5" date="1091016000">- Revert -pthread option as it didn't improve anything.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-6" date="1091361600">- Fix case-sensitivity bug.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-7" date="1092657600">- Configure fix to find -lresolv on x64_64
- Portability fixes for x64_64</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-8" date="1098964800">- Downgrade alternatives priority to 20 so that other implementations
  of spfquery will be preferred; there is still a case-sensitivity bug
  in libspf2 and no sign of an imminent fix.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-9" date="1108900800">- Enhance detection of Mandrake build system
- Add support for building compat-libspf2 package
- alternatives is a prerequisite for the -progs subpackage only</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-10" date="1109246400">- Remove Provides: libspf2 in compat mode, which creates implicit conflicts
  with other libspf2 packages
- Further tweaks to detection of Mandrake build system
- Update patch for res_query detection</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-11" date="1245672000">- Remove redundant buildreqs glibc-devel and make
- Replace the huge autotools patch with a much smaller one made by using the
  same version of autoconf as upstream used to create the original
- Define RPM macros in global scope
- Remove Mandrake cruft
- Clarify license as BSD or LGPL version 2.1 or later
- Don't use deprecated "PreReq" tag
- Disable tests by default - don't seem to work any more (defunct DNS data?)
- Don't package static libraries and libtool libraries
- Own directory %{_includedir}/spf2/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-12" date="1330689600">- Make explicit compat-libspf2 package from old libspf2 1.0.4 branch
- Add subpackages so we can build against the compat library
- Provide/Obsolete libspf2 1.0.x
- Don't use macros for commands</changelog>
</package>
<package pkgid="3e3ac2e596ca3d5b578bd59a3f8b9cc974e849022779bce1226a44ff2140a0eb" name="compat-libspf2-progs" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="12"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-3" date="1089892800">- Install the libtool library in the devel package so that
  dependent libraries are found properly.
- Use the libtool supplied with the package rather than the
  system libtool.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-4" date="1090929600">- Use `alternatives' so that the spfquery and spfd programs can co-exist
  with versions from other implementations.
- Ensure thread-safe operation by building with -pthread.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-5" date="1091016000">- Revert -pthread option as it didn't improve anything.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-6" date="1091361600">- Fix case-sensitivity bug.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-7" date="1092657600">- Configure fix to find -lresolv on x64_64
- Portability fixes for x64_64</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-8" date="1098964800">- Downgrade alternatives priority to 20 so that other implementations
  of spfquery will be preferred; there is still a case-sensitivity bug
  in libspf2 and no sign of an imminent fix.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-9" date="1108900800">- Enhance detection of Mandrake build system
- Add support for building compat-libspf2 package
- alternatives is a prerequisite for the -progs subpackage only</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-10" date="1109246400">- Remove Provides: libspf2 in compat mode, which creates implicit conflicts
  with other libspf2 packages
- Further tweaks to detection of Mandrake build system
- Update patch for res_query detection</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-11" date="1245672000">- Remove redundant buildreqs glibc-devel and make
- Replace the huge autotools patch with a much smaller one made by using the
  same version of autoconf as upstream used to create the original
- Define RPM macros in global scope
- Remove Mandrake cruft
- Clarify license as BSD or LGPL version 2.1 or later
- Don't use deprecated "PreReq" tag
- Disable tests by default - don't seem to work any more (defunct DNS data?)
- Don't package static libraries and libtool libraries
- Own directory %{_includedir}/spf2/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.4-12" date="1330689600">- Make explicit compat-libspf2 package from old libspf2 1.0.4 branch
- Add subpackages so we can build against the compat library
- Provide/Obsolete libspf2 1.0.x
- Don't use macros for commands</changelog>
</package>
<package pkgid="816d6424b2b48edc7f4b484c06fdd83d0a52e071c68744c266277a4f53e9fbb7" name="contagged" arch="noarch">
  <version epoch="0" ver="0.8.0" rel="6.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8.0-5" date="1642507200">- Rebase code using actively-maintained fork at https://github.com/bob4os/contagged
- Drop support for old distributions prior to Fedora 19
  - Drop support for Apache httpd 2.2
  - Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8.0-6" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="2786b1bb1b30353532c85d2a5f67d85904b266731dc07db668535e1b04e247a4" name="curl" arch="i686">
  <version epoch="0" ver="8.17.0" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12.1-1.0.cf" date="1739448000">- Update to 8.12.1
  - All: Remove FIXME and TODO comments
  - asyn-thread: Fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: Fix HTTPS RR crash
  - asyn-thread: Fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: Survive a c-ares channel set to NULL
  - build: Add tool_hugehelp.c into IBMi build
  - checksrc.pl: Warn on FIXME/TODO comments
  - cmake/Find: Set '&lt;Modulename&gt;_FOUND' for compatibility when found via 'pkg-config'
  - cmake: Add integration tests, run them in CI
  - cmake: Always reference OpenSSL and ZLIB via imported targets
  - cmake: Avoid unnecessary '-L' for implicit link dirs
  - cmake: Drop 'LDAP_DEPRECATED=1' macro, to sync with autotools
  - cmake: Fix 'HAVE_GETHOSTBYNAME_R_*' detections with 'CURL_WERROR=ON'
  - cmake: Fix to detect 'HAVE_OPENSSL_SRP' in MSVC UWP builds
  - cmake: Fix/add missing feature detections for Windows/MS-DOS
  - cmake: Initialize variables where missing
  - cmake: Library order fixes for picky linkers (e.g. binutils 'ld')
  - cmake: Normalize before matching paths with syspaths
  - cmake: Respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: Respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - cmake: Save a line with 'CMAKE_C_IMPLICIT_LINK_DIRECTORIES' exclusion
  - cmake: Tidy up string append and list prepend syntax
  - configure/cmake: Check for realpath
  - configure/cmake: Set asyn-rr as feature only if httpsrr is enabled
  - content_encoding: #error on too old zlib
  - curl_global_sslset.md: Add SSL backend names
  - CURLOPT_SSH_KNOWNHOSTS.md: Strongly recommend using this
  - CURLSHOPT_SHARE.md: Adjust for the new SSL session cache
  - docs: Better explain multi-part byte range behaviour
  - docs: Use valid example domain names
  - generate.bat: Remove curl_get_line.c from the curlx file list
  - header.md: Mention 'Authorization:' and 'Cookie:' special treatment
  - imap: TLS upgrade fix
  - INTERNALS: Fix c-ares, as we actually support 1.6.0 or later
  - ldap: Drop support for legacy Novell LDAP SDK
  - lib: include necessary headers for 'inet_ntop'/'inet_pton'
  - lib: Silence LibreSSL collision warning on non-MSVC Windows
  - libssh2: Comparison is always true because rc &lt;= -1
  - libssh2: Raise lowest supported version to 1.2.8
  - libssh: Drop support for libssh older than 0.9.0
  - libssh: Silence '-Wconversion' with a cast (Windows 32-bit)
  - netrc: return code clean-up, fix missing file error
  - openssl-quic: Ignore ciphers for h3
  - openssl: Fix out of scope variables in goto
  - pop3: TLS upgrade fix
  - runtests: Fix the disabling of the memory tracking
  - runtests: Quote commands to support paths with spaces
  - scache: Add magic checks
  - smb: Silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - SPONSORS.md: Clarify that we don't promise goods or services
  - test1516: Avoid failure due to spaces in path
  - test2080: Simplify, avoid the null byte
  - tests: Fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
  - tidy-up: Make per-file 'ARRAYSIZE' macros global as 'CURL_ARRAYSIZE'
  - tool_cfgable: Sort struct fields by size, use bitfields for booleans
  - tool_getparam: Add "TLS required" flag for each such option
  - tool_progress: Fix percent output of large parallel transfers
  - tool_ssls: Switch to tool-specific get_line function
  - verbose.md: Mention how carriage-return might occur in headers
  - vquic: Make the "disable GSO" use infof, not failf
  - vtls: Fix multissl-init
  - vtsl: Eliminate 'data-&gt;state.ssl_scache'
  - wakeup_write: Make sure the eventfd write sends eight bytes
  - wolfssl: Silence compiler warning (MSVC 2019), simplify existing
- Use libssh2 rather than libssh for Fedora 28 and 29 builds since their
  versions of libssh are too old for curl now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.13.0-1.0.cf" date="1743595200">- Update to 8.13.0
  - curl: Add write-out variable 'tls_earlydata'
  - curl: Make --url support a file with URLs
  - gnutls: Set priority via --ciphers
  - IMAP: Add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: Add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: Add support for TLSv1.3 early data
  - rustls: Add support for CERTINFO
  - rustls: Add support for SSLKEYLOGFILE
  - rustls: Support ECH with DoH lookup for config
  - rustls: Support native platform verifier
  - var: Add a '64dec' function that can base64 decode a string
  - wolfssl: TLS early data support
  - addrinfo: Add curl macro to avoid redefining foreign symbols
  - asyn-thread: Avoid the separate 'struct resdata' alloc
  - asyn-thread: Avoid the separate curl_mutex_t alloc
  - asyn-thread: Do not allocate thread_data separately
  - asyn-thread: Remove 'status' from struct Curl_async
  - autotools: Fix 'dllmain.c' in unity builds
  - autotools: Fix 'libtest' bundle to depend on 'FIRSTFILES'
  - autotools: Use 'CURLDEBUG' to exclude TrackMemory code from unity
  - aws_sigv4: Cannot be used for proxy
  - aws_sigv4: Merge repeated headers in canonical request
  - aws_sigv4: Use strparse more for parsing
  - base64: Drop 'BUILDING_CURL' macro, always include in tests/server
  - build: Add Windows CE / CeGCC support, with CI jobs
  - build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls)
  - build: Do not apply curl debug macros to 'tests/server' by default
  - build: Drop unused 'getpart' tool
  - build: Enable -Wjump-misses-init for GCC 4.5+
  - build: Enable '-Wcast-qual', fix or silence compiler warnings
  - build: Fix compiler warnings in feature detections
  - build: Replace Curl_ prefix with curlx_ for functions used in servers
  - build: Set '-O3' and tune WinCE in CI, fix 'getpart', 'vtls_scache' fallouts
  - build: Set 'HAVE_STDINT_H' if 'stdint.h' is available
  - build: Set 'HAVE_WRITABLE_ARGV' for Apple cross-builds
  - build: Silence bogus '-Wconversion' warnings with gcc 5.1-5.4
  - build: Silence mingw32ce C99 format warnings, simplify CI
  - build: Tidy-ups around 'inet_pton'
  - c-ares httpsrr: Fix ifdef
  - c-ares: Error out for unsupported versions, drop unused macros
  - ca-native.md: Sync with CURLSSLOPT_NATIVE_CA
  - cf-socket: Deduplicate Windows Vista detection
  - cf-socket: Remove empty switch
  - client writer: Handle pause before decoding
  - cmake: 'CURL_LIBDIRS' improvements (upstreamed from vcpkg)
  - cmake: 'SHARE_LIB_OBJECT=ON' requires CMake 3.12 or newer
  - cmake: Add custom command scripts as dependencies where missing
  - cmake: Add pre-fill for Unix, enable in GHA/macos, verify pre-fills
  - cmake: Add shell completion support
  - cmake: Allow 'CURL_STATIC_CRT' with shared libcurl and no curl exe
  - cmake: Allow 'CURL_STATIC_CRT' with UCRT VS2015+ builds
  - cmake: Allow empty 'IMPORT_LIB_SUFFIX', add suffix collision detection
  - cmake: Avoid '-Wnonnull' warning in 'HAVE_FSETXATTR_5' detection
  - cmake: Disable HTTPS-proxy as a feature if proxy is disabled
  - cmake: Drop 'CURL_DISABLE_TESTS' option
  - cmake: Drop 'HAVE_C_FLAG_Wno_long_double' logic for ancient Apple gcc
  - cmake: Drop 'HAVE_IN_ADDR_T' from pre-fill too
  - cmake: Drop two stray TLS feature checks for wolfSSL
  - cmake: Exclude '-MP' for 'clang-cl' again
  - cmake: Fix 'HAVE_ATOMIC'/'HAVE_STDATOMIC' pre-fill for clang-cl
  - cmake: Fix clang-tidy builds to verify tests, fix fallouts
  - cmake: Fix detection pre-fills for iOS
  - cmake: Fix ECH detection in custom-patched OpenSSL
  - cmake: Fix typo in ECH config error msg
  - cmake: Hide empty 'MINGW64_VERSION' output for mingw32ce
  - cmake: Improve httpd detection for pytest
  - cmake: Mention 'insecure' in the debug build warning
  - cmake: Misc tidy-ups
  - cmake: Pre-fill known type sizes for Windows OSes
  - cmake: Replace CMAKE_COMPILER_IS_GNUCC with CMAKE_C_COMPILER_ID
  - cmake: Replace exec_program() with execute_process()
  - cmake: Restrict static CRT builds to static curl exe, test in CI
  - cmake: Sync cutoff version with autotools for picky option '-ftree-vrp'
  - cmake: Sync OpenSSL(-fork) feature checks with './configure'
  - cmake: Unity mode optimization for non-'CURLDEBUG' 'testdeps' targets
  - CODE_STYLE: Readability and banned functions
  - config-win32: Set 'HAVE_STDINT_H' where available
  - configure: Call the blocking resolver "blocking", not "default"
  - configure: Fix ECH detection with MultiSSL
  - configure: Silence compiler warnings in feature checks, drop duplicates
  - configure: Tidy up shell completion rules
  - configure: Use 'curl_cv_apple' variable
  - conn: Eliminate 'conn-&gt;now'
  - conn: Fix connection reuse when SSL is optional
  - conncache: Eliminate 'conn-&gt;destination_len' as premature optimization
  - contributors.sh: Lowercase 'github' for consistency
  - contrithanks.sh: Update docs/THANKS in place
  - cookie: Do prefix matching case-sensitively
  - cookie: Minor parser simplification
  - cookie: Simplify invalid_octets()
  - core: Stop redefining 'E*' macros on Windows, map 'EACCES', related fixes
  - curl.h: Change some enums to defines with L suffix
  - curl.h: Convert CURLUSESSL* names to defines
  - curl.h: Stop defining non-curl '__has_declspec_attribute'
  - curl.h: Switch 'CURL_HTTP_VERSION*' enums to long constants
  - curl/system.h: Drop leftover comment about 32 bit curl_off_t
  - curl: Add my_setopt_long() and _offt()
  - curl_msh3: Remove verify bypass from DEBUGBUILDs
  - curl_setup: Drop 'ERANGE' (for WinCE), no longer used
  - curl_setup_once: Drop 'E*' macro redefines unused (with winsock2)
  - curl_setup_once: Stop redefining 'ENAMETOOLONG' to winsock2 error code
  - curl_trc: Fix build with CURL_DISABLE_VERBOSE_STRINGS
  - curl_ws_recv.md: Expand a little on the fragments the API delivers
  - CURLMOPT_SOCKETFUNCTION.md: Add advice for socket callback invocation
  - CURLOPT_HTTPHEADER.md: Add comments to the example
  - CURLOPT_HTTPHEADER.md: Rephrases
  - curltime: Use libcurl time functions in src and tests/server
  - DISABLED: Add 313 for sectransp (move from GHA/macos)
  - docs/cmdline-opts: Use imperative form
  - docs: Adapt to removed --with-random
  - docs: Add FD_ZERO to curl_multi_fdset example
  - docs: Bump 'rustls' to 0.14.1
  - docs: Correct argument names and URL redirection
  - docs: Minor edits to please the new spellchecker regime
  - docs: Rework RUSTLS install instructions
  - docs: Unify HTTP version style in --help output
  - docs: Vulnerabilities in debug code are not eligible for a bounty
  - doh: Improve HTTPS RR svcparams parsing
  - doh: Remove wrong but unreachable exit path from doh_decode_rdata_name
  - dynbuf: Assert init on free
  - easy: Drop 'break' after 'return'
  - easy: Fix warning about possible comma misuse
  - eventfd: Allow use on all CPUs
  - examples: Prefer 'return' over 'exit()' (cont.)
  - ftp/sftp: strdup data info memory
  - ftp: Fix comment
  - gnutls: Fix connection state check on handshake
  - gnutls: Fix use of pkcs11 urls for keys/certs
  - gtls: Fix uninitialized variable
  - hash: Use single linked list for entries
  - hostip: Don't use alarm() for DoH resolves
  - hostip: Make CURLOPT_RESOLVE support replacing IPv6 addresses
  - http2: Add on_invalid_frame callback for error detection
  - http2: Detect session being closed on ingress handling
  - http2: Enhance error messages on Curl_dyn* upon receiving headers
  - http2: Fix stream assignemnt for pushes
  - http2: Reset stream on response header error
  - HTTP3.md: Only speak about minimal versions
  - http: Convert parsers to strparse
  - http: Fix NTLM info message typo
  - http: Fix the auth check
  - http: Make the RTSP version check stricter
  - http: Negotiation and room for alt-svc/https RR to navigate
  - http: Remove a HTTP method size restriction
  - http: Version negotiation
  - http_chunks: Replace a strofft call with curl_str_hex
  - https-rr: Implementation improvements
  - httpsrr: Fix port detection
  - httpsrr: Fix the HTTPS-RR threaded-resolver build combo
  - INFRASTRUCTURE.md: Add IRC and Matrix details
  - INSTALL-CMAKE.md: CMake usage updates
  - INSTALL-CMAKE.md: mention 'ZLIB_USE_STATIC_LIBS'
  - lib1156: Pass longs to 'curl_easy_setopt()'
  - lib1560: Test set path containing LR or CR
  - lib2302: Fix crash due to stack overflow on MSVC and clang Windows
  - lib696: Fix building on Windows in non-bundle mode
  - lib: Better optimized casecompare() and ncasecompare()
  - lib: Clear up CURLRES_ASYNCH vs. USE_CURL_ASYNC use
  - lib: Fix two curlx_strtoofft invokes
  - lib: Rename curlx_strtoofft to Curl_str_numblanks()
  - lib: Replace while(ISBLANK()) loops with Curl_str_passblanks()
  - lib: Simplify more white space loops
  - lib: strtoofft.h header cleanup
  - lib: Use Curl_str_* instead of strtok_r()
  - lib: Use Curl_str_number() for parsing decimal numbers
  - libssh2: Fix freeing of resources in disconnect
  - libssh2: Fix memory leak in 'SSH_SFTP_REALPATH' state
  - libssh2: Fix to ignore 'known_hosts' if SHA256 host public key is set
  - libssh2: Print user with verbose flag
  - libssh2: Show crypto backend in the verbose connect log
  - libssh: Fix freeing of resources in disconnect
  - libssh: Fix scp large file upload for 32-bit size_t systems
  - libtest/first.c: Remove the Test: stderr output for unity builds
  - libtest/libprereq.c: Set CURLOPT_FOLLOWLOCATION with a long
  - managen: Accept more markdown-quote-markers
  - managen: Correct the warning for un-escaped '&lt;' and '&gt;'
  - mbedtls: Re-enable an error check
  - memdebug.h: Avoid '-Wredundant-decls' with an extra guard
  - memdebug: Drop dynamic allocation from 'curl_dbg_log()'
  - mprintf: Switch three number parsers to use strparse
  - mqtt: Convert sendleftovers to dynbuf
  - msvc: Drop support for VS2005 and older
  - multi: Call protocol handler done() if PROTOCONNECT or later
  - multi: Event based rework
  - multi: Kill off remaining internal handles in curl_multi_cleanup
  - multi: Start the loop over when handles are removed
  - multi_ev: Fixes regarding connection shutdowns
  - ngtcp2: Do not iterate over multi handles
  - ntlm: Merge ntlm.h into ntlm.c
  - openssl-quic: Do not iterate over multi handles
  - openssl: Check return value of X509_get0_pubkey
  - openssl: Drop support for old OpenSSL/LibreSSL versions
  - openssl: Fix crash on missing cert password
  - openssl: Fix pkcs11 URI checking for key files
  - openssl: Remove bad 'goto's into other scope
  - prox/preproxy.md: Document argument within &lt;brackets&gt;
  - pytest: Test negotiate with http proxy
  - quiche: Do not iterate over multi handles
  - RELEASE-PROCEDURE.md: Explain release candidates
  - request: Clear sendbuf_hds_len when resetting request bufq
  - resolve: Fix building without Unix sockets and 'CURLDEBUG'
  - runtests: Accept 'CURL_DIRSUFFIX' without ending slash
  - runtests: Add feature-based filtering
  - runtests: Check and report if 'diff' tool is missing
  - runtests: Drop logic calling the 'handle' tool (Windows)
  - runtests: Drop recognizing 'winssl' as Schannel
  - runtests: Drop ref to unused external function
  - runtests: Fix bundled test invocation with '-g' option
  - runtests: Fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs
  - runtests: Fix test key format for libssh2 WinCNG (and others)
  - runtests: Generate certs dynamically, bump to EC-256, tidy up
  - runtests: Recognize AWS-LC as OpenSSL
  - runtests: Rewrite 'genserv.sh' in Perl
  - runtests: Support multi-target cmake, drop workarounds from CI
  - runtests: Support running tests under wine or qemu (cont.)
  - runtests: Support running tests under wine or qemu
  - runtests: Use 'setfacl' on Cygwin/MSYS, if present
  - rustls: Add ECH support with string ECH config
  - rustls: Cap maximum allowed CRL file size to 8MB
  - rustls: Support ECH GREASE
  - rustls: Use client cert and key if available
  - schannel: Deduplicate Windows Vista detection
  - schannel: Enable ALPN support under WINE 6.0+
  - schannel: Enable ALPN with MinGW, fix ALPN for UWP builds
  - schannel: Guard ALPN init code to ALPN builds
  - scripts/managen: Fix option 'single'
  - scripts/managen: Fix parsing of markdown code sections
  - scripts: Update completion.pl to parse options from docs
  - sectransp: Add support for HTTP/2 in gcc builds
  - sendf: Client reader line conversion: do not change data-&gt;state.infilesize
  - setopt: Illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: Remove unnecessary void pointer typecasts
  - setopt: Setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - shutdowns: Split shutdown handling from connection pool
  - socks: Remove bad assert from do_SOCKS5()
  - src: Avoid strdup on platforms not doing UTF-8 conversions
  - src: Clean-up ISBLANK vs. ISSPACE
  - src: Remove Curl_ prefix from tool-specific function
  - src: Remove final uses of Curl_ symbol prefixes in tool code
  - src: Replace strto[u][ld] with curlx_str_ parsers
  - ssh: Consider sftp quote commands case sensitive
  - sshserver.pl: Adjust 'AuthorizedKeysFile2' cutoff version
  - sshserver.pl: Use Perl 'chmod'
  - sshserver: Fix excluding obsolete client config lines
  - ssl session cache: Add exportable flag
  - SSLCERTS: List support for SSL_CERT_FILE and SSL_CERT_DIR
  - strparse: Make Curl_str_number() return error for no digits
  - strparse: Switch the API to work on 'const char *'
  - strparse: Switch to curl_off_t as base data type
  - test1022: Add support for rc releases
  - test1167: Catch #defines with extra whitespace
  - test313: Disable CRL test for Schannel due to lack of support and flakiness
  - test313: Disable via '&lt;features&gt;' for backends without CRL support
  - test489: Set output dir
  - test612: SCP 'rm' the uploaded remote file (not the local source), unignore in CI
  - test613: Make it pass on Windows, fix postprocess, unignore in CI
  - test615: Fix for Cygwin, unignore in CI
  - tests/certs: Clean up
  - tests/server: Drop unused 'base64.pl'
  - tests/server: Fix to check against winsock2 error codes on Windows
  - tests/server: Give global 'path' variable a more descriptive name
  - tests/server: Make the signal handler signal-safe
  - tests/server: Replace 'errno' with 'SOCKERRNO' in sockfilt, socksd, sws
  - tests/server: Replace 'strerror' with 'sstrerror' in socksd
  - tests/server: Support bundle binary
  - tests/server: Sync 'wait_ms()' with the libcurl implementation
  - tests/server: Use 'curlx_str_numblanks()' to avoid 'errno'
  - tests/servers.pm: Remove unused variable 'portrange'
  - tests: Build non-debug unit tests with autotools, run them
  - tests: Fix comment in lib533
  - tests: Fix enum/int confusion, fix autotools 'CFLAGS' for 'servers'
  - tests: Make sure 'commands.log' is generated in the correct logdir
  - tests: Mark tests 1631, 1632 flaky
  - tests: Reformat error messages to avoid tripping MSBuild
  - tests: Remove base64 encoded sections
  - tests: Remove unused variables
  - tests: Replace remaining non-ASCII bytes with hex markup
  - tftpd: Prefix TFTP protocol error 'E*' constants with 'TFTP_'
  - tidy-up: Align MSYS2/Cygwin codepaths, follow Cygwin 'MAX_PID' bump
  - tidy-up: Delete, comment or scope C macros reported unused
  - tidy-up: Drop unused 'CURL_INADDR_NONE' macro and 'in_addr_t' type
  - tidy-up: Use 'CURL_ARRAYSIZE()'
  - timediff: Fix comment for curlx_mstotv()
  - timediff: Remove unnecessary double typecast
  - tool_dirhie: Create dir hierarchy without strtok
  - tool_getparam: Clear sensitive arguments better
  - tool_getparam: Do parse_upload_flags without the alloc/free
  - tool_getparam: Parse --trace-config without strdup()/free()
  - tool_getparam: parse_header() without strtok
  - tool_operate: Change "1 retries" to "1 retry"
  - tool_operate: Fail SSH transfers without server auth
  - tool_operate: Fix pluralization of seconds
  - tool_operate: Remove unnecessary (long) typecasts
  - tool_paramhlp: Do --proto parsing without strtok
  - tool_parsecfg: Make my_get_line skip comments and newlines
  - tool_setopt: Reduce use of "code hiding" macros
  - url: Call protocol handler's disconnect in Curl_conn_free
  - urlapi: Fix redirect from file:// with query, and simplify
  - urlapi: Remove percent encoded dot sequences from the URL path
  - urlapi: Simplify junkscan
  - urldata: Remove 'hostname' from struct Curl_async
  - variable.md: Clarify 'trim' example
  - vquic: Obey IOV_MAX
  - vtls: Fix compiler warnings seen with gcc 7.3.0 and mbedTLS
  - winbuild: Reduce command-line length by dropping whitespace
  - windows: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - windows: Drop code and curl manifest targeting W2K and older
  - windows: Fix issues detected by clang-tidy, and some more
  - wolfssh: Fix freeing of resources in disconnect
  - wolfssh: Retrieve the error using wolfSSH_get_error
  - wolfssl: Fix CA certificate multiple location import
  - wolfssl: Fix unused variable warning
  - wolfssl: Warn if CA native import option is ignored
  - wolfssl: When using PQ KEM, use ML-KEM, not Kyber
  - ws: Corrected curlws_cont to reflect its documented purpose
  - ws: Fix and extend CURLWS_CONT handling
  - zlib: Bump minimum to 1.2.5.2 (was: 1.2.0.4)
- BR: openssl, needed for cert generation in test suite
- Drop "compat" build support in spec
- Drop legacy ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.0.cf" date="1748433600">- Update to 8.14.0
  - mqtt: Send ping at upkeep interval
  - schannel: Handle pkcs12 client certificates containing CA certificates
  - TLS: Add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: Import v2025.04.20 script and documentation
  - websocket: Add option to disable auto-pong reply
  - _SEEALSO.md: Remove spaces around command and man page section
  - asny-thrdd: Fix detach from running thread
  - asnyc-thrdd: Explain how this is okay with a comment
  - async resolver code improvements
  - async-threaded resolver: Use ref counter
  - async: DoH improvements
  - autotools: Detect 'wolfSSL_set_quic_use_legacy_code' like cmake does
  - autotools: Install shell completion files on cross build
  - aws-sigv4: Allow a blank string
  - build: Check required rustls-ffi version
  - build: Enable gcc-12/13+, clang-10+ picky warnings
  - build: Enable gcc-15 picky warnings
  - certs: Drop unused 'default_bits' from '.prm' files
  - cf-https-connect: Use the passed-in dns struct pointer
  - cf-socket: Fix FTP accept connect
  - cfilters: Remove assert
  - cmake/FindNGTCP2: Simplify multi-pkg-config detection
  - cmake: Append picky warnings to 'CMAKE_REQUIRED_FLAGS' as string
  - cmake: Avoid 'target is imported but not globally visible' when consuming
    libcurl with old cmake
  - cmake: Do not install 'mk-ca-bundle' script and manpage
  - cmake: Enable '-Wall' for MSVC when 'PICKY_COMPILER=ON'
  - cmake: Extend integration tests
  - cmake: Fix 'fish' install directory detection via 'pkg-config'
  - cmake: Fix nghttp3 static linking with 'USE_OPENSSL_QUIC=ON'
  - cmake: Fix option() and mark_as_advanced() mixed order
  - cmake: Fix shell completion install when just one flavour is enabled
  - cmake: Honour individual picky option overrides found in 'CMAKE_C_FLAGS'
  - cmake: Install shell completions for cross-builds
  - cmake: Link 'crypt32' for OpenSSL feature detection
  - cmake: Merge 'CURL_WERROR' logic into 'PickyWarnings.cmake'
  - cmake: Prefer 'COMPILE_OPTIONS' over 'CMAKE_C_FLAGS' for custom C options
  - cmake: Quotes, whitespace, use 'VERSION_GREATER_EQUAL'
  - cmake: Revert 'CURL_LTO' behaviour for multi-config generators
  - cmake: Set 'BUILDING_LIBCURL' directly for unit test targets
  - cmake: Stop deleting '-W&lt;n&gt;' from 'CMAKE_C_FLAGS' (MSVC)
  - cmake: Tidy up and document feature detections in dependencies
  - cmake: Use 'CMAKE_COMPILE_WARNING_AS_ERROR' if available
  - cmake: Use 'INCLUDE_DIRECTORIES' prop to specify local header dirs
  - cmake: Use 'LIB_NAME' in 'curl-config.cmake.in'
  - cmake: Use absolute paths for completion targets
  - cmake: Use the 'LINK_OPTIONS' property with CMake 3.13+
  - configure: Catch asking for double resolver without https-rr
  - configure: Fix --disable-rt
  - configure: Restore link checks
  - configure: Suppress command not found for brew
  - conncache: Make Curl_cpool_init return void
  - connect: Shutdown timer fix
  - content_encoding: Transfer-Encoding parser improvements
  - CONTRIBUTE: Add project guidelines for AI use
  - contrithanks.sh: Drop set -e
  - cpool/cshutdown: Force close connections under pressure
  - curl: Fix memory leak when -h is used in config file
  - curl: Only warn once for --manual in manual-disabled build
  - curl_get_line: Handle lines ending on the buffer boundary
  - curl_krb5: Only use functions if FTP is still enabled
  - curl_multibyte: Fix up low-level calls, include in unity builds
  - curl_osslq: Remove a leftover debug fprintf() call
  - curl_url_get.md: Don't call it normalized
  - curl_version_info.md: Clarify ssl_version for MultiSSL
  - CURLMOPT_TIMERFUNCTION.md: Correct the example
  - CURLOPT_ERRORBUFFER.md: Buffer is read only after curl takes ownership
  - CURLOPT_FOLLOWLOCATION.md: Switch to GET =&gt; no body
  - CURLOPT_READFUNCTION.md: Mention the seek callback
  - CURLOPT_XFERINFOFUNCTION.md: Fix the callback return type in example
  - curlx: Move the docs to docs/internals/
  - DEPRECATE.md: Drop support for VS2008
  - DEPRECATE.md: Drop Windows CE support
  - dist: Drop duplicate entry from 'CMAKE_DIST'
  - dns_entry: Move from conn to data-&gt;state
  - Dockerfile: Update debian:bookworm-slim Docker digest to 90522ee
  - docs/INSTALL.md: Drop reference to removed configure option
  - docs/libcurl: Fix type and prototype problems in examples
  - docs/libcurl: Make examples build with picky compiler options
  - docs/libcurl: Mention sensitive data/headers
  - docs: Add missing return statement in examples
  - docs: Fix incorrect shell substitution in docker run example command
  - docs: Fix typo in retry.md
  - docs: Update distros links
  - doh: httpsrr fix
  - doh: Make sure CURLOPT_PROTOCOLS is set with a "long" arg
  - doh: Reduce the DNS request buffer size
  - easy_reset: Fix dohfor_mid member
  - ECH: Reference the OpenSSL ECH feature branch
  - etag-save.md: Mention how using both options is a good idea
  - eventfd: Fix feature guards
  - formdata: Clean-ups
  - ftp: Fix bug in failed init
  - ftp: Fix race in upload handling
  - ftplistparser: Add two overflow preventions
  - ftplistparser: Split up into more functions
  - generate.bat: Exclude curlinfo.c from legacy VS projects
  - genserv.pl: Fail with a message if 'openssl' is missing or failing
  - headers: Enforce a max number of response header to accept
  - headers: Set an error message on illegal response headers
  - hostip: Fix build without threaded-resolver and without DoH
  - hostip: Show the correct name on proxy resolve error
  - http2: Fix stream window size after unpausing
  - HTTP3.md: Fix incorrect variable placeholders
  - http: Fix a build error when all auths are disabled
  - http: Fix HTTP/2 handling of TE request header using "trailers"
  - http: In alt-svc negotiation only allow supported HTTP versions
  - http_aws_sigv4: Add additional verbose log statements
  - http_aws_sigv4: Improve sigv4 url encoding and canonicalization
  - http_chunks: Narrow variable scope for 'trlen'
  - http_negotiate: Fix non-SSL build with GSSAPI
  - https-connect: Fix httpsrr target check
  - HTTPSRR.md: Clarify somewhat
  - if2ip: Build the function also if FTP is present
  - imap: Remove redundant condition
  - INSTALL-CMAKE.md: Fix typo
  - INSTALL.md: Update the minimal libcurl size example
  - KNOWN_BUGS: Fix link in sivg4 issue 16.3
  - lib/src/docs/test: Improve curl_easy_setopt() calls
  - lib1560: Use hex notation, drop non-ASCII exception
  - lib3026: Drop DLL pre-load perf mitigation for old mingw
  - lib: Add const to clientwriter tables
  - lib: Drop curlx_getpid, use fake pid in SMB
  - lib: Include files using known path
  - lib: Make Curl_easyopts const
  - lib: Unify conversions to/from hex
  - libcurl-tutorial.md: Fix read callback explanation
  - libssh: Add NULL check for Curl_meta_get()
  - libssh: Fix memory leak
  - libssh: Remove a condition that always equals false
  - libtest/first: Stop defining MEMDEBUG_NODEFINES
  - libtests: Define CURL_DISABLE_DEPRECATION first
  - make: Clean tests better
  - mbedtls: TLS 1.3 is max when mbedtls has 1.3 support
  - metahash: Add asserts to help analyzers
  - mk-ca-bundle.pl: Follow redirects
  - mk-ca-bundle: Switch URLs to GitHub versions
  - mkhelp: Fix to not generate a line-ending space in some cases
  - mqtt: Use conn/easy meta hash
  - multi: Do transfer book keeping using mid
  - multi: init_do(): Check result
  - netrc: Avoid NULL deref on weird input
  - netrc: Avoid strdup NULL
  - netrc: Deal with null token better
  - ngtcp2: Clarify ignoring of result
  - openssl-quic: Avoid potential '-Wnull-dereference', add assert
  - openssl-quic: Fix printf mask
  - openssl-quic: Fix shutdown when stream not open
  - openssl: Enable builds for *both* engines and providers
  - openssl: Set the cipher string before doing private cert
  - parsedate: Provide Curl_wkday also for GnuTLS builds
  - processhelp.pm: Always call 'taskkill' with '-f' (force)
  - processhelp.pm: Avoid potential endless loop, log more (Windows)
  - progress: Avoid integer overflow when gathering total transfer size
  - pytest tls: Extend coverage (fixes WolfSSL cert validation, CVE-2025-4947)
  - pytest-xdist: pytest in parallel
  - pytest: Add pinnedpubkey test cases (fixes WolfSSL pinning, CVE-2025-5025)
  - pytest: Give parameterised tests better ids for read- and parsability
  - pytest: Make test_07_22 more lenient to exit codes
  - quic: No local idle connection timeout, ngtcp2 keep-alive
  - rand: Update comment on Curl_rand_bytes weak random
  - RELEASE-PROCEDURE.md: Release candidate git tagging explained
  - rtsp: Remove redundant condition
  - runtests: Add retry option to reduce flakiness
  - runtests: Fix indentation
  - runtests: Recognize lowercase 'windows' in 'curl -V'
  - runtests: Remove server verification after start
  - runtests: Split 'SSH_PWD' into 'SCP_PWD' and 'SFTP_PWD', and more
  - rustls: Make max size of cert and key reasonable
  - sasl: Give help when unable to select AUTH
  - scripts: completion.pl: Sort the completion file for all shells
  - scripts: Drop unused import, formatting
  - scripts: Fix --opts-dir help in completion.pl
  - scripts: Fix perl indentation, whitespace, semicolons
  - sectransp: Fix building for macOS Sierra and older
  - setopt: Provide info for CURLE_BAD_FUNCTION_ARGUMENT
  - smb: Avoid integer overflow on weird input date
  - socket: Use accept4 when available
  - socketpair: Support pipe2 where available
  - spacecheck.pl: Check for non-ASCII chars, fix fallouts
  - spacecheck.pl: Verify 'tests/data/test*' for non-ASCII chars
  - src: Drop strcase.[ch] from tool builds
  - src: Include memdebug.h consistently with angle brackets &lt;&gt;
  - src: Rename curlx_safefree to tool_safefree
  - test1173.pl: Whitelist some option-looking names that aren't options
  - test1658: Add unit test for the HTTPS RR decoder
  - test: Make unittest 1308 into a libtest
  - tests/ech_tests.sh: Sync shebang with rest of bash scripts
  - tests/FILEFORMAT.md: Clarify %hex[] formatting
  - tests/FILEFORMAT.md: Document the aws feature
  - tests/README.md: Document --test-duphandle
  - tests/README.md: List the openssl tool among the prerequisites
  - tests/server/dnsd: Basic DNS server for test suite
  - tests/server: Check for 'stream != NULL' in mqttd
  - tests/server: Fix typo in comment
  - tests/server: Stop using libcurl string comparisons
  - tests/server: Stop using libcurl's printf functions
  - tests/serverhelp: Remove last remnants of http-pipe server
  - tests/tunit: Make a separate directory for tool-based unit tests
  - tests: Add aws feature to the related tests
  - tests: Add https-mtls server to force client auth
  - tests: Fix some test tag mismatches
  - tests: Mark ipfs tests to require ipfs
  - tests: Move a boolean variable out of the path section
  - tests: Prefer '--insecure' over '-k'
  - tests: Provide all non-ascii data hex encoded
  - tests: Remove some unused test case sections
  - tests: Require IPv6 for 1265, 1324, 2086
  - tests: Separate tunit tests from unit tests more
  - tests: Stop using libcurl's strdup
  - tests: Unify test case keywords
  - tests: Use a more portable null device path
  - TODO: Remove "nicer lacking perl message"
  - tool_cb_write.c: Handle EINTR on flush
  - tool_getparam: Clear argument only when needed
  - tool_operate: Make retrycheck() a separate function
  - tool_operate: When retrying, only truncate regular files
  - tool_paramhlp: Avoid integer overflow in secs2ms()
  - tool_parsecfg: Make get_line handle lines ending on the buffer boundary
  - typecheck-gcc.h: Fix the typechecks
  - urlapi: Redirecting to "" is considered fine
  - urlapi: Remove unneeded guards around PUNY2IDN
  - urldata: Remove the unused struct field 'hide_progress'
  - VERSIONS: List all past releases
  - vquic: Consistent name for the stream struct across backends
  - vquic: Init for every call to recvmsg
  - vtls: Avoid NULL deref on bad PEM input
  - vtls: Fix build with ssl but without http
  - VULN-DISCLOSURE-POLICY: Use of weak algos
  - winbuild: Add the deprecation warning to the README
  - winbuild: curl_get_line is not used for tool builds
  - windows: Fix builds targeting WinXP, test it in CI
  - wolfssl: Fix to enable ALPN when available
  - ws: Fix the header replace check
  - ws: Store protocol context as connection meta data</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.1.cf" date="1748520000">- Fix regression: curl_multi_add_handle() returning OOM when using more than
  400 handles (GH#17475)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.1-1.0.cf" date="1749038400">- Update to 8.14.1
  - asyn-thrdd: Fix clean-up when RR fails due to OOM
  - autotools: Recognize more Linux targets when setting '-D_GNU_SOURCE'
  - BUG-BOUNTY.md: Mention the medium bounty amount in 2025
  - cmake: Fix missed version number for multi-pkg-config detections
  - cmdline-docs: Mention HTTP resumed uploads to be shaky
  - curl: make -N handled correctly
  - curl: Upload from '.' fix
  - dllmain: Exclude from Cygwin builds
  - docs/tests: Remove mention of hyper
  - docs: Fix typos
  - ftp: Fix teardown of DATA connection in done
  - http: Fail early when rewind of input failed when following redirects
  - license: Update some copyright links to curl.se
  - memanalyze.pl: Fix getaddrinfo/freeaddrinfo checks
  - misc: Fix spelling
  - misc: We write *an* IPv6 address
  - multi: Fix add_handle resizing
  - spelling: 'a' vs. 'an'
  - spelling: Call it null-terminate consistently
  - test1510: Fix expectation
  - tests: Await portfile to be complete
  - tests: Fix checks for https-mtls proto
  - tests: Improve server start reliability
  - tests: Move test docs into /docs
  - tests: Re-enable 1510, document heimdal memleak
  - tests: Test mtls also w/ clientAuth EKU only
  - tests: Test mtls with --insecure
  - tls BIOs: Handle BIO_CTRL_EOF correctly
  - tool_getparam: Make --no-anyauth not be accepted
  - tool_getparam: Refactored, simplified
  - tool_getparam: Remove two nextarg NULL checks
  - VULN-DISCLOSURE-POLICY.md: The distros list wants ≤ 7 days embargo
  - wolfssl: Fix sending of early data
  - ws: Handle blocked sends better (CVE-2025-5399)
  - ws: Tests and fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-1.0.cf" date="1752667200">- Update to 8.15.0
  - TLS: Remove support for Secure Transport and BearSSL
  - altsvc: Accept 'clear' without semicolon as well
  - asyn-ares: Remove redundant NULL check
  - asyn-thrdd: Free the previous name before strdup'ing the new
  - autotools: Detect and link 'brotlicommon' library for brotli
  - autotools: Drop '$top_builddir/src' from src header path
  - autotools: Drop headers from src mk-unity rules (fixup)
  - autotools: Drop no longer necessary '--srcdir' unity options
  - autotools: Drop redundant 'Makefile.inc' from 'EXTRA_DIST' in src
  - autotools: Simplify configuration in tests, examples
  - bufq: Change read/write signatures
  - bufq: Remove the unused Curl_bufq_unwrite function
  - build: Assume 'sys/socket.h', 'sys/time.h' on non-Windows (as in 'curl/curl.h')
  - build: Drop 'HAVE_SYS_SOCKET_H' and 'HAVE_SYS_TIME_H' macros
  - build: Drop explicit curlx from hdr paths, refer headers with 'curlx/' prefix
  - build: Drop unused variables in tests
  - build: Fix libcurltool with cmake and tunits, related tidy-ups
  - build: Split '.c' and '.h' file lists in tests
  - build: Stop checking for 'sys/stat.h'
  - build: stubgss tidy-ups (in tests)
  - build: Sync build scripts between client/libtest
  - build: Tidy up 'Makefile.inc' use in lib and src
  - build: Tidy up header paths, use srcdir where possible
  - cf-socket: Make socket data_pending a no-op
  - checksrc-all: Rewrite in Perl, remove 'checksrc.bat'
  - checksrc: Reduce exceptions, apply again to curlx
  - cmake/FindGSS: Fix processing C header path options
  - cmake/FindGSS: Initialize result variables
  - cmake: 'curl_add_clang_tidy_test_target' tidy-ups
  - cmake: Build 'stubgss' library for libtests to match autotools
  - cmake: Check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
  - cmake: Configure c-ares header directory in project root (was: lib)
  - cmake: Document OpenSSL and ngtcp2 crypto lib custom variables
  - cmake: Drop never-propagated C macros
  - cmake: Drop passing redundant 'CURL_STATICLIB' in examples and clients
  - cmake: Drop redundant macro from test clients
  - cmake: Drop reference to future variable
  - cmake: Enable soversion by default for OpenHarmony OS
  - cmake: Fix 'curl_add_clang_tidy_test_target' when no '-D' option
  - cmake: Fix generator expression in docs/examples
  - cmake: Gather options recursively in 'curl_add_clang_tidy_test_target'
  - cmake: Make docs depend on support files
  - cmake: Move 'OUTPUT' argument in the 'add_custom_command()' line
  - cmake: Omit clang-tidy on internal libs curlu and curltool
  - cmake: Replace 'cmakelint' with 'cmake-lint' from 'cmakelang', fix issues
  - cmake: Replace the way clang-tidy verifies tests, fix issues found
  - cmake: Simplify handling generated 'lib1521.c' in libtests
  - cmake: Sync 'target_link_libraries()' order in tests more
  - cmake: Sync tests scripts by using the variable 'BUNDLE'
  - cmake: Sync tests scripts with each other and autotools (more)
  - cmake: Use 'target_link_options()' when available
  - config-win32: Fix default targets, shorten macro logic
  - configure: Order LDAP after the SSL libraries
  - connect: Drop unused struct member
  - connection: Clarify 'transport'
  - connection: Eliminate member 'remote_addr'
  - curl-config: Fix whitespace in usage text
  - curl.h: Make CURL_IPRESOLVE_* symbols defined as longs
  - curl.h: Make CURLSSLOPT_* symbols defined as longs
  - curl.h: Remove the "RESERVED" error codes
  - curl: Implement non-blocking STDIN read on Windows
  - curl: Improve non-blocking STDIN performance
  - curl: Remove the global argument from many functions
  - curl: Unify pointer names to global config
  - curl_get_line: Make sure lines end with newline
  - curl_memory.h: Fix to undefine 'accept4'
  - curl_path: Make SFTP handle a path like /~ properly
  - curlinfo: Provide the 'digest' feature
  - CURLSHOPT_SHARE.md: Mention multi-threading requires callbacks
  - DEPRECATE.md: Add VS2005 removal to the list
  - digest: Fix build with disabled digest auth
  - DISTROS: Update NixOS link
  - docs,tests: Fix english grammar "allow to" -&gt; "allow &lt;something&gt; to"
  - docs/CONTRIBUTE: Fix broken link
  - docs/examples: Add ftp-delete.c
  - docs: Beef up examples/websocket.c
  - docs: Fix broken link in CODE_REVIEW.md
  - docs: Fix broken link in INSTALL.md
  - docs: Fix docs for CURLOPT_PREQUOTE after #17616
  - docs: Fix documentation of connect_only 2
  - docs: Fix two typos
  - docs: Mention that the netrc file works without port numbers
  - docs: Mention the as-is concept generically
  - docs: Note SSLS-EXPORT feature in -ssl-sessions doc
  - docs: Reflect that delimiter-separated capath is only OpenSSL
  - docs: Sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
  - docs: Warn about lifetime in CURLOPT_CLOSESOCKET*
  - easy: Fix comment-documentation
  - easygetopt: Fix curl logo in header comment
  - firefox-db2pem: Avoid use of eval in script
  - ftp: Fix prequotes for a directory in URL
  - ftplistparser: Split parse_unix into sub-functions
  - h2_serverpush: Fix file handle leaks reported by clang-tidy
  - h3: Fix query of concurrent streams
  - http/3: Report handshake with version and cipher as for TCP connections
  - http2: Do not delay RST send on aborted transfer
  - http2: Fix var types in is_alive() implementations
  - http: Explicitly ignore parsing errors for Retry-After
  - http: Fix build with cookies and HSTS disabled
  - http_ntlm: Protect against null deref
  - http_ntlm: Remove unreachable code
  - INSTALL.md: Cygwin details and add source code link
  - ldap: Avoid automake caching issues with LDAP library names
  - ldap: If ldap-lib is sufficient, add it to LIBS
  - ldap: Initial support for --with-ldap option
  - lib2082: Drop 'typedef struct'
  - lib: Address singleuse issues
  - lib: Avoid reusing unclean connection
  - lib: Drop two interim macros in favor of native libcurl API calls
  - lib: Fix unused parameter/function compiler warnings
  - lib: Make 'CURLX_SET_BINMODE()' and use it
  - lib: Make 'curlx_wait_ms()' and use it
  - lib: Replace scache no-op macros with '#ifdef'
  - lib: Stop 'time()' debug overrides at the end of source in altsvc, hsts
  - lib: Unify recv/send function signatures
  - libcurl-env.md: Drop LOGNAME, USER and NTLMUSER
  - libcurl.m4: Fix indentation
  - libssh2: Remove use of 'initialised' for clean-up
  - libssh: De-complex myssh_statemach_act()
  - libssh: Fix readdir issues
  - libtests: Make tests 1503, 1504, 1505 use the 1502 binary
  - libtests: More header tidy-ups
  - libtests: Stop building the same source multiple times
  - memdebug.h: #undef 'fclose' before defining it
  - memdebug.h: Eliminate global macro 'CURL_MT_LOGFNAME_BUFSIZE'
  - memdebug: Include in unity batch
  - memory: Stop overriding unused 'wcsdup()'/'_wcsdup()' system functions
  - memory: Tidy up '_tcsdup()' override
  - misc: Fix typos
  - mk-lib1521: Replace 'printf' with 'curl_mprintf'
  - multi: Add dirty bitset
  - multi: Do not expire a blocked transfer
  - multi: Fix polling with pending input
  - multi: Remove careful bounds check as coverity says it is not needed
  - multi: xfer table/bitset, handle limits
  - ngtcp2: Fix coverity warning about result handling
  - openssl: Enable readahead
  - openssl: Error on SSL_ERROR_SYSCALL
  - openssl: Fix handling of buffered data
  - openssl: Fix openssl engine use
  - openssl: Fix pkcs11 provider available check
  - os400: Upgrade ILE/RPG bindings with latest definitions
  - pingpong: On disconnect, check for unflushed pingpong state
  - projects/build-openssl.bat: Remove
  - pytest: test_07_70, weaken early data check
  - pytest: Adapt for runs with openssl-1.1.1
  - pytest: Disable test_07_37 and test_07_36 with openssl's quic
  - quic: Implement CURLINFO_TLS_SSL_PTR
  - RELEASE-PROCEDURE.md: Update docs/VERSIONS
  - runtests.pl: Fix sprintf() using one too many %s
  - runtests: Fix 'LD_PRELOAD' detection for cmake-built curl binaries
  - runtests: Support memory-limits per test
  - rustls: Apply memory function overrides, fixing an ECH buffer free
  - rustls: Don't try printing the not provided file
  - schannel: Allow partial chains for manual peer verification
  - schannel: Drop Windows 2000 compatibility logic
  - scorecard: Flame graphs and documentation
  - SCP/SFTP: Avoid busy loop after EAGAIN
  - scripts: Fix to quote the copyright email address
  - socks: Fix query when filter context is null
  - system.h: Remove some macros
  - test1117: Reduce write delays
  - test1175: Fix to run, and fix documentation issues detected
  - test1222: Fix for out-of-tree and no-libcurl-manual builds
  - test1499, 1599: use '%LOGDIR'
  - test1499: Verify two chunked responses on reused connection
  - test1596: Let test pass after year 2036
  - test1706: Pass include directory to 'managen' for out-of-tree builds
  - tests/client: Drop autotools logic no longer necessary
  - tests/client: Use 'curl_mfprintf()'
  - tests/dnsd: Read config from file
  - tests/http/clients: Drop hack and use 'curl_setup.h' again
  - tests/http/clients: Move to tests/client
  - tests/http/requirements: Remove multipart
  - tests/libtest: Call 'curlx_now_init()' for unit 1399, 2600 (Windows)
  - tests/libtest: Drop 'TEST_HANG_TIMEOUT' redefinition hack
  - tests/libtest: Drop a checksrc exception
  - tests/libtest: Use 'curltime' from curlx
  - tests/server/util.c: Include netinet/in6.h
  - tests/server: De-dupe/merge three 'sockdaemon()' clones into one
  - tests/server: Drop 'memdebug.h'
  - tests/server: Make all global vars/funcs static
  - tests/server: Move memory init to 'memptr.c'
  - tests/servers.pm: Add more ways to figure out current user
  - tests: Always make bundles, adapt build and tests
  - tests: Bundle http clients, de-dupe, enable for MSVC
  - tests: Constify, make consts static
  - tests: Drop 'BUNDLE_SRC' variable
  - tests: Drop mk-bundle exceptions
  - tests: Drop unused or redundant includes
  - tests: Drop useless "nodist_SOURCES" assignments
  - tests: Fail torture if !valgrind&amp;threaded resolver
  - tests: Fix 1301, 1308 to fail on error
  - tests: Fix 'BUNDLE' variable references in 'Makefile.am'
  - tests: Make all names &lt; 75 characters long
  - tests: Make individual test sources compile cleanly
  - tests: Make sshserver less verbose
  - tests: Move 'curlcheck.h' to libtest as 'unitcheck.h'
  - tests: Move GSS-API dynamic stub into debug-mode libcurl
  - tests: torture: Don't duplicate valgrind command
  - tests: Use %b64[] to base64 data
  - tests: Use %b64[] to base64 data in 2056, 2057
  - tftpd: Use 'CURLMIN()' macro
  - tidy-up: Replace '&lt;memdebug.h&gt;' with '"memdebug.h"' (src, units)
  - tls: Remove Curl_ssl false_start
  - tool1621: Drop unused internal libcurl headers
  - tool_getparam: Fix --ftp-pasv
  - tool_operate: Fix return code when --retry is used but not triggered
  - tool_paramhelp: Fix language in comments
  - top-complexity: Lower max allowed complexity threshold to 90
  - unit tests: Extract "private" prototypes at build time
  - unit1302: Expand the base64 encode/decode tests
  - url: Fix connection lifetime checks
  - url: Fix NULL deref with bad password when no user is provided
  - urlapi: Simplify and split into sub functions
  - urlapi: Use uppercase hex encoding
  - vauth: Move auth structs to conn meta data
  - vtls: Change send/recv signatures of tls backends
  - vtls: Fix a copy-pasted early data comment typo
  - vtls: Log rustls negotiated KEX group name
  - vtls: Prefer ciphersuite to cipher in msgs
  - vtls: Prefer rustls-ffi ciphersuite name API
  - VULN-DISCLOSURE-POLICY.md: Fix typos
  - VULN-DISCLOSURE-POLICY: All reports should be disclosed
  - VULN-DISCLOSURE-POLICY: Exclude not installed software
  - VULN-DISCLOSURE-POLICY: Minor language polish
  - warnless: Drop parts of the 'read'/'write' preprocessor hack (Windows)
  - warnless: Replace 'read()'/'write()' wrapper functions with macros (Windows)
  - windows: Drop redundant 'curl_wcsdup_callback' callback
  - windows: Fixup 'fopen()' in 'CURLDEBUG' builds
  - windows: Reduce/stop loading DLLs at runtime
  - wolfssl: Add support for ML_KEM hybrids
  - ws: Drop redundant 'CURL_EXTERN' from function definitions
  - xfer: Manage pause bits</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.0.cf" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.1.cf" date="1753617600">- Fix dependency on CA bundle when we don't use the old one at
  /etc/pki/tls/certs/ca-bundle.crt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
</package>
<package pkgid="916133387f6fd61d15bfdf5793a6899eeeadcf6513c5d55245cc4ca5c7c20a55" name="curl" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12.1-1.0.cf" date="1739448000">- Update to 8.12.1
  - All: Remove FIXME and TODO comments
  - asyn-thread: Fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: Fix HTTPS RR crash
  - asyn-thread: Fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: Survive a c-ares channel set to NULL
  - build: Add tool_hugehelp.c into IBMi build
  - checksrc.pl: Warn on FIXME/TODO comments
  - cmake/Find: Set '&lt;Modulename&gt;_FOUND' for compatibility when found via 'pkg-config'
  - cmake: Add integration tests, run them in CI
  - cmake: Always reference OpenSSL and ZLIB via imported targets
  - cmake: Avoid unnecessary '-L' for implicit link dirs
  - cmake: Drop 'LDAP_DEPRECATED=1' macro, to sync with autotools
  - cmake: Fix 'HAVE_GETHOSTBYNAME_R_*' detections with 'CURL_WERROR=ON'
  - cmake: Fix to detect 'HAVE_OPENSSL_SRP' in MSVC UWP builds
  - cmake: Fix/add missing feature detections for Windows/MS-DOS
  - cmake: Initialize variables where missing
  - cmake: Library order fixes for picky linkers (e.g. binutils 'ld')
  - cmake: Normalize before matching paths with syspaths
  - cmake: Respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: Respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - cmake: Save a line with 'CMAKE_C_IMPLICIT_LINK_DIRECTORIES' exclusion
  - cmake: Tidy up string append and list prepend syntax
  - configure/cmake: Check for realpath
  - configure/cmake: Set asyn-rr as feature only if httpsrr is enabled
  - content_encoding: #error on too old zlib
  - curl_global_sslset.md: Add SSL backend names
  - CURLOPT_SSH_KNOWNHOSTS.md: Strongly recommend using this
  - CURLSHOPT_SHARE.md: Adjust for the new SSL session cache
  - docs: Better explain multi-part byte range behaviour
  - docs: Use valid example domain names
  - generate.bat: Remove curl_get_line.c from the curlx file list
  - header.md: Mention 'Authorization:' and 'Cookie:' special treatment
  - imap: TLS upgrade fix
  - INTERNALS: Fix c-ares, as we actually support 1.6.0 or later
  - ldap: Drop support for legacy Novell LDAP SDK
  - lib: include necessary headers for 'inet_ntop'/'inet_pton'
  - lib: Silence LibreSSL collision warning on non-MSVC Windows
  - libssh2: Comparison is always true because rc &lt;= -1
  - libssh2: Raise lowest supported version to 1.2.8
  - libssh: Drop support for libssh older than 0.9.0
  - libssh: Silence '-Wconversion' with a cast (Windows 32-bit)
  - netrc: return code clean-up, fix missing file error
  - openssl-quic: Ignore ciphers for h3
  - openssl: Fix out of scope variables in goto
  - pop3: TLS upgrade fix
  - runtests: Fix the disabling of the memory tracking
  - runtests: Quote commands to support paths with spaces
  - scache: Add magic checks
  - smb: Silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - SPONSORS.md: Clarify that we don't promise goods or services
  - test1516: Avoid failure due to spaces in path
  - test2080: Simplify, avoid the null byte
  - tests: Fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
  - tidy-up: Make per-file 'ARRAYSIZE' macros global as 'CURL_ARRAYSIZE'
  - tool_cfgable: Sort struct fields by size, use bitfields for booleans
  - tool_getparam: Add "TLS required" flag for each such option
  - tool_progress: Fix percent output of large parallel transfers
  - tool_ssls: Switch to tool-specific get_line function
  - verbose.md: Mention how carriage-return might occur in headers
  - vquic: Make the "disable GSO" use infof, not failf
  - vtls: Fix multissl-init
  - vtsl: Eliminate 'data-&gt;state.ssl_scache'
  - wakeup_write: Make sure the eventfd write sends eight bytes
  - wolfssl: Silence compiler warning (MSVC 2019), simplify existing
- Use libssh2 rather than libssh for Fedora 28 and 29 builds since their
  versions of libssh are too old for curl now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.13.0-1.0.cf" date="1743595200">- Update to 8.13.0
  - curl: Add write-out variable 'tls_earlydata'
  - curl: Make --url support a file with URLs
  - gnutls: Set priority via --ciphers
  - IMAP: Add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: Add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: Add support for TLSv1.3 early data
  - rustls: Add support for CERTINFO
  - rustls: Add support for SSLKEYLOGFILE
  - rustls: Support ECH with DoH lookup for config
  - rustls: Support native platform verifier
  - var: Add a '64dec' function that can base64 decode a string
  - wolfssl: TLS early data support
  - addrinfo: Add curl macro to avoid redefining foreign symbols
  - asyn-thread: Avoid the separate 'struct resdata' alloc
  - asyn-thread: Avoid the separate curl_mutex_t alloc
  - asyn-thread: Do not allocate thread_data separately
  - asyn-thread: Remove 'status' from struct Curl_async
  - autotools: Fix 'dllmain.c' in unity builds
  - autotools: Fix 'libtest' bundle to depend on 'FIRSTFILES'
  - autotools: Use 'CURLDEBUG' to exclude TrackMemory code from unity
  - aws_sigv4: Cannot be used for proxy
  - aws_sigv4: Merge repeated headers in canonical request
  - aws_sigv4: Use strparse more for parsing
  - base64: Drop 'BUILDING_CURL' macro, always include in tests/server
  - build: Add Windows CE / CeGCC support, with CI jobs
  - build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls)
  - build: Do not apply curl debug macros to 'tests/server' by default
  - build: Drop unused 'getpart' tool
  - build: Enable -Wjump-misses-init for GCC 4.5+
  - build: Enable '-Wcast-qual', fix or silence compiler warnings
  - build: Fix compiler warnings in feature detections
  - build: Replace Curl_ prefix with curlx_ for functions used in servers
  - build: Set '-O3' and tune WinCE in CI, fix 'getpart', 'vtls_scache' fallouts
  - build: Set 'HAVE_STDINT_H' if 'stdint.h' is available
  - build: Set 'HAVE_WRITABLE_ARGV' for Apple cross-builds
  - build: Silence bogus '-Wconversion' warnings with gcc 5.1-5.4
  - build: Silence mingw32ce C99 format warnings, simplify CI
  - build: Tidy-ups around 'inet_pton'
  - c-ares httpsrr: Fix ifdef
  - c-ares: Error out for unsupported versions, drop unused macros
  - ca-native.md: Sync with CURLSSLOPT_NATIVE_CA
  - cf-socket: Deduplicate Windows Vista detection
  - cf-socket: Remove empty switch
  - client writer: Handle pause before decoding
  - cmake: 'CURL_LIBDIRS' improvements (upstreamed from vcpkg)
  - cmake: 'SHARE_LIB_OBJECT=ON' requires CMake 3.12 or newer
  - cmake: Add custom command scripts as dependencies where missing
  - cmake: Add pre-fill for Unix, enable in GHA/macos, verify pre-fills
  - cmake: Add shell completion support
  - cmake: Allow 'CURL_STATIC_CRT' with shared libcurl and no curl exe
  - cmake: Allow 'CURL_STATIC_CRT' with UCRT VS2015+ builds
  - cmake: Allow empty 'IMPORT_LIB_SUFFIX', add suffix collision detection
  - cmake: Avoid '-Wnonnull' warning in 'HAVE_FSETXATTR_5' detection
  - cmake: Disable HTTPS-proxy as a feature if proxy is disabled
  - cmake: Drop 'CURL_DISABLE_TESTS' option
  - cmake: Drop 'HAVE_C_FLAG_Wno_long_double' logic for ancient Apple gcc
  - cmake: Drop 'HAVE_IN_ADDR_T' from pre-fill too
  - cmake: Drop two stray TLS feature checks for wolfSSL
  - cmake: Exclude '-MP' for 'clang-cl' again
  - cmake: Fix 'HAVE_ATOMIC'/'HAVE_STDATOMIC' pre-fill for clang-cl
  - cmake: Fix clang-tidy builds to verify tests, fix fallouts
  - cmake: Fix detection pre-fills for iOS
  - cmake: Fix ECH detection in custom-patched OpenSSL
  - cmake: Fix typo in ECH config error msg
  - cmake: Hide empty 'MINGW64_VERSION' output for mingw32ce
  - cmake: Improve httpd detection for pytest
  - cmake: Mention 'insecure' in the debug build warning
  - cmake: Misc tidy-ups
  - cmake: Pre-fill known type sizes for Windows OSes
  - cmake: Replace CMAKE_COMPILER_IS_GNUCC with CMAKE_C_COMPILER_ID
  - cmake: Replace exec_program() with execute_process()
  - cmake: Restrict static CRT builds to static curl exe, test in CI
  - cmake: Sync cutoff version with autotools for picky option '-ftree-vrp'
  - cmake: Sync OpenSSL(-fork) feature checks with './configure'
  - cmake: Unity mode optimization for non-'CURLDEBUG' 'testdeps' targets
  - CODE_STYLE: Readability and banned functions
  - config-win32: Set 'HAVE_STDINT_H' where available
  - configure: Call the blocking resolver "blocking", not "default"
  - configure: Fix ECH detection with MultiSSL
  - configure: Silence compiler warnings in feature checks, drop duplicates
  - configure: Tidy up shell completion rules
  - configure: Use 'curl_cv_apple' variable
  - conn: Eliminate 'conn-&gt;now'
  - conn: Fix connection reuse when SSL is optional
  - conncache: Eliminate 'conn-&gt;destination_len' as premature optimization
  - contributors.sh: Lowercase 'github' for consistency
  - contrithanks.sh: Update docs/THANKS in place
  - cookie: Do prefix matching case-sensitively
  - cookie: Minor parser simplification
  - cookie: Simplify invalid_octets()
  - core: Stop redefining 'E*' macros on Windows, map 'EACCES', related fixes
  - curl.h: Change some enums to defines with L suffix
  - curl.h: Convert CURLUSESSL* names to defines
  - curl.h: Stop defining non-curl '__has_declspec_attribute'
  - curl.h: Switch 'CURL_HTTP_VERSION*' enums to long constants
  - curl/system.h: Drop leftover comment about 32 bit curl_off_t
  - curl: Add my_setopt_long() and _offt()
  - curl_msh3: Remove verify bypass from DEBUGBUILDs
  - curl_setup: Drop 'ERANGE' (for WinCE), no longer used
  - curl_setup_once: Drop 'E*' macro redefines unused (with winsock2)
  - curl_setup_once: Stop redefining 'ENAMETOOLONG' to winsock2 error code
  - curl_trc: Fix build with CURL_DISABLE_VERBOSE_STRINGS
  - curl_ws_recv.md: Expand a little on the fragments the API delivers
  - CURLMOPT_SOCKETFUNCTION.md: Add advice for socket callback invocation
  - CURLOPT_HTTPHEADER.md: Add comments to the example
  - CURLOPT_HTTPHEADER.md: Rephrases
  - curltime: Use libcurl time functions in src and tests/server
  - DISABLED: Add 313 for sectransp (move from GHA/macos)
  - docs/cmdline-opts: Use imperative form
  - docs: Adapt to removed --with-random
  - docs: Add FD_ZERO to curl_multi_fdset example
  - docs: Bump 'rustls' to 0.14.1
  - docs: Correct argument names and URL redirection
  - docs: Minor edits to please the new spellchecker regime
  - docs: Rework RUSTLS install instructions
  - docs: Unify HTTP version style in --help output
  - docs: Vulnerabilities in debug code are not eligible for a bounty
  - doh: Improve HTTPS RR svcparams parsing
  - doh: Remove wrong but unreachable exit path from doh_decode_rdata_name
  - dynbuf: Assert init on free
  - easy: Drop 'break' after 'return'
  - easy: Fix warning about possible comma misuse
  - eventfd: Allow use on all CPUs
  - examples: Prefer 'return' over 'exit()' (cont.)
  - ftp/sftp: strdup data info memory
  - ftp: Fix comment
  - gnutls: Fix connection state check on handshake
  - gnutls: Fix use of pkcs11 urls for keys/certs
  - gtls: Fix uninitialized variable
  - hash: Use single linked list for entries
  - hostip: Don't use alarm() for DoH resolves
  - hostip: Make CURLOPT_RESOLVE support replacing IPv6 addresses
  - http2: Add on_invalid_frame callback for error detection
  - http2: Detect session being closed on ingress handling
  - http2: Enhance error messages on Curl_dyn* upon receiving headers
  - http2: Fix stream assignemnt for pushes
  - http2: Reset stream on response header error
  - HTTP3.md: Only speak about minimal versions
  - http: Convert parsers to strparse
  - http: Fix NTLM info message typo
  - http: Fix the auth check
  - http: Make the RTSP version check stricter
  - http: Negotiation and room for alt-svc/https RR to navigate
  - http: Remove a HTTP method size restriction
  - http: Version negotiation
  - http_chunks: Replace a strofft call with curl_str_hex
  - https-rr: Implementation improvements
  - httpsrr: Fix port detection
  - httpsrr: Fix the HTTPS-RR threaded-resolver build combo
  - INFRASTRUCTURE.md: Add IRC and Matrix details
  - INSTALL-CMAKE.md: CMake usage updates
  - INSTALL-CMAKE.md: mention 'ZLIB_USE_STATIC_LIBS'
  - lib1156: Pass longs to 'curl_easy_setopt()'
  - lib1560: Test set path containing LR or CR
  - lib2302: Fix crash due to stack overflow on MSVC and clang Windows
  - lib696: Fix building on Windows in non-bundle mode
  - lib: Better optimized casecompare() and ncasecompare()
  - lib: Clear up CURLRES_ASYNCH vs. USE_CURL_ASYNC use
  - lib: Fix two curlx_strtoofft invokes
  - lib: Rename curlx_strtoofft to Curl_str_numblanks()
  - lib: Replace while(ISBLANK()) loops with Curl_str_passblanks()
  - lib: Simplify more white space loops
  - lib: strtoofft.h header cleanup
  - lib: Use Curl_str_* instead of strtok_r()
  - lib: Use Curl_str_number() for parsing decimal numbers
  - libssh2: Fix freeing of resources in disconnect
  - libssh2: Fix memory leak in 'SSH_SFTP_REALPATH' state
  - libssh2: Fix to ignore 'known_hosts' if SHA256 host public key is set
  - libssh2: Print user with verbose flag
  - libssh2: Show crypto backend in the verbose connect log
  - libssh: Fix freeing of resources in disconnect
  - libssh: Fix scp large file upload for 32-bit size_t systems
  - libtest/first.c: Remove the Test: stderr output for unity builds
  - libtest/libprereq.c: Set CURLOPT_FOLLOWLOCATION with a long
  - managen: Accept more markdown-quote-markers
  - managen: Correct the warning for un-escaped '&lt;' and '&gt;'
  - mbedtls: Re-enable an error check
  - memdebug.h: Avoid '-Wredundant-decls' with an extra guard
  - memdebug: Drop dynamic allocation from 'curl_dbg_log()'
  - mprintf: Switch three number parsers to use strparse
  - mqtt: Convert sendleftovers to dynbuf
  - msvc: Drop support for VS2005 and older
  - multi: Call protocol handler done() if PROTOCONNECT or later
  - multi: Event based rework
  - multi: Kill off remaining internal handles in curl_multi_cleanup
  - multi: Start the loop over when handles are removed
  - multi_ev: Fixes regarding connection shutdowns
  - ngtcp2: Do not iterate over multi handles
  - ntlm: Merge ntlm.h into ntlm.c
  - openssl-quic: Do not iterate over multi handles
  - openssl: Check return value of X509_get0_pubkey
  - openssl: Drop support for old OpenSSL/LibreSSL versions
  - openssl: Fix crash on missing cert password
  - openssl: Fix pkcs11 URI checking for key files
  - openssl: Remove bad 'goto's into other scope
  - prox/preproxy.md: Document argument within &lt;brackets&gt;
  - pytest: Test negotiate with http proxy
  - quiche: Do not iterate over multi handles
  - RELEASE-PROCEDURE.md: Explain release candidates
  - request: Clear sendbuf_hds_len when resetting request bufq
  - resolve: Fix building without Unix sockets and 'CURLDEBUG'
  - runtests: Accept 'CURL_DIRSUFFIX' without ending slash
  - runtests: Add feature-based filtering
  - runtests: Check and report if 'diff' tool is missing
  - runtests: Drop logic calling the 'handle' tool (Windows)
  - runtests: Drop recognizing 'winssl' as Schannel
  - runtests: Drop ref to unused external function
  - runtests: Fix bundled test invocation with '-g' option
  - runtests: Fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs
  - runtests: Fix test key format for libssh2 WinCNG (and others)
  - runtests: Generate certs dynamically, bump to EC-256, tidy up
  - runtests: Recognize AWS-LC as OpenSSL
  - runtests: Rewrite 'genserv.sh' in Perl
  - runtests: Support multi-target cmake, drop workarounds from CI
  - runtests: Support running tests under wine or qemu (cont.)
  - runtests: Support running tests under wine or qemu
  - runtests: Use 'setfacl' on Cygwin/MSYS, if present
  - rustls: Add ECH support with string ECH config
  - rustls: Cap maximum allowed CRL file size to 8MB
  - rustls: Support ECH GREASE
  - rustls: Use client cert and key if available
  - schannel: Deduplicate Windows Vista detection
  - schannel: Enable ALPN support under WINE 6.0+
  - schannel: Enable ALPN with MinGW, fix ALPN for UWP builds
  - schannel: Guard ALPN init code to ALPN builds
  - scripts/managen: Fix option 'single'
  - scripts/managen: Fix parsing of markdown code sections
  - scripts: Update completion.pl to parse options from docs
  - sectransp: Add support for HTTP/2 in gcc builds
  - sendf: Client reader line conversion: do not change data-&gt;state.infilesize
  - setopt: Illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: Remove unnecessary void pointer typecasts
  - setopt: Setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - shutdowns: Split shutdown handling from connection pool
  - socks: Remove bad assert from do_SOCKS5()
  - src: Avoid strdup on platforms not doing UTF-8 conversions
  - src: Clean-up ISBLANK vs. ISSPACE
  - src: Remove Curl_ prefix from tool-specific function
  - src: Remove final uses of Curl_ symbol prefixes in tool code
  - src: Replace strto[u][ld] with curlx_str_ parsers
  - ssh: Consider sftp quote commands case sensitive
  - sshserver.pl: Adjust 'AuthorizedKeysFile2' cutoff version
  - sshserver.pl: Use Perl 'chmod'
  - sshserver: Fix excluding obsolete client config lines
  - ssl session cache: Add exportable flag
  - SSLCERTS: List support for SSL_CERT_FILE and SSL_CERT_DIR
  - strparse: Make Curl_str_number() return error for no digits
  - strparse: Switch the API to work on 'const char *'
  - strparse: Switch to curl_off_t as base data type
  - test1022: Add support for rc releases
  - test1167: Catch #defines with extra whitespace
  - test313: Disable CRL test for Schannel due to lack of support and flakiness
  - test313: Disable via '&lt;features&gt;' for backends without CRL support
  - test489: Set output dir
  - test612: SCP 'rm' the uploaded remote file (not the local source), unignore in CI
  - test613: Make it pass on Windows, fix postprocess, unignore in CI
  - test615: Fix for Cygwin, unignore in CI
  - tests/certs: Clean up
  - tests/server: Drop unused 'base64.pl'
  - tests/server: Fix to check against winsock2 error codes on Windows
  - tests/server: Give global 'path' variable a more descriptive name
  - tests/server: Make the signal handler signal-safe
  - tests/server: Replace 'errno' with 'SOCKERRNO' in sockfilt, socksd, sws
  - tests/server: Replace 'strerror' with 'sstrerror' in socksd
  - tests/server: Support bundle binary
  - tests/server: Sync 'wait_ms()' with the libcurl implementation
  - tests/server: Use 'curlx_str_numblanks()' to avoid 'errno'
  - tests/servers.pm: Remove unused variable 'portrange'
  - tests: Build non-debug unit tests with autotools, run them
  - tests: Fix comment in lib533
  - tests: Fix enum/int confusion, fix autotools 'CFLAGS' for 'servers'
  - tests: Make sure 'commands.log' is generated in the correct logdir
  - tests: Mark tests 1631, 1632 flaky
  - tests: Reformat error messages to avoid tripping MSBuild
  - tests: Remove base64 encoded sections
  - tests: Remove unused variables
  - tests: Replace remaining non-ASCII bytes with hex markup
  - tftpd: Prefix TFTP protocol error 'E*' constants with 'TFTP_'
  - tidy-up: Align MSYS2/Cygwin codepaths, follow Cygwin 'MAX_PID' bump
  - tidy-up: Delete, comment or scope C macros reported unused
  - tidy-up: Drop unused 'CURL_INADDR_NONE' macro and 'in_addr_t' type
  - tidy-up: Use 'CURL_ARRAYSIZE()'
  - timediff: Fix comment for curlx_mstotv()
  - timediff: Remove unnecessary double typecast
  - tool_dirhie: Create dir hierarchy without strtok
  - tool_getparam: Clear sensitive arguments better
  - tool_getparam: Do parse_upload_flags without the alloc/free
  - tool_getparam: Parse --trace-config without strdup()/free()
  - tool_getparam: parse_header() without strtok
  - tool_operate: Change "1 retries" to "1 retry"
  - tool_operate: Fail SSH transfers without server auth
  - tool_operate: Fix pluralization of seconds
  - tool_operate: Remove unnecessary (long) typecasts
  - tool_paramhlp: Do --proto parsing without strtok
  - tool_parsecfg: Make my_get_line skip comments and newlines
  - tool_setopt: Reduce use of "code hiding" macros
  - url: Call protocol handler's disconnect in Curl_conn_free
  - urlapi: Fix redirect from file:// with query, and simplify
  - urlapi: Remove percent encoded dot sequences from the URL path
  - urlapi: Simplify junkscan
  - urldata: Remove 'hostname' from struct Curl_async
  - variable.md: Clarify 'trim' example
  - vquic: Obey IOV_MAX
  - vtls: Fix compiler warnings seen with gcc 7.3.0 and mbedTLS
  - winbuild: Reduce command-line length by dropping whitespace
  - windows: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - windows: Drop code and curl manifest targeting W2K and older
  - windows: Fix issues detected by clang-tidy, and some more
  - wolfssh: Fix freeing of resources in disconnect
  - wolfssh: Retrieve the error using wolfSSH_get_error
  - wolfssl: Fix CA certificate multiple location import
  - wolfssl: Fix unused variable warning
  - wolfssl: Warn if CA native import option is ignored
  - wolfssl: When using PQ KEM, use ML-KEM, not Kyber
  - ws: Corrected curlws_cont to reflect its documented purpose
  - ws: Fix and extend CURLWS_CONT handling
  - zlib: Bump minimum to 1.2.5.2 (was: 1.2.0.4)
- BR: openssl, needed for cert generation in test suite
- Drop "compat" build support in spec
- Drop legacy ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.0.cf" date="1748433600">- Update to 8.14.0
  - mqtt: Send ping at upkeep interval
  - schannel: Handle pkcs12 client certificates containing CA certificates
  - TLS: Add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: Import v2025.04.20 script and documentation
  - websocket: Add option to disable auto-pong reply
  - _SEEALSO.md: Remove spaces around command and man page section
  - asny-thrdd: Fix detach from running thread
  - asnyc-thrdd: Explain how this is okay with a comment
  - async resolver code improvements
  - async-threaded resolver: Use ref counter
  - async: DoH improvements
  - autotools: Detect 'wolfSSL_set_quic_use_legacy_code' like cmake does
  - autotools: Install shell completion files on cross build
  - aws-sigv4: Allow a blank string
  - build: Check required rustls-ffi version
  - build: Enable gcc-12/13+, clang-10+ picky warnings
  - build: Enable gcc-15 picky warnings
  - certs: Drop unused 'default_bits' from '.prm' files
  - cf-https-connect: Use the passed-in dns struct pointer
  - cf-socket: Fix FTP accept connect
  - cfilters: Remove assert
  - cmake/FindNGTCP2: Simplify multi-pkg-config detection
  - cmake: Append picky warnings to 'CMAKE_REQUIRED_FLAGS' as string
  - cmake: Avoid 'target is imported but not globally visible' when consuming
    libcurl with old cmake
  - cmake: Do not install 'mk-ca-bundle' script and manpage
  - cmake: Enable '-Wall' for MSVC when 'PICKY_COMPILER=ON'
  - cmake: Extend integration tests
  - cmake: Fix 'fish' install directory detection via 'pkg-config'
  - cmake: Fix nghttp3 static linking with 'USE_OPENSSL_QUIC=ON'
  - cmake: Fix option() and mark_as_advanced() mixed order
  - cmake: Fix shell completion install when just one flavour is enabled
  - cmake: Honour individual picky option overrides found in 'CMAKE_C_FLAGS'
  - cmake: Install shell completions for cross-builds
  - cmake: Link 'crypt32' for OpenSSL feature detection
  - cmake: Merge 'CURL_WERROR' logic into 'PickyWarnings.cmake'
  - cmake: Prefer 'COMPILE_OPTIONS' over 'CMAKE_C_FLAGS' for custom C options
  - cmake: Quotes, whitespace, use 'VERSION_GREATER_EQUAL'
  - cmake: Revert 'CURL_LTO' behaviour for multi-config generators
  - cmake: Set 'BUILDING_LIBCURL' directly for unit test targets
  - cmake: Stop deleting '-W&lt;n&gt;' from 'CMAKE_C_FLAGS' (MSVC)
  - cmake: Tidy up and document feature detections in dependencies
  - cmake: Use 'CMAKE_COMPILE_WARNING_AS_ERROR' if available
  - cmake: Use 'INCLUDE_DIRECTORIES' prop to specify local header dirs
  - cmake: Use 'LIB_NAME' in 'curl-config.cmake.in'
  - cmake: Use absolute paths for completion targets
  - cmake: Use the 'LINK_OPTIONS' property with CMake 3.13+
  - configure: Catch asking for double resolver without https-rr
  - configure: Fix --disable-rt
  - configure: Restore link checks
  - configure: Suppress command not found for brew
  - conncache: Make Curl_cpool_init return void
  - connect: Shutdown timer fix
  - content_encoding: Transfer-Encoding parser improvements
  - CONTRIBUTE: Add project guidelines for AI use
  - contrithanks.sh: Drop set -e
  - cpool/cshutdown: Force close connections under pressure
  - curl: Fix memory leak when -h is used in config file
  - curl: Only warn once for --manual in manual-disabled build
  - curl_get_line: Handle lines ending on the buffer boundary
  - curl_krb5: Only use functions if FTP is still enabled
  - curl_multibyte: Fix up low-level calls, include in unity builds
  - curl_osslq: Remove a leftover debug fprintf() call
  - curl_url_get.md: Don't call it normalized
  - curl_version_info.md: Clarify ssl_version for MultiSSL
  - CURLMOPT_TIMERFUNCTION.md: Correct the example
  - CURLOPT_ERRORBUFFER.md: Buffer is read only after curl takes ownership
  - CURLOPT_FOLLOWLOCATION.md: Switch to GET =&gt; no body
  - CURLOPT_READFUNCTION.md: Mention the seek callback
  - CURLOPT_XFERINFOFUNCTION.md: Fix the callback return type in example
  - curlx: Move the docs to docs/internals/
  - DEPRECATE.md: Drop support for VS2008
  - DEPRECATE.md: Drop Windows CE support
  - dist: Drop duplicate entry from 'CMAKE_DIST'
  - dns_entry: Move from conn to data-&gt;state
  - Dockerfile: Update debian:bookworm-slim Docker digest to 90522ee
  - docs/INSTALL.md: Drop reference to removed configure option
  - docs/libcurl: Fix type and prototype problems in examples
  - docs/libcurl: Make examples build with picky compiler options
  - docs/libcurl: Mention sensitive data/headers
  - docs: Add missing return statement in examples
  - docs: Fix incorrect shell substitution in docker run example command
  - docs: Fix typo in retry.md
  - docs: Update distros links
  - doh: httpsrr fix
  - doh: Make sure CURLOPT_PROTOCOLS is set with a "long" arg
  - doh: Reduce the DNS request buffer size
  - easy_reset: Fix dohfor_mid member
  - ECH: Reference the OpenSSL ECH feature branch
  - etag-save.md: Mention how using both options is a good idea
  - eventfd: Fix feature guards
  - formdata: Clean-ups
  - ftp: Fix bug in failed init
  - ftp: Fix race in upload handling
  - ftplistparser: Add two overflow preventions
  - ftplistparser: Split up into more functions
  - generate.bat: Exclude curlinfo.c from legacy VS projects
  - genserv.pl: Fail with a message if 'openssl' is missing or failing
  - headers: Enforce a max number of response header to accept
  - headers: Set an error message on illegal response headers
  - hostip: Fix build without threaded-resolver and without DoH
  - hostip: Show the correct name on proxy resolve error
  - http2: Fix stream window size after unpausing
  - HTTP3.md: Fix incorrect variable placeholders
  - http: Fix a build error when all auths are disabled
  - http: Fix HTTP/2 handling of TE request header using "trailers"
  - http: In alt-svc negotiation only allow supported HTTP versions
  - http_aws_sigv4: Add additional verbose log statements
  - http_aws_sigv4: Improve sigv4 url encoding and canonicalization
  - http_chunks: Narrow variable scope for 'trlen'
  - http_negotiate: Fix non-SSL build with GSSAPI
  - https-connect: Fix httpsrr target check
  - HTTPSRR.md: Clarify somewhat
  - if2ip: Build the function also if FTP is present
  - imap: Remove redundant condition
  - INSTALL-CMAKE.md: Fix typo
  - INSTALL.md: Update the minimal libcurl size example
  - KNOWN_BUGS: Fix link in sivg4 issue 16.3
  - lib/src/docs/test: Improve curl_easy_setopt() calls
  - lib1560: Use hex notation, drop non-ASCII exception
  - lib3026: Drop DLL pre-load perf mitigation for old mingw
  - lib: Add const to clientwriter tables
  - lib: Drop curlx_getpid, use fake pid in SMB
  - lib: Include files using known path
  - lib: Make Curl_easyopts const
  - lib: Unify conversions to/from hex
  - libcurl-tutorial.md: Fix read callback explanation
  - libssh: Add NULL check for Curl_meta_get()
  - libssh: Fix memory leak
  - libssh: Remove a condition that always equals false
  - libtest/first: Stop defining MEMDEBUG_NODEFINES
  - libtests: Define CURL_DISABLE_DEPRECATION first
  - make: Clean tests better
  - mbedtls: TLS 1.3 is max when mbedtls has 1.3 support
  - metahash: Add asserts to help analyzers
  - mk-ca-bundle.pl: Follow redirects
  - mk-ca-bundle: Switch URLs to GitHub versions
  - mkhelp: Fix to not generate a line-ending space in some cases
  - mqtt: Use conn/easy meta hash
  - multi: Do transfer book keeping using mid
  - multi: init_do(): Check result
  - netrc: Avoid NULL deref on weird input
  - netrc: Avoid strdup NULL
  - netrc: Deal with null token better
  - ngtcp2: Clarify ignoring of result
  - openssl-quic: Avoid potential '-Wnull-dereference', add assert
  - openssl-quic: Fix printf mask
  - openssl-quic: Fix shutdown when stream not open
  - openssl: Enable builds for *both* engines and providers
  - openssl: Set the cipher string before doing private cert
  - parsedate: Provide Curl_wkday also for GnuTLS builds
  - processhelp.pm: Always call 'taskkill' with '-f' (force)
  - processhelp.pm: Avoid potential endless loop, log more (Windows)
  - progress: Avoid integer overflow when gathering total transfer size
  - pytest tls: Extend coverage (fixes WolfSSL cert validation, CVE-2025-4947)
  - pytest-xdist: pytest in parallel
  - pytest: Add pinnedpubkey test cases (fixes WolfSSL pinning, CVE-2025-5025)
  - pytest: Give parameterised tests better ids for read- and parsability
  - pytest: Make test_07_22 more lenient to exit codes
  - quic: No local idle connection timeout, ngtcp2 keep-alive
  - rand: Update comment on Curl_rand_bytes weak random
  - RELEASE-PROCEDURE.md: Release candidate git tagging explained
  - rtsp: Remove redundant condition
  - runtests: Add retry option to reduce flakiness
  - runtests: Fix indentation
  - runtests: Recognize lowercase 'windows' in 'curl -V'
  - runtests: Remove server verification after start
  - runtests: Split 'SSH_PWD' into 'SCP_PWD' and 'SFTP_PWD', and more
  - rustls: Make max size of cert and key reasonable
  - sasl: Give help when unable to select AUTH
  - scripts: completion.pl: Sort the completion file for all shells
  - scripts: Drop unused import, formatting
  - scripts: Fix --opts-dir help in completion.pl
  - scripts: Fix perl indentation, whitespace, semicolons
  - sectransp: Fix building for macOS Sierra and older
  - setopt: Provide info for CURLE_BAD_FUNCTION_ARGUMENT
  - smb: Avoid integer overflow on weird input date
  - socket: Use accept4 when available
  - socketpair: Support pipe2 where available
  - spacecheck.pl: Check for non-ASCII chars, fix fallouts
  - spacecheck.pl: Verify 'tests/data/test*' for non-ASCII chars
  - src: Drop strcase.[ch] from tool builds
  - src: Include memdebug.h consistently with angle brackets &lt;&gt;
  - src: Rename curlx_safefree to tool_safefree
  - test1173.pl: Whitelist some option-looking names that aren't options
  - test1658: Add unit test for the HTTPS RR decoder
  - test: Make unittest 1308 into a libtest
  - tests/ech_tests.sh: Sync shebang with rest of bash scripts
  - tests/FILEFORMAT.md: Clarify %hex[] formatting
  - tests/FILEFORMAT.md: Document the aws feature
  - tests/README.md: Document --test-duphandle
  - tests/README.md: List the openssl tool among the prerequisites
  - tests/server/dnsd: Basic DNS server for test suite
  - tests/server: Check for 'stream != NULL' in mqttd
  - tests/server: Fix typo in comment
  - tests/server: Stop using libcurl string comparisons
  - tests/server: Stop using libcurl's printf functions
  - tests/serverhelp: Remove last remnants of http-pipe server
  - tests/tunit: Make a separate directory for tool-based unit tests
  - tests: Add aws feature to the related tests
  - tests: Add https-mtls server to force client auth
  - tests: Fix some test tag mismatches
  - tests: Mark ipfs tests to require ipfs
  - tests: Move a boolean variable out of the path section
  - tests: Prefer '--insecure' over '-k'
  - tests: Provide all non-ascii data hex encoded
  - tests: Remove some unused test case sections
  - tests: Require IPv6 for 1265, 1324, 2086
  - tests: Separate tunit tests from unit tests more
  - tests: Stop using libcurl's strdup
  - tests: Unify test case keywords
  - tests: Use a more portable null device path
  - TODO: Remove "nicer lacking perl message"
  - tool_cb_write.c: Handle EINTR on flush
  - tool_getparam: Clear argument only when needed
  - tool_operate: Make retrycheck() a separate function
  - tool_operate: When retrying, only truncate regular files
  - tool_paramhlp: Avoid integer overflow in secs2ms()
  - tool_parsecfg: Make get_line handle lines ending on the buffer boundary
  - typecheck-gcc.h: Fix the typechecks
  - urlapi: Redirecting to "" is considered fine
  - urlapi: Remove unneeded guards around PUNY2IDN
  - urldata: Remove the unused struct field 'hide_progress'
  - VERSIONS: List all past releases
  - vquic: Consistent name for the stream struct across backends
  - vquic: Init for every call to recvmsg
  - vtls: Avoid NULL deref on bad PEM input
  - vtls: Fix build with ssl but without http
  - VULN-DISCLOSURE-POLICY: Use of weak algos
  - winbuild: Add the deprecation warning to the README
  - winbuild: curl_get_line is not used for tool builds
  - windows: Fix builds targeting WinXP, test it in CI
  - wolfssl: Fix to enable ALPN when available
  - ws: Fix the header replace check
  - ws: Store protocol context as connection meta data</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.1.cf" date="1748520000">- Fix regression: curl_multi_add_handle() returning OOM when using more than
  400 handles (GH#17475)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.1-1.0.cf" date="1749038400">- Update to 8.14.1
  - asyn-thrdd: Fix clean-up when RR fails due to OOM
  - autotools: Recognize more Linux targets when setting '-D_GNU_SOURCE'
  - BUG-BOUNTY.md: Mention the medium bounty amount in 2025
  - cmake: Fix missed version number for multi-pkg-config detections
  - cmdline-docs: Mention HTTP resumed uploads to be shaky
  - curl: make -N handled correctly
  - curl: Upload from '.' fix
  - dllmain: Exclude from Cygwin builds
  - docs/tests: Remove mention of hyper
  - docs: Fix typos
  - ftp: Fix teardown of DATA connection in done
  - http: Fail early when rewind of input failed when following redirects
  - license: Update some copyright links to curl.se
  - memanalyze.pl: Fix getaddrinfo/freeaddrinfo checks
  - misc: Fix spelling
  - misc: We write *an* IPv6 address
  - multi: Fix add_handle resizing
  - spelling: 'a' vs. 'an'
  - spelling: Call it null-terminate consistently
  - test1510: Fix expectation
  - tests: Await portfile to be complete
  - tests: Fix checks for https-mtls proto
  - tests: Improve server start reliability
  - tests: Move test docs into /docs
  - tests: Re-enable 1510, document heimdal memleak
  - tests: Test mtls also w/ clientAuth EKU only
  - tests: Test mtls with --insecure
  - tls BIOs: Handle BIO_CTRL_EOF correctly
  - tool_getparam: Make --no-anyauth not be accepted
  - tool_getparam: Refactored, simplified
  - tool_getparam: Remove two nextarg NULL checks
  - VULN-DISCLOSURE-POLICY.md: The distros list wants ≤ 7 days embargo
  - wolfssl: Fix sending of early data
  - ws: Handle blocked sends better (CVE-2025-5399)
  - ws: Tests and fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-1.0.cf" date="1752667200">- Update to 8.15.0
  - TLS: Remove support for Secure Transport and BearSSL
  - altsvc: Accept 'clear' without semicolon as well
  - asyn-ares: Remove redundant NULL check
  - asyn-thrdd: Free the previous name before strdup'ing the new
  - autotools: Detect and link 'brotlicommon' library for brotli
  - autotools: Drop '$top_builddir/src' from src header path
  - autotools: Drop headers from src mk-unity rules (fixup)
  - autotools: Drop no longer necessary '--srcdir' unity options
  - autotools: Drop redundant 'Makefile.inc' from 'EXTRA_DIST' in src
  - autotools: Simplify configuration in tests, examples
  - bufq: Change read/write signatures
  - bufq: Remove the unused Curl_bufq_unwrite function
  - build: Assume 'sys/socket.h', 'sys/time.h' on non-Windows (as in 'curl/curl.h')
  - build: Drop 'HAVE_SYS_SOCKET_H' and 'HAVE_SYS_TIME_H' macros
  - build: Drop explicit curlx from hdr paths, refer headers with 'curlx/' prefix
  - build: Drop unused variables in tests
  - build: Fix libcurltool with cmake and tunits, related tidy-ups
  - build: Split '.c' and '.h' file lists in tests
  - build: Stop checking for 'sys/stat.h'
  - build: stubgss tidy-ups (in tests)
  - build: Sync build scripts between client/libtest
  - build: Tidy up 'Makefile.inc' use in lib and src
  - build: Tidy up header paths, use srcdir where possible
  - cf-socket: Make socket data_pending a no-op
  - checksrc-all: Rewrite in Perl, remove 'checksrc.bat'
  - checksrc: Reduce exceptions, apply again to curlx
  - cmake/FindGSS: Fix processing C header path options
  - cmake/FindGSS: Initialize result variables
  - cmake: 'curl_add_clang_tidy_test_target' tidy-ups
  - cmake: Build 'stubgss' library for libtests to match autotools
  - cmake: Check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
  - cmake: Configure c-ares header directory in project root (was: lib)
  - cmake: Document OpenSSL and ngtcp2 crypto lib custom variables
  - cmake: Drop never-propagated C macros
  - cmake: Drop passing redundant 'CURL_STATICLIB' in examples and clients
  - cmake: Drop redundant macro from test clients
  - cmake: Drop reference to future variable
  - cmake: Enable soversion by default for OpenHarmony OS
  - cmake: Fix 'curl_add_clang_tidy_test_target' when no '-D' option
  - cmake: Fix generator expression in docs/examples
  - cmake: Gather options recursively in 'curl_add_clang_tidy_test_target'
  - cmake: Make docs depend on support files
  - cmake: Move 'OUTPUT' argument in the 'add_custom_command()' line
  - cmake: Omit clang-tidy on internal libs curlu and curltool
  - cmake: Replace 'cmakelint' with 'cmake-lint' from 'cmakelang', fix issues
  - cmake: Replace the way clang-tidy verifies tests, fix issues found
  - cmake: Simplify handling generated 'lib1521.c' in libtests
  - cmake: Sync 'target_link_libraries()' order in tests more
  - cmake: Sync tests scripts by using the variable 'BUNDLE'
  - cmake: Sync tests scripts with each other and autotools (more)
  - cmake: Use 'target_link_options()' when available
  - config-win32: Fix default targets, shorten macro logic
  - configure: Order LDAP after the SSL libraries
  - connect: Drop unused struct member
  - connection: Clarify 'transport'
  - connection: Eliminate member 'remote_addr'
  - curl-config: Fix whitespace in usage text
  - curl.h: Make CURL_IPRESOLVE_* symbols defined as longs
  - curl.h: Make CURLSSLOPT_* symbols defined as longs
  - curl.h: Remove the "RESERVED" error codes
  - curl: Implement non-blocking STDIN read on Windows
  - curl: Improve non-blocking STDIN performance
  - curl: Remove the global argument from many functions
  - curl: Unify pointer names to global config
  - curl_get_line: Make sure lines end with newline
  - curl_memory.h: Fix to undefine 'accept4'
  - curl_path: Make SFTP handle a path like /~ properly
  - curlinfo: Provide the 'digest' feature
  - CURLSHOPT_SHARE.md: Mention multi-threading requires callbacks
  - DEPRECATE.md: Add VS2005 removal to the list
  - digest: Fix build with disabled digest auth
  - DISTROS: Update NixOS link
  - docs,tests: Fix english grammar "allow to" -&gt; "allow &lt;something&gt; to"
  - docs/CONTRIBUTE: Fix broken link
  - docs/examples: Add ftp-delete.c
  - docs: Beef up examples/websocket.c
  - docs: Fix broken link in CODE_REVIEW.md
  - docs: Fix broken link in INSTALL.md
  - docs: Fix docs for CURLOPT_PREQUOTE after #17616
  - docs: Fix documentation of connect_only 2
  - docs: Fix two typos
  - docs: Mention that the netrc file works without port numbers
  - docs: Mention the as-is concept generically
  - docs: Note SSLS-EXPORT feature in -ssl-sessions doc
  - docs: Reflect that delimiter-separated capath is only OpenSSL
  - docs: Sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
  - docs: Warn about lifetime in CURLOPT_CLOSESOCKET*
  - easy: Fix comment-documentation
  - easygetopt: Fix curl logo in header comment
  - firefox-db2pem: Avoid use of eval in script
  - ftp: Fix prequotes for a directory in URL
  - ftplistparser: Split parse_unix into sub-functions
  - h2_serverpush: Fix file handle leaks reported by clang-tidy
  - h3: Fix query of concurrent streams
  - http/3: Report handshake with version and cipher as for TCP connections
  - http2: Do not delay RST send on aborted transfer
  - http2: Fix var types in is_alive() implementations
  - http: Explicitly ignore parsing errors for Retry-After
  - http: Fix build with cookies and HSTS disabled
  - http_ntlm: Protect against null deref
  - http_ntlm: Remove unreachable code
  - INSTALL.md: Cygwin details and add source code link
  - ldap: Avoid automake caching issues with LDAP library names
  - ldap: If ldap-lib is sufficient, add it to LIBS
  - ldap: Initial support for --with-ldap option
  - lib2082: Drop 'typedef struct'
  - lib: Address singleuse issues
  - lib: Avoid reusing unclean connection
  - lib: Drop two interim macros in favor of native libcurl API calls
  - lib: Fix unused parameter/function compiler warnings
  - lib: Make 'CURLX_SET_BINMODE()' and use it
  - lib: Make 'curlx_wait_ms()' and use it
  - lib: Replace scache no-op macros with '#ifdef'
  - lib: Stop 'time()' debug overrides at the end of source in altsvc, hsts
  - lib: Unify recv/send function signatures
  - libcurl-env.md: Drop LOGNAME, USER and NTLMUSER
  - libcurl.m4: Fix indentation
  - libssh2: Remove use of 'initialised' for clean-up
  - libssh: De-complex myssh_statemach_act()
  - libssh: Fix readdir issues
  - libtests: Make tests 1503, 1504, 1505 use the 1502 binary
  - libtests: More header tidy-ups
  - libtests: Stop building the same source multiple times
  - memdebug.h: #undef 'fclose' before defining it
  - memdebug.h: Eliminate global macro 'CURL_MT_LOGFNAME_BUFSIZE'
  - memdebug: Include in unity batch
  - memory: Stop overriding unused 'wcsdup()'/'_wcsdup()' system functions
  - memory: Tidy up '_tcsdup()' override
  - misc: Fix typos
  - mk-lib1521: Replace 'printf' with 'curl_mprintf'
  - multi: Add dirty bitset
  - multi: Do not expire a blocked transfer
  - multi: Fix polling with pending input
  - multi: Remove careful bounds check as coverity says it is not needed
  - multi: xfer table/bitset, handle limits
  - ngtcp2: Fix coverity warning about result handling
  - openssl: Enable readahead
  - openssl: Error on SSL_ERROR_SYSCALL
  - openssl: Fix handling of buffered data
  - openssl: Fix openssl engine use
  - openssl: Fix pkcs11 provider available check
  - os400: Upgrade ILE/RPG bindings with latest definitions
  - pingpong: On disconnect, check for unflushed pingpong state
  - projects/build-openssl.bat: Remove
  - pytest: test_07_70, weaken early data check
  - pytest: Adapt for runs with openssl-1.1.1
  - pytest: Disable test_07_37 and test_07_36 with openssl's quic
  - quic: Implement CURLINFO_TLS_SSL_PTR
  - RELEASE-PROCEDURE.md: Update docs/VERSIONS
  - runtests.pl: Fix sprintf() using one too many %s
  - runtests: Fix 'LD_PRELOAD' detection for cmake-built curl binaries
  - runtests: Support memory-limits per test
  - rustls: Apply memory function overrides, fixing an ECH buffer free
  - rustls: Don't try printing the not provided file
  - schannel: Allow partial chains for manual peer verification
  - schannel: Drop Windows 2000 compatibility logic
  - scorecard: Flame graphs and documentation
  - SCP/SFTP: Avoid busy loop after EAGAIN
  - scripts: Fix to quote the copyright email address
  - socks: Fix query when filter context is null
  - system.h: Remove some macros
  - test1117: Reduce write delays
  - test1175: Fix to run, and fix documentation issues detected
  - test1222: Fix for out-of-tree and no-libcurl-manual builds
  - test1499, 1599: use '%LOGDIR'
  - test1499: Verify two chunked responses on reused connection
  - test1596: Let test pass after year 2036
  - test1706: Pass include directory to 'managen' for out-of-tree builds
  - tests/client: Drop autotools logic no longer necessary
  - tests/client: Use 'curl_mfprintf()'
  - tests/dnsd: Read config from file
  - tests/http/clients: Drop hack and use 'curl_setup.h' again
  - tests/http/clients: Move to tests/client
  - tests/http/requirements: Remove multipart
  - tests/libtest: Call 'curlx_now_init()' for unit 1399, 2600 (Windows)
  - tests/libtest: Drop 'TEST_HANG_TIMEOUT' redefinition hack
  - tests/libtest: Drop a checksrc exception
  - tests/libtest: Use 'curltime' from curlx
  - tests/server/util.c: Include netinet/in6.h
  - tests/server: De-dupe/merge three 'sockdaemon()' clones into one
  - tests/server: Drop 'memdebug.h'
  - tests/server: Make all global vars/funcs static
  - tests/server: Move memory init to 'memptr.c'
  - tests/servers.pm: Add more ways to figure out current user
  - tests: Always make bundles, adapt build and tests
  - tests: Bundle http clients, de-dupe, enable for MSVC
  - tests: Constify, make consts static
  - tests: Drop 'BUNDLE_SRC' variable
  - tests: Drop mk-bundle exceptions
  - tests: Drop unused or redundant includes
  - tests: Drop useless "nodist_SOURCES" assignments
  - tests: Fail torture if !valgrind&amp;threaded resolver
  - tests: Fix 1301, 1308 to fail on error
  - tests: Fix 'BUNDLE' variable references in 'Makefile.am'
  - tests: Make all names &lt; 75 characters long
  - tests: Make individual test sources compile cleanly
  - tests: Make sshserver less verbose
  - tests: Move 'curlcheck.h' to libtest as 'unitcheck.h'
  - tests: Move GSS-API dynamic stub into debug-mode libcurl
  - tests: torture: Don't duplicate valgrind command
  - tests: Use %b64[] to base64 data
  - tests: Use %b64[] to base64 data in 2056, 2057
  - tftpd: Use 'CURLMIN()' macro
  - tidy-up: Replace '&lt;memdebug.h&gt;' with '"memdebug.h"' (src, units)
  - tls: Remove Curl_ssl false_start
  - tool1621: Drop unused internal libcurl headers
  - tool_getparam: Fix --ftp-pasv
  - tool_operate: Fix return code when --retry is used but not triggered
  - tool_paramhelp: Fix language in comments
  - top-complexity: Lower max allowed complexity threshold to 90
  - unit tests: Extract "private" prototypes at build time
  - unit1302: Expand the base64 encode/decode tests
  - url: Fix connection lifetime checks
  - url: Fix NULL deref with bad password when no user is provided
  - urlapi: Simplify and split into sub functions
  - urlapi: Use uppercase hex encoding
  - vauth: Move auth structs to conn meta data
  - vtls: Change send/recv signatures of tls backends
  - vtls: Fix a copy-pasted early data comment typo
  - vtls: Log rustls negotiated KEX group name
  - vtls: Prefer ciphersuite to cipher in msgs
  - vtls: Prefer rustls-ffi ciphersuite name API
  - VULN-DISCLOSURE-POLICY.md: Fix typos
  - VULN-DISCLOSURE-POLICY: All reports should be disclosed
  - VULN-DISCLOSURE-POLICY: Exclude not installed software
  - VULN-DISCLOSURE-POLICY: Minor language polish
  - warnless: Drop parts of the 'read'/'write' preprocessor hack (Windows)
  - warnless: Replace 'read()'/'write()' wrapper functions with macros (Windows)
  - windows: Drop redundant 'curl_wcsdup_callback' callback
  - windows: Fixup 'fopen()' in 'CURLDEBUG' builds
  - windows: Reduce/stop loading DLLs at runtime
  - wolfssl: Add support for ML_KEM hybrids
  - ws: Drop redundant 'CURL_EXTERN' from function definitions
  - xfer: Manage pause bits</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.0.cf" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.1.cf" date="1753617600">- Fix dependency on CA bundle when we don't use the old one at
  /etc/pki/tls/certs/ca-bundle.crt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
</package>
<package pkgid="aca457561ff032fed1945dadc60cf8abc2279b55e45bd9cb8353510c51eb365f" name="curl-minimal" arch="i686">
  <version epoch="0" ver="8.17.0" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12.1-1.0.cf" date="1739448000">- Update to 8.12.1
  - All: Remove FIXME and TODO comments
  - asyn-thread: Fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: Fix HTTPS RR crash
  - asyn-thread: Fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: Survive a c-ares channel set to NULL
  - build: Add tool_hugehelp.c into IBMi build
  - checksrc.pl: Warn on FIXME/TODO comments
  - cmake/Find: Set '&lt;Modulename&gt;_FOUND' for compatibility when found via 'pkg-config'
  - cmake: Add integration tests, run them in CI
  - cmake: Always reference OpenSSL and ZLIB via imported targets
  - cmake: Avoid unnecessary '-L' for implicit link dirs
  - cmake: Drop 'LDAP_DEPRECATED=1' macro, to sync with autotools
  - cmake: Fix 'HAVE_GETHOSTBYNAME_R_*' detections with 'CURL_WERROR=ON'
  - cmake: Fix to detect 'HAVE_OPENSSL_SRP' in MSVC UWP builds
  - cmake: Fix/add missing feature detections for Windows/MS-DOS
  - cmake: Initialize variables where missing
  - cmake: Library order fixes for picky linkers (e.g. binutils 'ld')
  - cmake: Normalize before matching paths with syspaths
  - cmake: Respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: Respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - cmake: Save a line with 'CMAKE_C_IMPLICIT_LINK_DIRECTORIES' exclusion
  - cmake: Tidy up string append and list prepend syntax
  - configure/cmake: Check for realpath
  - configure/cmake: Set asyn-rr as feature only if httpsrr is enabled
  - content_encoding: #error on too old zlib
  - curl_global_sslset.md: Add SSL backend names
  - CURLOPT_SSH_KNOWNHOSTS.md: Strongly recommend using this
  - CURLSHOPT_SHARE.md: Adjust for the new SSL session cache
  - docs: Better explain multi-part byte range behaviour
  - docs: Use valid example domain names
  - generate.bat: Remove curl_get_line.c from the curlx file list
  - header.md: Mention 'Authorization:' and 'Cookie:' special treatment
  - imap: TLS upgrade fix
  - INTERNALS: Fix c-ares, as we actually support 1.6.0 or later
  - ldap: Drop support for legacy Novell LDAP SDK
  - lib: include necessary headers for 'inet_ntop'/'inet_pton'
  - lib: Silence LibreSSL collision warning on non-MSVC Windows
  - libssh2: Comparison is always true because rc &lt;= -1
  - libssh2: Raise lowest supported version to 1.2.8
  - libssh: Drop support for libssh older than 0.9.0
  - libssh: Silence '-Wconversion' with a cast (Windows 32-bit)
  - netrc: return code clean-up, fix missing file error
  - openssl-quic: Ignore ciphers for h3
  - openssl: Fix out of scope variables in goto
  - pop3: TLS upgrade fix
  - runtests: Fix the disabling of the memory tracking
  - runtests: Quote commands to support paths with spaces
  - scache: Add magic checks
  - smb: Silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - SPONSORS.md: Clarify that we don't promise goods or services
  - test1516: Avoid failure due to spaces in path
  - test2080: Simplify, avoid the null byte
  - tests: Fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
  - tidy-up: Make per-file 'ARRAYSIZE' macros global as 'CURL_ARRAYSIZE'
  - tool_cfgable: Sort struct fields by size, use bitfields for booleans
  - tool_getparam: Add "TLS required" flag for each such option
  - tool_progress: Fix percent output of large parallel transfers
  - tool_ssls: Switch to tool-specific get_line function
  - verbose.md: Mention how carriage-return might occur in headers
  - vquic: Make the "disable GSO" use infof, not failf
  - vtls: Fix multissl-init
  - vtsl: Eliminate 'data-&gt;state.ssl_scache'
  - wakeup_write: Make sure the eventfd write sends eight bytes
  - wolfssl: Silence compiler warning (MSVC 2019), simplify existing
- Use libssh2 rather than libssh for Fedora 28 and 29 builds since their
  versions of libssh are too old for curl now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.13.0-1.0.cf" date="1743595200">- Update to 8.13.0
  - curl: Add write-out variable 'tls_earlydata'
  - curl: Make --url support a file with URLs
  - gnutls: Set priority via --ciphers
  - IMAP: Add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: Add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: Add support for TLSv1.3 early data
  - rustls: Add support for CERTINFO
  - rustls: Add support for SSLKEYLOGFILE
  - rustls: Support ECH with DoH lookup for config
  - rustls: Support native platform verifier
  - var: Add a '64dec' function that can base64 decode a string
  - wolfssl: TLS early data support
  - addrinfo: Add curl macro to avoid redefining foreign symbols
  - asyn-thread: Avoid the separate 'struct resdata' alloc
  - asyn-thread: Avoid the separate curl_mutex_t alloc
  - asyn-thread: Do not allocate thread_data separately
  - asyn-thread: Remove 'status' from struct Curl_async
  - autotools: Fix 'dllmain.c' in unity builds
  - autotools: Fix 'libtest' bundle to depend on 'FIRSTFILES'
  - autotools: Use 'CURLDEBUG' to exclude TrackMemory code from unity
  - aws_sigv4: Cannot be used for proxy
  - aws_sigv4: Merge repeated headers in canonical request
  - aws_sigv4: Use strparse more for parsing
  - base64: Drop 'BUILDING_CURL' macro, always include in tests/server
  - build: Add Windows CE / CeGCC support, with CI jobs
  - build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls)
  - build: Do not apply curl debug macros to 'tests/server' by default
  - build: Drop unused 'getpart' tool
  - build: Enable -Wjump-misses-init for GCC 4.5+
  - build: Enable '-Wcast-qual', fix or silence compiler warnings
  - build: Fix compiler warnings in feature detections
  - build: Replace Curl_ prefix with curlx_ for functions used in servers
  - build: Set '-O3' and tune WinCE in CI, fix 'getpart', 'vtls_scache' fallouts
  - build: Set 'HAVE_STDINT_H' if 'stdint.h' is available
  - build: Set 'HAVE_WRITABLE_ARGV' for Apple cross-builds
  - build: Silence bogus '-Wconversion' warnings with gcc 5.1-5.4
  - build: Silence mingw32ce C99 format warnings, simplify CI
  - build: Tidy-ups around 'inet_pton'
  - c-ares httpsrr: Fix ifdef
  - c-ares: Error out for unsupported versions, drop unused macros
  - ca-native.md: Sync with CURLSSLOPT_NATIVE_CA
  - cf-socket: Deduplicate Windows Vista detection
  - cf-socket: Remove empty switch
  - client writer: Handle pause before decoding
  - cmake: 'CURL_LIBDIRS' improvements (upstreamed from vcpkg)
  - cmake: 'SHARE_LIB_OBJECT=ON' requires CMake 3.12 or newer
  - cmake: Add custom command scripts as dependencies where missing
  - cmake: Add pre-fill for Unix, enable in GHA/macos, verify pre-fills
  - cmake: Add shell completion support
  - cmake: Allow 'CURL_STATIC_CRT' with shared libcurl and no curl exe
  - cmake: Allow 'CURL_STATIC_CRT' with UCRT VS2015+ builds
  - cmake: Allow empty 'IMPORT_LIB_SUFFIX', add suffix collision detection
  - cmake: Avoid '-Wnonnull' warning in 'HAVE_FSETXATTR_5' detection
  - cmake: Disable HTTPS-proxy as a feature if proxy is disabled
  - cmake: Drop 'CURL_DISABLE_TESTS' option
  - cmake: Drop 'HAVE_C_FLAG_Wno_long_double' logic for ancient Apple gcc
  - cmake: Drop 'HAVE_IN_ADDR_T' from pre-fill too
  - cmake: Drop two stray TLS feature checks for wolfSSL
  - cmake: Exclude '-MP' for 'clang-cl' again
  - cmake: Fix 'HAVE_ATOMIC'/'HAVE_STDATOMIC' pre-fill for clang-cl
  - cmake: Fix clang-tidy builds to verify tests, fix fallouts
  - cmake: Fix detection pre-fills for iOS
  - cmake: Fix ECH detection in custom-patched OpenSSL
  - cmake: Fix typo in ECH config error msg
  - cmake: Hide empty 'MINGW64_VERSION' output for mingw32ce
  - cmake: Improve httpd detection for pytest
  - cmake: Mention 'insecure' in the debug build warning
  - cmake: Misc tidy-ups
  - cmake: Pre-fill known type sizes for Windows OSes
  - cmake: Replace CMAKE_COMPILER_IS_GNUCC with CMAKE_C_COMPILER_ID
  - cmake: Replace exec_program() with execute_process()
  - cmake: Restrict static CRT builds to static curl exe, test in CI
  - cmake: Sync cutoff version with autotools for picky option '-ftree-vrp'
  - cmake: Sync OpenSSL(-fork) feature checks with './configure'
  - cmake: Unity mode optimization for non-'CURLDEBUG' 'testdeps' targets
  - CODE_STYLE: Readability and banned functions
  - config-win32: Set 'HAVE_STDINT_H' where available
  - configure: Call the blocking resolver "blocking", not "default"
  - configure: Fix ECH detection with MultiSSL
  - configure: Silence compiler warnings in feature checks, drop duplicates
  - configure: Tidy up shell completion rules
  - configure: Use 'curl_cv_apple' variable
  - conn: Eliminate 'conn-&gt;now'
  - conn: Fix connection reuse when SSL is optional
  - conncache: Eliminate 'conn-&gt;destination_len' as premature optimization
  - contributors.sh: Lowercase 'github' for consistency
  - contrithanks.sh: Update docs/THANKS in place
  - cookie: Do prefix matching case-sensitively
  - cookie: Minor parser simplification
  - cookie: Simplify invalid_octets()
  - core: Stop redefining 'E*' macros on Windows, map 'EACCES', related fixes
  - curl.h: Change some enums to defines with L suffix
  - curl.h: Convert CURLUSESSL* names to defines
  - curl.h: Stop defining non-curl '__has_declspec_attribute'
  - curl.h: Switch 'CURL_HTTP_VERSION*' enums to long constants
  - curl/system.h: Drop leftover comment about 32 bit curl_off_t
  - curl: Add my_setopt_long() and _offt()
  - curl_msh3: Remove verify bypass from DEBUGBUILDs
  - curl_setup: Drop 'ERANGE' (for WinCE), no longer used
  - curl_setup_once: Drop 'E*' macro redefines unused (with winsock2)
  - curl_setup_once: Stop redefining 'ENAMETOOLONG' to winsock2 error code
  - curl_trc: Fix build with CURL_DISABLE_VERBOSE_STRINGS
  - curl_ws_recv.md: Expand a little on the fragments the API delivers
  - CURLMOPT_SOCKETFUNCTION.md: Add advice for socket callback invocation
  - CURLOPT_HTTPHEADER.md: Add comments to the example
  - CURLOPT_HTTPHEADER.md: Rephrases
  - curltime: Use libcurl time functions in src and tests/server
  - DISABLED: Add 313 for sectransp (move from GHA/macos)
  - docs/cmdline-opts: Use imperative form
  - docs: Adapt to removed --with-random
  - docs: Add FD_ZERO to curl_multi_fdset example
  - docs: Bump 'rustls' to 0.14.1
  - docs: Correct argument names and URL redirection
  - docs: Minor edits to please the new spellchecker regime
  - docs: Rework RUSTLS install instructions
  - docs: Unify HTTP version style in --help output
  - docs: Vulnerabilities in debug code are not eligible for a bounty
  - doh: Improve HTTPS RR svcparams parsing
  - doh: Remove wrong but unreachable exit path from doh_decode_rdata_name
  - dynbuf: Assert init on free
  - easy: Drop 'break' after 'return'
  - easy: Fix warning about possible comma misuse
  - eventfd: Allow use on all CPUs
  - examples: Prefer 'return' over 'exit()' (cont.)
  - ftp/sftp: strdup data info memory
  - ftp: Fix comment
  - gnutls: Fix connection state check on handshake
  - gnutls: Fix use of pkcs11 urls for keys/certs
  - gtls: Fix uninitialized variable
  - hash: Use single linked list for entries
  - hostip: Don't use alarm() for DoH resolves
  - hostip: Make CURLOPT_RESOLVE support replacing IPv6 addresses
  - http2: Add on_invalid_frame callback for error detection
  - http2: Detect session being closed on ingress handling
  - http2: Enhance error messages on Curl_dyn* upon receiving headers
  - http2: Fix stream assignemnt for pushes
  - http2: Reset stream on response header error
  - HTTP3.md: Only speak about minimal versions
  - http: Convert parsers to strparse
  - http: Fix NTLM info message typo
  - http: Fix the auth check
  - http: Make the RTSP version check stricter
  - http: Negotiation and room for alt-svc/https RR to navigate
  - http: Remove a HTTP method size restriction
  - http: Version negotiation
  - http_chunks: Replace a strofft call with curl_str_hex
  - https-rr: Implementation improvements
  - httpsrr: Fix port detection
  - httpsrr: Fix the HTTPS-RR threaded-resolver build combo
  - INFRASTRUCTURE.md: Add IRC and Matrix details
  - INSTALL-CMAKE.md: CMake usage updates
  - INSTALL-CMAKE.md: mention 'ZLIB_USE_STATIC_LIBS'
  - lib1156: Pass longs to 'curl_easy_setopt()'
  - lib1560: Test set path containing LR or CR
  - lib2302: Fix crash due to stack overflow on MSVC and clang Windows
  - lib696: Fix building on Windows in non-bundle mode
  - lib: Better optimized casecompare() and ncasecompare()
  - lib: Clear up CURLRES_ASYNCH vs. USE_CURL_ASYNC use
  - lib: Fix two curlx_strtoofft invokes
  - lib: Rename curlx_strtoofft to Curl_str_numblanks()
  - lib: Replace while(ISBLANK()) loops with Curl_str_passblanks()
  - lib: Simplify more white space loops
  - lib: strtoofft.h header cleanup
  - lib: Use Curl_str_* instead of strtok_r()
  - lib: Use Curl_str_number() for parsing decimal numbers
  - libssh2: Fix freeing of resources in disconnect
  - libssh2: Fix memory leak in 'SSH_SFTP_REALPATH' state
  - libssh2: Fix to ignore 'known_hosts' if SHA256 host public key is set
  - libssh2: Print user with verbose flag
  - libssh2: Show crypto backend in the verbose connect log
  - libssh: Fix freeing of resources in disconnect
  - libssh: Fix scp large file upload for 32-bit size_t systems
  - libtest/first.c: Remove the Test: stderr output for unity builds
  - libtest/libprereq.c: Set CURLOPT_FOLLOWLOCATION with a long
  - managen: Accept more markdown-quote-markers
  - managen: Correct the warning for un-escaped '&lt;' and '&gt;'
  - mbedtls: Re-enable an error check
  - memdebug.h: Avoid '-Wredundant-decls' with an extra guard
  - memdebug: Drop dynamic allocation from 'curl_dbg_log()'
  - mprintf: Switch three number parsers to use strparse
  - mqtt: Convert sendleftovers to dynbuf
  - msvc: Drop support for VS2005 and older
  - multi: Call protocol handler done() if PROTOCONNECT or later
  - multi: Event based rework
  - multi: Kill off remaining internal handles in curl_multi_cleanup
  - multi: Start the loop over when handles are removed
  - multi_ev: Fixes regarding connection shutdowns
  - ngtcp2: Do not iterate over multi handles
  - ntlm: Merge ntlm.h into ntlm.c
  - openssl-quic: Do not iterate over multi handles
  - openssl: Check return value of X509_get0_pubkey
  - openssl: Drop support for old OpenSSL/LibreSSL versions
  - openssl: Fix crash on missing cert password
  - openssl: Fix pkcs11 URI checking for key files
  - openssl: Remove bad 'goto's into other scope
  - prox/preproxy.md: Document argument within &lt;brackets&gt;
  - pytest: Test negotiate with http proxy
  - quiche: Do not iterate over multi handles
  - RELEASE-PROCEDURE.md: Explain release candidates
  - request: Clear sendbuf_hds_len when resetting request bufq
  - resolve: Fix building without Unix sockets and 'CURLDEBUG'
  - runtests: Accept 'CURL_DIRSUFFIX' without ending slash
  - runtests: Add feature-based filtering
  - runtests: Check and report if 'diff' tool is missing
  - runtests: Drop logic calling the 'handle' tool (Windows)
  - runtests: Drop recognizing 'winssl' as Schannel
  - runtests: Drop ref to unused external function
  - runtests: Fix bundled test invocation with '-g' option
  - runtests: Fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs
  - runtests: Fix test key format for libssh2 WinCNG (and others)
  - runtests: Generate certs dynamically, bump to EC-256, tidy up
  - runtests: Recognize AWS-LC as OpenSSL
  - runtests: Rewrite 'genserv.sh' in Perl
  - runtests: Support multi-target cmake, drop workarounds from CI
  - runtests: Support running tests under wine or qemu (cont.)
  - runtests: Support running tests under wine or qemu
  - runtests: Use 'setfacl' on Cygwin/MSYS, if present
  - rustls: Add ECH support with string ECH config
  - rustls: Cap maximum allowed CRL file size to 8MB
  - rustls: Support ECH GREASE
  - rustls: Use client cert and key if available
  - schannel: Deduplicate Windows Vista detection
  - schannel: Enable ALPN support under WINE 6.0+
  - schannel: Enable ALPN with MinGW, fix ALPN for UWP builds
  - schannel: Guard ALPN init code to ALPN builds
  - scripts/managen: Fix option 'single'
  - scripts/managen: Fix parsing of markdown code sections
  - scripts: Update completion.pl to parse options from docs
  - sectransp: Add support for HTTP/2 in gcc builds
  - sendf: Client reader line conversion: do not change data-&gt;state.infilesize
  - setopt: Illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: Remove unnecessary void pointer typecasts
  - setopt: Setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - shutdowns: Split shutdown handling from connection pool
  - socks: Remove bad assert from do_SOCKS5()
  - src: Avoid strdup on platforms not doing UTF-8 conversions
  - src: Clean-up ISBLANK vs. ISSPACE
  - src: Remove Curl_ prefix from tool-specific function
  - src: Remove final uses of Curl_ symbol prefixes in tool code
  - src: Replace strto[u][ld] with curlx_str_ parsers
  - ssh: Consider sftp quote commands case sensitive
  - sshserver.pl: Adjust 'AuthorizedKeysFile2' cutoff version
  - sshserver.pl: Use Perl 'chmod'
  - sshserver: Fix excluding obsolete client config lines
  - ssl session cache: Add exportable flag
  - SSLCERTS: List support for SSL_CERT_FILE and SSL_CERT_DIR
  - strparse: Make Curl_str_number() return error for no digits
  - strparse: Switch the API to work on 'const char *'
  - strparse: Switch to curl_off_t as base data type
  - test1022: Add support for rc releases
  - test1167: Catch #defines with extra whitespace
  - test313: Disable CRL test for Schannel due to lack of support and flakiness
  - test313: Disable via '&lt;features&gt;' for backends without CRL support
  - test489: Set output dir
  - test612: SCP 'rm' the uploaded remote file (not the local source), unignore in CI
  - test613: Make it pass on Windows, fix postprocess, unignore in CI
  - test615: Fix for Cygwin, unignore in CI
  - tests/certs: Clean up
  - tests/server: Drop unused 'base64.pl'
  - tests/server: Fix to check against winsock2 error codes on Windows
  - tests/server: Give global 'path' variable a more descriptive name
  - tests/server: Make the signal handler signal-safe
  - tests/server: Replace 'errno' with 'SOCKERRNO' in sockfilt, socksd, sws
  - tests/server: Replace 'strerror' with 'sstrerror' in socksd
  - tests/server: Support bundle binary
  - tests/server: Sync 'wait_ms()' with the libcurl implementation
  - tests/server: Use 'curlx_str_numblanks()' to avoid 'errno'
  - tests/servers.pm: Remove unused variable 'portrange'
  - tests: Build non-debug unit tests with autotools, run them
  - tests: Fix comment in lib533
  - tests: Fix enum/int confusion, fix autotools 'CFLAGS' for 'servers'
  - tests: Make sure 'commands.log' is generated in the correct logdir
  - tests: Mark tests 1631, 1632 flaky
  - tests: Reformat error messages to avoid tripping MSBuild
  - tests: Remove base64 encoded sections
  - tests: Remove unused variables
  - tests: Replace remaining non-ASCII bytes with hex markup
  - tftpd: Prefix TFTP protocol error 'E*' constants with 'TFTP_'
  - tidy-up: Align MSYS2/Cygwin codepaths, follow Cygwin 'MAX_PID' bump
  - tidy-up: Delete, comment or scope C macros reported unused
  - tidy-up: Drop unused 'CURL_INADDR_NONE' macro and 'in_addr_t' type
  - tidy-up: Use 'CURL_ARRAYSIZE()'
  - timediff: Fix comment for curlx_mstotv()
  - timediff: Remove unnecessary double typecast
  - tool_dirhie: Create dir hierarchy without strtok
  - tool_getparam: Clear sensitive arguments better
  - tool_getparam: Do parse_upload_flags without the alloc/free
  - tool_getparam: Parse --trace-config without strdup()/free()
  - tool_getparam: parse_header() without strtok
  - tool_operate: Change "1 retries" to "1 retry"
  - tool_operate: Fail SSH transfers without server auth
  - tool_operate: Fix pluralization of seconds
  - tool_operate: Remove unnecessary (long) typecasts
  - tool_paramhlp: Do --proto parsing without strtok
  - tool_parsecfg: Make my_get_line skip comments and newlines
  - tool_setopt: Reduce use of "code hiding" macros
  - url: Call protocol handler's disconnect in Curl_conn_free
  - urlapi: Fix redirect from file:// with query, and simplify
  - urlapi: Remove percent encoded dot sequences from the URL path
  - urlapi: Simplify junkscan
  - urldata: Remove 'hostname' from struct Curl_async
  - variable.md: Clarify 'trim' example
  - vquic: Obey IOV_MAX
  - vtls: Fix compiler warnings seen with gcc 7.3.0 and mbedTLS
  - winbuild: Reduce command-line length by dropping whitespace
  - windows: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - windows: Drop code and curl manifest targeting W2K and older
  - windows: Fix issues detected by clang-tidy, and some more
  - wolfssh: Fix freeing of resources in disconnect
  - wolfssh: Retrieve the error using wolfSSH_get_error
  - wolfssl: Fix CA certificate multiple location import
  - wolfssl: Fix unused variable warning
  - wolfssl: Warn if CA native import option is ignored
  - wolfssl: When using PQ KEM, use ML-KEM, not Kyber
  - ws: Corrected curlws_cont to reflect its documented purpose
  - ws: Fix and extend CURLWS_CONT handling
  - zlib: Bump minimum to 1.2.5.2 (was: 1.2.0.4)
- BR: openssl, needed for cert generation in test suite
- Drop "compat" build support in spec
- Drop legacy ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.0.cf" date="1748433600">- Update to 8.14.0
  - mqtt: Send ping at upkeep interval
  - schannel: Handle pkcs12 client certificates containing CA certificates
  - TLS: Add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: Import v2025.04.20 script and documentation
  - websocket: Add option to disable auto-pong reply
  - _SEEALSO.md: Remove spaces around command and man page section
  - asny-thrdd: Fix detach from running thread
  - asnyc-thrdd: Explain how this is okay with a comment
  - async resolver code improvements
  - async-threaded resolver: Use ref counter
  - async: DoH improvements
  - autotools: Detect 'wolfSSL_set_quic_use_legacy_code' like cmake does
  - autotools: Install shell completion files on cross build
  - aws-sigv4: Allow a blank string
  - build: Check required rustls-ffi version
  - build: Enable gcc-12/13+, clang-10+ picky warnings
  - build: Enable gcc-15 picky warnings
  - certs: Drop unused 'default_bits' from '.prm' files
  - cf-https-connect: Use the passed-in dns struct pointer
  - cf-socket: Fix FTP accept connect
  - cfilters: Remove assert
  - cmake/FindNGTCP2: Simplify multi-pkg-config detection
  - cmake: Append picky warnings to 'CMAKE_REQUIRED_FLAGS' as string
  - cmake: Avoid 'target is imported but not globally visible' when consuming
    libcurl with old cmake
  - cmake: Do not install 'mk-ca-bundle' script and manpage
  - cmake: Enable '-Wall' for MSVC when 'PICKY_COMPILER=ON'
  - cmake: Extend integration tests
  - cmake: Fix 'fish' install directory detection via 'pkg-config'
  - cmake: Fix nghttp3 static linking with 'USE_OPENSSL_QUIC=ON'
  - cmake: Fix option() and mark_as_advanced() mixed order
  - cmake: Fix shell completion install when just one flavour is enabled
  - cmake: Honour individual picky option overrides found in 'CMAKE_C_FLAGS'
  - cmake: Install shell completions for cross-builds
  - cmake: Link 'crypt32' for OpenSSL feature detection
  - cmake: Merge 'CURL_WERROR' logic into 'PickyWarnings.cmake'
  - cmake: Prefer 'COMPILE_OPTIONS' over 'CMAKE_C_FLAGS' for custom C options
  - cmake: Quotes, whitespace, use 'VERSION_GREATER_EQUAL'
  - cmake: Revert 'CURL_LTO' behaviour for multi-config generators
  - cmake: Set 'BUILDING_LIBCURL' directly for unit test targets
  - cmake: Stop deleting '-W&lt;n&gt;' from 'CMAKE_C_FLAGS' (MSVC)
  - cmake: Tidy up and document feature detections in dependencies
  - cmake: Use 'CMAKE_COMPILE_WARNING_AS_ERROR' if available
  - cmake: Use 'INCLUDE_DIRECTORIES' prop to specify local header dirs
  - cmake: Use 'LIB_NAME' in 'curl-config.cmake.in'
  - cmake: Use absolute paths for completion targets
  - cmake: Use the 'LINK_OPTIONS' property with CMake 3.13+
  - configure: Catch asking for double resolver without https-rr
  - configure: Fix --disable-rt
  - configure: Restore link checks
  - configure: Suppress command not found for brew
  - conncache: Make Curl_cpool_init return void
  - connect: Shutdown timer fix
  - content_encoding: Transfer-Encoding parser improvements
  - CONTRIBUTE: Add project guidelines for AI use
  - contrithanks.sh: Drop set -e
  - cpool/cshutdown: Force close connections under pressure
  - curl: Fix memory leak when -h is used in config file
  - curl: Only warn once for --manual in manual-disabled build
  - curl_get_line: Handle lines ending on the buffer boundary
  - curl_krb5: Only use functions if FTP is still enabled
  - curl_multibyte: Fix up low-level calls, include in unity builds
  - curl_osslq: Remove a leftover debug fprintf() call
  - curl_url_get.md: Don't call it normalized
  - curl_version_info.md: Clarify ssl_version for MultiSSL
  - CURLMOPT_TIMERFUNCTION.md: Correct the example
  - CURLOPT_ERRORBUFFER.md: Buffer is read only after curl takes ownership
  - CURLOPT_FOLLOWLOCATION.md: Switch to GET =&gt; no body
  - CURLOPT_READFUNCTION.md: Mention the seek callback
  - CURLOPT_XFERINFOFUNCTION.md: Fix the callback return type in example
  - curlx: Move the docs to docs/internals/
  - DEPRECATE.md: Drop support for VS2008
  - DEPRECATE.md: Drop Windows CE support
  - dist: Drop duplicate entry from 'CMAKE_DIST'
  - dns_entry: Move from conn to data-&gt;state
  - Dockerfile: Update debian:bookworm-slim Docker digest to 90522ee
  - docs/INSTALL.md: Drop reference to removed configure option
  - docs/libcurl: Fix type and prototype problems in examples
  - docs/libcurl: Make examples build with picky compiler options
  - docs/libcurl: Mention sensitive data/headers
  - docs: Add missing return statement in examples
  - docs: Fix incorrect shell substitution in docker run example command
  - docs: Fix typo in retry.md
  - docs: Update distros links
  - doh: httpsrr fix
  - doh: Make sure CURLOPT_PROTOCOLS is set with a "long" arg
  - doh: Reduce the DNS request buffer size
  - easy_reset: Fix dohfor_mid member
  - ECH: Reference the OpenSSL ECH feature branch
  - etag-save.md: Mention how using both options is a good idea
  - eventfd: Fix feature guards
  - formdata: Clean-ups
  - ftp: Fix bug in failed init
  - ftp: Fix race in upload handling
  - ftplistparser: Add two overflow preventions
  - ftplistparser: Split up into more functions
  - generate.bat: Exclude curlinfo.c from legacy VS projects
  - genserv.pl: Fail with a message if 'openssl' is missing or failing
  - headers: Enforce a max number of response header to accept
  - headers: Set an error message on illegal response headers
  - hostip: Fix build without threaded-resolver and without DoH
  - hostip: Show the correct name on proxy resolve error
  - http2: Fix stream window size after unpausing
  - HTTP3.md: Fix incorrect variable placeholders
  - http: Fix a build error when all auths are disabled
  - http: Fix HTTP/2 handling of TE request header using "trailers"
  - http: In alt-svc negotiation only allow supported HTTP versions
  - http_aws_sigv4: Add additional verbose log statements
  - http_aws_sigv4: Improve sigv4 url encoding and canonicalization
  - http_chunks: Narrow variable scope for 'trlen'
  - http_negotiate: Fix non-SSL build with GSSAPI
  - https-connect: Fix httpsrr target check
  - HTTPSRR.md: Clarify somewhat
  - if2ip: Build the function also if FTP is present
  - imap: Remove redundant condition
  - INSTALL-CMAKE.md: Fix typo
  - INSTALL.md: Update the minimal libcurl size example
  - KNOWN_BUGS: Fix link in sivg4 issue 16.3
  - lib/src/docs/test: Improve curl_easy_setopt() calls
  - lib1560: Use hex notation, drop non-ASCII exception
  - lib3026: Drop DLL pre-load perf mitigation for old mingw
  - lib: Add const to clientwriter tables
  - lib: Drop curlx_getpid, use fake pid in SMB
  - lib: Include files using known path
  - lib: Make Curl_easyopts const
  - lib: Unify conversions to/from hex
  - libcurl-tutorial.md: Fix read callback explanation
  - libssh: Add NULL check for Curl_meta_get()
  - libssh: Fix memory leak
  - libssh: Remove a condition that always equals false
  - libtest/first: Stop defining MEMDEBUG_NODEFINES
  - libtests: Define CURL_DISABLE_DEPRECATION first
  - make: Clean tests better
  - mbedtls: TLS 1.3 is max when mbedtls has 1.3 support
  - metahash: Add asserts to help analyzers
  - mk-ca-bundle.pl: Follow redirects
  - mk-ca-bundle: Switch URLs to GitHub versions
  - mkhelp: Fix to not generate a line-ending space in some cases
  - mqtt: Use conn/easy meta hash
  - multi: Do transfer book keeping using mid
  - multi: init_do(): Check result
  - netrc: Avoid NULL deref on weird input
  - netrc: Avoid strdup NULL
  - netrc: Deal with null token better
  - ngtcp2: Clarify ignoring of result
  - openssl-quic: Avoid potential '-Wnull-dereference', add assert
  - openssl-quic: Fix printf mask
  - openssl-quic: Fix shutdown when stream not open
  - openssl: Enable builds for *both* engines and providers
  - openssl: Set the cipher string before doing private cert
  - parsedate: Provide Curl_wkday also for GnuTLS builds
  - processhelp.pm: Always call 'taskkill' with '-f' (force)
  - processhelp.pm: Avoid potential endless loop, log more (Windows)
  - progress: Avoid integer overflow when gathering total transfer size
  - pytest tls: Extend coverage (fixes WolfSSL cert validation, CVE-2025-4947)
  - pytest-xdist: pytest in parallel
  - pytest: Add pinnedpubkey test cases (fixes WolfSSL pinning, CVE-2025-5025)
  - pytest: Give parameterised tests better ids for read- and parsability
  - pytest: Make test_07_22 more lenient to exit codes
  - quic: No local idle connection timeout, ngtcp2 keep-alive
  - rand: Update comment on Curl_rand_bytes weak random
  - RELEASE-PROCEDURE.md: Release candidate git tagging explained
  - rtsp: Remove redundant condition
  - runtests: Add retry option to reduce flakiness
  - runtests: Fix indentation
  - runtests: Recognize lowercase 'windows' in 'curl -V'
  - runtests: Remove server verification after start
  - runtests: Split 'SSH_PWD' into 'SCP_PWD' and 'SFTP_PWD', and more
  - rustls: Make max size of cert and key reasonable
  - sasl: Give help when unable to select AUTH
  - scripts: completion.pl: Sort the completion file for all shells
  - scripts: Drop unused import, formatting
  - scripts: Fix --opts-dir help in completion.pl
  - scripts: Fix perl indentation, whitespace, semicolons
  - sectransp: Fix building for macOS Sierra and older
  - setopt: Provide info for CURLE_BAD_FUNCTION_ARGUMENT
  - smb: Avoid integer overflow on weird input date
  - socket: Use accept4 when available
  - socketpair: Support pipe2 where available
  - spacecheck.pl: Check for non-ASCII chars, fix fallouts
  - spacecheck.pl: Verify 'tests/data/test*' for non-ASCII chars
  - src: Drop strcase.[ch] from tool builds
  - src: Include memdebug.h consistently with angle brackets &lt;&gt;
  - src: Rename curlx_safefree to tool_safefree
  - test1173.pl: Whitelist some option-looking names that aren't options
  - test1658: Add unit test for the HTTPS RR decoder
  - test: Make unittest 1308 into a libtest
  - tests/ech_tests.sh: Sync shebang with rest of bash scripts
  - tests/FILEFORMAT.md: Clarify %hex[] formatting
  - tests/FILEFORMAT.md: Document the aws feature
  - tests/README.md: Document --test-duphandle
  - tests/README.md: List the openssl tool among the prerequisites
  - tests/server/dnsd: Basic DNS server for test suite
  - tests/server: Check for 'stream != NULL' in mqttd
  - tests/server: Fix typo in comment
  - tests/server: Stop using libcurl string comparisons
  - tests/server: Stop using libcurl's printf functions
  - tests/serverhelp: Remove last remnants of http-pipe server
  - tests/tunit: Make a separate directory for tool-based unit tests
  - tests: Add aws feature to the related tests
  - tests: Add https-mtls server to force client auth
  - tests: Fix some test tag mismatches
  - tests: Mark ipfs tests to require ipfs
  - tests: Move a boolean variable out of the path section
  - tests: Prefer '--insecure' over '-k'
  - tests: Provide all non-ascii data hex encoded
  - tests: Remove some unused test case sections
  - tests: Require IPv6 for 1265, 1324, 2086
  - tests: Separate tunit tests from unit tests more
  - tests: Stop using libcurl's strdup
  - tests: Unify test case keywords
  - tests: Use a more portable null device path
  - TODO: Remove "nicer lacking perl message"
  - tool_cb_write.c: Handle EINTR on flush
  - tool_getparam: Clear argument only when needed
  - tool_operate: Make retrycheck() a separate function
  - tool_operate: When retrying, only truncate regular files
  - tool_paramhlp: Avoid integer overflow in secs2ms()
  - tool_parsecfg: Make get_line handle lines ending on the buffer boundary
  - typecheck-gcc.h: Fix the typechecks
  - urlapi: Redirecting to "" is considered fine
  - urlapi: Remove unneeded guards around PUNY2IDN
  - urldata: Remove the unused struct field 'hide_progress'
  - VERSIONS: List all past releases
  - vquic: Consistent name for the stream struct across backends
  - vquic: Init for every call to recvmsg
  - vtls: Avoid NULL deref on bad PEM input
  - vtls: Fix build with ssl but without http
  - VULN-DISCLOSURE-POLICY: Use of weak algos
  - winbuild: Add the deprecation warning to the README
  - winbuild: curl_get_line is not used for tool builds
  - windows: Fix builds targeting WinXP, test it in CI
  - wolfssl: Fix to enable ALPN when available
  - ws: Fix the header replace check
  - ws: Store protocol context as connection meta data</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.1.cf" date="1748520000">- Fix regression: curl_multi_add_handle() returning OOM when using more than
  400 handles (GH#17475)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.1-1.0.cf" date="1749038400">- Update to 8.14.1
  - asyn-thrdd: Fix clean-up when RR fails due to OOM
  - autotools: Recognize more Linux targets when setting '-D_GNU_SOURCE'
  - BUG-BOUNTY.md: Mention the medium bounty amount in 2025
  - cmake: Fix missed version number for multi-pkg-config detections
  - cmdline-docs: Mention HTTP resumed uploads to be shaky
  - curl: make -N handled correctly
  - curl: Upload from '.' fix
  - dllmain: Exclude from Cygwin builds
  - docs/tests: Remove mention of hyper
  - docs: Fix typos
  - ftp: Fix teardown of DATA connection in done
  - http: Fail early when rewind of input failed when following redirects
  - license: Update some copyright links to curl.se
  - memanalyze.pl: Fix getaddrinfo/freeaddrinfo checks
  - misc: Fix spelling
  - misc: We write *an* IPv6 address
  - multi: Fix add_handle resizing
  - spelling: 'a' vs. 'an'
  - spelling: Call it null-terminate consistently
  - test1510: Fix expectation
  - tests: Await portfile to be complete
  - tests: Fix checks for https-mtls proto
  - tests: Improve server start reliability
  - tests: Move test docs into /docs
  - tests: Re-enable 1510, document heimdal memleak
  - tests: Test mtls also w/ clientAuth EKU only
  - tests: Test mtls with --insecure
  - tls BIOs: Handle BIO_CTRL_EOF correctly
  - tool_getparam: Make --no-anyauth not be accepted
  - tool_getparam: Refactored, simplified
  - tool_getparam: Remove two nextarg NULL checks
  - VULN-DISCLOSURE-POLICY.md: The distros list wants ≤ 7 days embargo
  - wolfssl: Fix sending of early data
  - ws: Handle blocked sends better (CVE-2025-5399)
  - ws: Tests and fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-1.0.cf" date="1752667200">- Update to 8.15.0
  - TLS: Remove support for Secure Transport and BearSSL
  - altsvc: Accept 'clear' without semicolon as well
  - asyn-ares: Remove redundant NULL check
  - asyn-thrdd: Free the previous name before strdup'ing the new
  - autotools: Detect and link 'brotlicommon' library for brotli
  - autotools: Drop '$top_builddir/src' from src header path
  - autotools: Drop headers from src mk-unity rules (fixup)
  - autotools: Drop no longer necessary '--srcdir' unity options
  - autotools: Drop redundant 'Makefile.inc' from 'EXTRA_DIST' in src
  - autotools: Simplify configuration in tests, examples
  - bufq: Change read/write signatures
  - bufq: Remove the unused Curl_bufq_unwrite function
  - build: Assume 'sys/socket.h', 'sys/time.h' on non-Windows (as in 'curl/curl.h')
  - build: Drop 'HAVE_SYS_SOCKET_H' and 'HAVE_SYS_TIME_H' macros
  - build: Drop explicit curlx from hdr paths, refer headers with 'curlx/' prefix
  - build: Drop unused variables in tests
  - build: Fix libcurltool with cmake and tunits, related tidy-ups
  - build: Split '.c' and '.h' file lists in tests
  - build: Stop checking for 'sys/stat.h'
  - build: stubgss tidy-ups (in tests)
  - build: Sync build scripts between client/libtest
  - build: Tidy up 'Makefile.inc' use in lib and src
  - build: Tidy up header paths, use srcdir where possible
  - cf-socket: Make socket data_pending a no-op
  - checksrc-all: Rewrite in Perl, remove 'checksrc.bat'
  - checksrc: Reduce exceptions, apply again to curlx
  - cmake/FindGSS: Fix processing C header path options
  - cmake/FindGSS: Initialize result variables
  - cmake: 'curl_add_clang_tidy_test_target' tidy-ups
  - cmake: Build 'stubgss' library for libtests to match autotools
  - cmake: Check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
  - cmake: Configure c-ares header directory in project root (was: lib)
  - cmake: Document OpenSSL and ngtcp2 crypto lib custom variables
  - cmake: Drop never-propagated C macros
  - cmake: Drop passing redundant 'CURL_STATICLIB' in examples and clients
  - cmake: Drop redundant macro from test clients
  - cmake: Drop reference to future variable
  - cmake: Enable soversion by default for OpenHarmony OS
  - cmake: Fix 'curl_add_clang_tidy_test_target' when no '-D' option
  - cmake: Fix generator expression in docs/examples
  - cmake: Gather options recursively in 'curl_add_clang_tidy_test_target'
  - cmake: Make docs depend on support files
  - cmake: Move 'OUTPUT' argument in the 'add_custom_command()' line
  - cmake: Omit clang-tidy on internal libs curlu and curltool
  - cmake: Replace 'cmakelint' with 'cmake-lint' from 'cmakelang', fix issues
  - cmake: Replace the way clang-tidy verifies tests, fix issues found
  - cmake: Simplify handling generated 'lib1521.c' in libtests
  - cmake: Sync 'target_link_libraries()' order in tests more
  - cmake: Sync tests scripts by using the variable 'BUNDLE'
  - cmake: Sync tests scripts with each other and autotools (more)
  - cmake: Use 'target_link_options()' when available
  - config-win32: Fix default targets, shorten macro logic
  - configure: Order LDAP after the SSL libraries
  - connect: Drop unused struct member
  - connection: Clarify 'transport'
  - connection: Eliminate member 'remote_addr'
  - curl-config: Fix whitespace in usage text
  - curl.h: Make CURL_IPRESOLVE_* symbols defined as longs
  - curl.h: Make CURLSSLOPT_* symbols defined as longs
  - curl.h: Remove the "RESERVED" error codes
  - curl: Implement non-blocking STDIN read on Windows
  - curl: Improve non-blocking STDIN performance
  - curl: Remove the global argument from many functions
  - curl: Unify pointer names to global config
  - curl_get_line: Make sure lines end with newline
  - curl_memory.h: Fix to undefine 'accept4'
  - curl_path: Make SFTP handle a path like /~ properly
  - curlinfo: Provide the 'digest' feature
  - CURLSHOPT_SHARE.md: Mention multi-threading requires callbacks
  - DEPRECATE.md: Add VS2005 removal to the list
  - digest: Fix build with disabled digest auth
  - DISTROS: Update NixOS link
  - docs,tests: Fix english grammar "allow to" -&gt; "allow &lt;something&gt; to"
  - docs/CONTRIBUTE: Fix broken link
  - docs/examples: Add ftp-delete.c
  - docs: Beef up examples/websocket.c
  - docs: Fix broken link in CODE_REVIEW.md
  - docs: Fix broken link in INSTALL.md
  - docs: Fix docs for CURLOPT_PREQUOTE after #17616
  - docs: Fix documentation of connect_only 2
  - docs: Fix two typos
  - docs: Mention that the netrc file works without port numbers
  - docs: Mention the as-is concept generically
  - docs: Note SSLS-EXPORT feature in -ssl-sessions doc
  - docs: Reflect that delimiter-separated capath is only OpenSSL
  - docs: Sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
  - docs: Warn about lifetime in CURLOPT_CLOSESOCKET*
  - easy: Fix comment-documentation
  - easygetopt: Fix curl logo in header comment
  - firefox-db2pem: Avoid use of eval in script
  - ftp: Fix prequotes for a directory in URL
  - ftplistparser: Split parse_unix into sub-functions
  - h2_serverpush: Fix file handle leaks reported by clang-tidy
  - h3: Fix query of concurrent streams
  - http/3: Report handshake with version and cipher as for TCP connections
  - http2: Do not delay RST send on aborted transfer
  - http2: Fix var types in is_alive() implementations
  - http: Explicitly ignore parsing errors for Retry-After
  - http: Fix build with cookies and HSTS disabled
  - http_ntlm: Protect against null deref
  - http_ntlm: Remove unreachable code
  - INSTALL.md: Cygwin details and add source code link
  - ldap: Avoid automake caching issues with LDAP library names
  - ldap: If ldap-lib is sufficient, add it to LIBS
  - ldap: Initial support for --with-ldap option
  - lib2082: Drop 'typedef struct'
  - lib: Address singleuse issues
  - lib: Avoid reusing unclean connection
  - lib: Drop two interim macros in favor of native libcurl API calls
  - lib: Fix unused parameter/function compiler warnings
  - lib: Make 'CURLX_SET_BINMODE()' and use it
  - lib: Make 'curlx_wait_ms()' and use it
  - lib: Replace scache no-op macros with '#ifdef'
  - lib: Stop 'time()' debug overrides at the end of source in altsvc, hsts
  - lib: Unify recv/send function signatures
  - libcurl-env.md: Drop LOGNAME, USER and NTLMUSER
  - libcurl.m4: Fix indentation
  - libssh2: Remove use of 'initialised' for clean-up
  - libssh: De-complex myssh_statemach_act()
  - libssh: Fix readdir issues
  - libtests: Make tests 1503, 1504, 1505 use the 1502 binary
  - libtests: More header tidy-ups
  - libtests: Stop building the same source multiple times
  - memdebug.h: #undef 'fclose' before defining it
  - memdebug.h: Eliminate global macro 'CURL_MT_LOGFNAME_BUFSIZE'
  - memdebug: Include in unity batch
  - memory: Stop overriding unused 'wcsdup()'/'_wcsdup()' system functions
  - memory: Tidy up '_tcsdup()' override
  - misc: Fix typos
  - mk-lib1521: Replace 'printf' with 'curl_mprintf'
  - multi: Add dirty bitset
  - multi: Do not expire a blocked transfer
  - multi: Fix polling with pending input
  - multi: Remove careful bounds check as coverity says it is not needed
  - multi: xfer table/bitset, handle limits
  - ngtcp2: Fix coverity warning about result handling
  - openssl: Enable readahead
  - openssl: Error on SSL_ERROR_SYSCALL
  - openssl: Fix handling of buffered data
  - openssl: Fix openssl engine use
  - openssl: Fix pkcs11 provider available check
  - os400: Upgrade ILE/RPG bindings with latest definitions
  - pingpong: On disconnect, check for unflushed pingpong state
  - projects/build-openssl.bat: Remove
  - pytest: test_07_70, weaken early data check
  - pytest: Adapt for runs with openssl-1.1.1
  - pytest: Disable test_07_37 and test_07_36 with openssl's quic
  - quic: Implement CURLINFO_TLS_SSL_PTR
  - RELEASE-PROCEDURE.md: Update docs/VERSIONS
  - runtests.pl: Fix sprintf() using one too many %s
  - runtests: Fix 'LD_PRELOAD' detection for cmake-built curl binaries
  - runtests: Support memory-limits per test
  - rustls: Apply memory function overrides, fixing an ECH buffer free
  - rustls: Don't try printing the not provided file
  - schannel: Allow partial chains for manual peer verification
  - schannel: Drop Windows 2000 compatibility logic
  - scorecard: Flame graphs and documentation
  - SCP/SFTP: Avoid busy loop after EAGAIN
  - scripts: Fix to quote the copyright email address
  - socks: Fix query when filter context is null
  - system.h: Remove some macros
  - test1117: Reduce write delays
  - test1175: Fix to run, and fix documentation issues detected
  - test1222: Fix for out-of-tree and no-libcurl-manual builds
  - test1499, 1599: use '%LOGDIR'
  - test1499: Verify two chunked responses on reused connection
  - test1596: Let test pass after year 2036
  - test1706: Pass include directory to 'managen' for out-of-tree builds
  - tests/client: Drop autotools logic no longer necessary
  - tests/client: Use 'curl_mfprintf()'
  - tests/dnsd: Read config from file
  - tests/http/clients: Drop hack and use 'curl_setup.h' again
  - tests/http/clients: Move to tests/client
  - tests/http/requirements: Remove multipart
  - tests/libtest: Call 'curlx_now_init()' for unit 1399, 2600 (Windows)
  - tests/libtest: Drop 'TEST_HANG_TIMEOUT' redefinition hack
  - tests/libtest: Drop a checksrc exception
  - tests/libtest: Use 'curltime' from curlx
  - tests/server/util.c: Include netinet/in6.h
  - tests/server: De-dupe/merge three 'sockdaemon()' clones into one
  - tests/server: Drop 'memdebug.h'
  - tests/server: Make all global vars/funcs static
  - tests/server: Move memory init to 'memptr.c'
  - tests/servers.pm: Add more ways to figure out current user
  - tests: Always make bundles, adapt build and tests
  - tests: Bundle http clients, de-dupe, enable for MSVC
  - tests: Constify, make consts static
  - tests: Drop 'BUNDLE_SRC' variable
  - tests: Drop mk-bundle exceptions
  - tests: Drop unused or redundant includes
  - tests: Drop useless "nodist_SOURCES" assignments
  - tests: Fail torture if !valgrind&amp;threaded resolver
  - tests: Fix 1301, 1308 to fail on error
  - tests: Fix 'BUNDLE' variable references in 'Makefile.am'
  - tests: Make all names &lt; 75 characters long
  - tests: Make individual test sources compile cleanly
  - tests: Make sshserver less verbose
  - tests: Move 'curlcheck.h' to libtest as 'unitcheck.h'
  - tests: Move GSS-API dynamic stub into debug-mode libcurl
  - tests: torture: Don't duplicate valgrind command
  - tests: Use %b64[] to base64 data
  - tests: Use %b64[] to base64 data in 2056, 2057
  - tftpd: Use 'CURLMIN()' macro
  - tidy-up: Replace '&lt;memdebug.h&gt;' with '"memdebug.h"' (src, units)
  - tls: Remove Curl_ssl false_start
  - tool1621: Drop unused internal libcurl headers
  - tool_getparam: Fix --ftp-pasv
  - tool_operate: Fix return code when --retry is used but not triggered
  - tool_paramhelp: Fix language in comments
  - top-complexity: Lower max allowed complexity threshold to 90
  - unit tests: Extract "private" prototypes at build time
  - unit1302: Expand the base64 encode/decode tests
  - url: Fix connection lifetime checks
  - url: Fix NULL deref with bad password when no user is provided
  - urlapi: Simplify and split into sub functions
  - urlapi: Use uppercase hex encoding
  - vauth: Move auth structs to conn meta data
  - vtls: Change send/recv signatures of tls backends
  - vtls: Fix a copy-pasted early data comment typo
  - vtls: Log rustls negotiated KEX group name
  - vtls: Prefer ciphersuite to cipher in msgs
  - vtls: Prefer rustls-ffi ciphersuite name API
  - VULN-DISCLOSURE-POLICY.md: Fix typos
  - VULN-DISCLOSURE-POLICY: All reports should be disclosed
  - VULN-DISCLOSURE-POLICY: Exclude not installed software
  - VULN-DISCLOSURE-POLICY: Minor language polish
  - warnless: Drop parts of the 'read'/'write' preprocessor hack (Windows)
  - warnless: Replace 'read()'/'write()' wrapper functions with macros (Windows)
  - windows: Drop redundant 'curl_wcsdup_callback' callback
  - windows: Fixup 'fopen()' in 'CURLDEBUG' builds
  - windows: Reduce/stop loading DLLs at runtime
  - wolfssl: Add support for ML_KEM hybrids
  - ws: Drop redundant 'CURL_EXTERN' from function definitions
  - xfer: Manage pause bits</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.0.cf" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.1.cf" date="1753617600">- Fix dependency on CA bundle when we don't use the old one at
  /etc/pki/tls/certs/ca-bundle.crt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
</package>
<package pkgid="531aaf57b475fb29cc8fd52c9eb2a118e6f21f9d70d8f568ebf070b7940abc68" name="curl-minimal" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12.1-1.0.cf" date="1739448000">- Update to 8.12.1
  - All: Remove FIXME and TODO comments
  - asyn-thread: Fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: Fix HTTPS RR crash
  - asyn-thread: Fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: Survive a c-ares channel set to NULL
  - build: Add tool_hugehelp.c into IBMi build
  - checksrc.pl: Warn on FIXME/TODO comments
  - cmake/Find: Set '&lt;Modulename&gt;_FOUND' for compatibility when found via 'pkg-config'
  - cmake: Add integration tests, run them in CI
  - cmake: Always reference OpenSSL and ZLIB via imported targets
  - cmake: Avoid unnecessary '-L' for implicit link dirs
  - cmake: Drop 'LDAP_DEPRECATED=1' macro, to sync with autotools
  - cmake: Fix 'HAVE_GETHOSTBYNAME_R_*' detections with 'CURL_WERROR=ON'
  - cmake: Fix to detect 'HAVE_OPENSSL_SRP' in MSVC UWP builds
  - cmake: Fix/add missing feature detections for Windows/MS-DOS
  - cmake: Initialize variables where missing
  - cmake: Library order fixes for picky linkers (e.g. binutils 'ld')
  - cmake: Normalize before matching paths with syspaths
  - cmake: Respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: Respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - cmake: Save a line with 'CMAKE_C_IMPLICIT_LINK_DIRECTORIES' exclusion
  - cmake: Tidy up string append and list prepend syntax
  - configure/cmake: Check for realpath
  - configure/cmake: Set asyn-rr as feature only if httpsrr is enabled
  - content_encoding: #error on too old zlib
  - curl_global_sslset.md: Add SSL backend names
  - CURLOPT_SSH_KNOWNHOSTS.md: Strongly recommend using this
  - CURLSHOPT_SHARE.md: Adjust for the new SSL session cache
  - docs: Better explain multi-part byte range behaviour
  - docs: Use valid example domain names
  - generate.bat: Remove curl_get_line.c from the curlx file list
  - header.md: Mention 'Authorization:' and 'Cookie:' special treatment
  - imap: TLS upgrade fix
  - INTERNALS: Fix c-ares, as we actually support 1.6.0 or later
  - ldap: Drop support for legacy Novell LDAP SDK
  - lib: include necessary headers for 'inet_ntop'/'inet_pton'
  - lib: Silence LibreSSL collision warning on non-MSVC Windows
  - libssh2: Comparison is always true because rc &lt;= -1
  - libssh2: Raise lowest supported version to 1.2.8
  - libssh: Drop support for libssh older than 0.9.0
  - libssh: Silence '-Wconversion' with a cast (Windows 32-bit)
  - netrc: return code clean-up, fix missing file error
  - openssl-quic: Ignore ciphers for h3
  - openssl: Fix out of scope variables in goto
  - pop3: TLS upgrade fix
  - runtests: Fix the disabling of the memory tracking
  - runtests: Quote commands to support paths with spaces
  - scache: Add magic checks
  - smb: Silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - SPONSORS.md: Clarify that we don't promise goods or services
  - test1516: Avoid failure due to spaces in path
  - test2080: Simplify, avoid the null byte
  - tests: Fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
  - tidy-up: Make per-file 'ARRAYSIZE' macros global as 'CURL_ARRAYSIZE'
  - tool_cfgable: Sort struct fields by size, use bitfields for booleans
  - tool_getparam: Add "TLS required" flag for each such option
  - tool_progress: Fix percent output of large parallel transfers
  - tool_ssls: Switch to tool-specific get_line function
  - verbose.md: Mention how carriage-return might occur in headers
  - vquic: Make the "disable GSO" use infof, not failf
  - vtls: Fix multissl-init
  - vtsl: Eliminate 'data-&gt;state.ssl_scache'
  - wakeup_write: Make sure the eventfd write sends eight bytes
  - wolfssl: Silence compiler warning (MSVC 2019), simplify existing
- Use libssh2 rather than libssh for Fedora 28 and 29 builds since their
  versions of libssh are too old for curl now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.13.0-1.0.cf" date="1743595200">- Update to 8.13.0
  - curl: Add write-out variable 'tls_earlydata'
  - curl: Make --url support a file with URLs
  - gnutls: Set priority via --ciphers
  - IMAP: Add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: Add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: Add support for TLSv1.3 early data
  - rustls: Add support for CERTINFO
  - rustls: Add support for SSLKEYLOGFILE
  - rustls: Support ECH with DoH lookup for config
  - rustls: Support native platform verifier
  - var: Add a '64dec' function that can base64 decode a string
  - wolfssl: TLS early data support
  - addrinfo: Add curl macro to avoid redefining foreign symbols
  - asyn-thread: Avoid the separate 'struct resdata' alloc
  - asyn-thread: Avoid the separate curl_mutex_t alloc
  - asyn-thread: Do not allocate thread_data separately
  - asyn-thread: Remove 'status' from struct Curl_async
  - autotools: Fix 'dllmain.c' in unity builds
  - autotools: Fix 'libtest' bundle to depend on 'FIRSTFILES'
  - autotools: Use 'CURLDEBUG' to exclude TrackMemory code from unity
  - aws_sigv4: Cannot be used for proxy
  - aws_sigv4: Merge repeated headers in canonical request
  - aws_sigv4: Use strparse more for parsing
  - base64: Drop 'BUILDING_CURL' macro, always include in tests/server
  - build: Add Windows CE / CeGCC support, with CI jobs
  - build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls)
  - build: Do not apply curl debug macros to 'tests/server' by default
  - build: Drop unused 'getpart' tool
  - build: Enable -Wjump-misses-init for GCC 4.5+
  - build: Enable '-Wcast-qual', fix or silence compiler warnings
  - build: Fix compiler warnings in feature detections
  - build: Replace Curl_ prefix with curlx_ for functions used in servers
  - build: Set '-O3' and tune WinCE in CI, fix 'getpart', 'vtls_scache' fallouts
  - build: Set 'HAVE_STDINT_H' if 'stdint.h' is available
  - build: Set 'HAVE_WRITABLE_ARGV' for Apple cross-builds
  - build: Silence bogus '-Wconversion' warnings with gcc 5.1-5.4
  - build: Silence mingw32ce C99 format warnings, simplify CI
  - build: Tidy-ups around 'inet_pton'
  - c-ares httpsrr: Fix ifdef
  - c-ares: Error out for unsupported versions, drop unused macros
  - ca-native.md: Sync with CURLSSLOPT_NATIVE_CA
  - cf-socket: Deduplicate Windows Vista detection
  - cf-socket: Remove empty switch
  - client writer: Handle pause before decoding
  - cmake: 'CURL_LIBDIRS' improvements (upstreamed from vcpkg)
  - cmake: 'SHARE_LIB_OBJECT=ON' requires CMake 3.12 or newer
  - cmake: Add custom command scripts as dependencies where missing
  - cmake: Add pre-fill for Unix, enable in GHA/macos, verify pre-fills
  - cmake: Add shell completion support
  - cmake: Allow 'CURL_STATIC_CRT' with shared libcurl and no curl exe
  - cmake: Allow 'CURL_STATIC_CRT' with UCRT VS2015+ builds
  - cmake: Allow empty 'IMPORT_LIB_SUFFIX', add suffix collision detection
  - cmake: Avoid '-Wnonnull' warning in 'HAVE_FSETXATTR_5' detection
  - cmake: Disable HTTPS-proxy as a feature if proxy is disabled
  - cmake: Drop 'CURL_DISABLE_TESTS' option
  - cmake: Drop 'HAVE_C_FLAG_Wno_long_double' logic for ancient Apple gcc
  - cmake: Drop 'HAVE_IN_ADDR_T' from pre-fill too
  - cmake: Drop two stray TLS feature checks for wolfSSL
  - cmake: Exclude '-MP' for 'clang-cl' again
  - cmake: Fix 'HAVE_ATOMIC'/'HAVE_STDATOMIC' pre-fill for clang-cl
  - cmake: Fix clang-tidy builds to verify tests, fix fallouts
  - cmake: Fix detection pre-fills for iOS
  - cmake: Fix ECH detection in custom-patched OpenSSL
  - cmake: Fix typo in ECH config error msg
  - cmake: Hide empty 'MINGW64_VERSION' output for mingw32ce
  - cmake: Improve httpd detection for pytest
  - cmake: Mention 'insecure' in the debug build warning
  - cmake: Misc tidy-ups
  - cmake: Pre-fill known type sizes for Windows OSes
  - cmake: Replace CMAKE_COMPILER_IS_GNUCC with CMAKE_C_COMPILER_ID
  - cmake: Replace exec_program() with execute_process()
  - cmake: Restrict static CRT builds to static curl exe, test in CI
  - cmake: Sync cutoff version with autotools for picky option '-ftree-vrp'
  - cmake: Sync OpenSSL(-fork) feature checks with './configure'
  - cmake: Unity mode optimization for non-'CURLDEBUG' 'testdeps' targets
  - CODE_STYLE: Readability and banned functions
  - config-win32: Set 'HAVE_STDINT_H' where available
  - configure: Call the blocking resolver "blocking", not "default"
  - configure: Fix ECH detection with MultiSSL
  - configure: Silence compiler warnings in feature checks, drop duplicates
  - configure: Tidy up shell completion rules
  - configure: Use 'curl_cv_apple' variable
  - conn: Eliminate 'conn-&gt;now'
  - conn: Fix connection reuse when SSL is optional
  - conncache: Eliminate 'conn-&gt;destination_len' as premature optimization
  - contributors.sh: Lowercase 'github' for consistency
  - contrithanks.sh: Update docs/THANKS in place
  - cookie: Do prefix matching case-sensitively
  - cookie: Minor parser simplification
  - cookie: Simplify invalid_octets()
  - core: Stop redefining 'E*' macros on Windows, map 'EACCES', related fixes
  - curl.h: Change some enums to defines with L suffix
  - curl.h: Convert CURLUSESSL* names to defines
  - curl.h: Stop defining non-curl '__has_declspec_attribute'
  - curl.h: Switch 'CURL_HTTP_VERSION*' enums to long constants
  - curl/system.h: Drop leftover comment about 32 bit curl_off_t
  - curl: Add my_setopt_long() and _offt()
  - curl_msh3: Remove verify bypass from DEBUGBUILDs
  - curl_setup: Drop 'ERANGE' (for WinCE), no longer used
  - curl_setup_once: Drop 'E*' macro redefines unused (with winsock2)
  - curl_setup_once: Stop redefining 'ENAMETOOLONG' to winsock2 error code
  - curl_trc: Fix build with CURL_DISABLE_VERBOSE_STRINGS
  - curl_ws_recv.md: Expand a little on the fragments the API delivers
  - CURLMOPT_SOCKETFUNCTION.md: Add advice for socket callback invocation
  - CURLOPT_HTTPHEADER.md: Add comments to the example
  - CURLOPT_HTTPHEADER.md: Rephrases
  - curltime: Use libcurl time functions in src and tests/server
  - DISABLED: Add 313 for sectransp (move from GHA/macos)
  - docs/cmdline-opts: Use imperative form
  - docs: Adapt to removed --with-random
  - docs: Add FD_ZERO to curl_multi_fdset example
  - docs: Bump 'rustls' to 0.14.1
  - docs: Correct argument names and URL redirection
  - docs: Minor edits to please the new spellchecker regime
  - docs: Rework RUSTLS install instructions
  - docs: Unify HTTP version style in --help output
  - docs: Vulnerabilities in debug code are not eligible for a bounty
  - doh: Improve HTTPS RR svcparams parsing
  - doh: Remove wrong but unreachable exit path from doh_decode_rdata_name
  - dynbuf: Assert init on free
  - easy: Drop 'break' after 'return'
  - easy: Fix warning about possible comma misuse
  - eventfd: Allow use on all CPUs
  - examples: Prefer 'return' over 'exit()' (cont.)
  - ftp/sftp: strdup data info memory
  - ftp: Fix comment
  - gnutls: Fix connection state check on handshake
  - gnutls: Fix use of pkcs11 urls for keys/certs
  - gtls: Fix uninitialized variable
  - hash: Use single linked list for entries
  - hostip: Don't use alarm() for DoH resolves
  - hostip: Make CURLOPT_RESOLVE support replacing IPv6 addresses
  - http2: Add on_invalid_frame callback for error detection
  - http2: Detect session being closed on ingress handling
  - http2: Enhance error messages on Curl_dyn* upon receiving headers
  - http2: Fix stream assignemnt for pushes
  - http2: Reset stream on response header error
  - HTTP3.md: Only speak about minimal versions
  - http: Convert parsers to strparse
  - http: Fix NTLM info message typo
  - http: Fix the auth check
  - http: Make the RTSP version check stricter
  - http: Negotiation and room for alt-svc/https RR to navigate
  - http: Remove a HTTP method size restriction
  - http: Version negotiation
  - http_chunks: Replace a strofft call with curl_str_hex
  - https-rr: Implementation improvements
  - httpsrr: Fix port detection
  - httpsrr: Fix the HTTPS-RR threaded-resolver build combo
  - INFRASTRUCTURE.md: Add IRC and Matrix details
  - INSTALL-CMAKE.md: CMake usage updates
  - INSTALL-CMAKE.md: mention 'ZLIB_USE_STATIC_LIBS'
  - lib1156: Pass longs to 'curl_easy_setopt()'
  - lib1560: Test set path containing LR or CR
  - lib2302: Fix crash due to stack overflow on MSVC and clang Windows
  - lib696: Fix building on Windows in non-bundle mode
  - lib: Better optimized casecompare() and ncasecompare()
  - lib: Clear up CURLRES_ASYNCH vs. USE_CURL_ASYNC use
  - lib: Fix two curlx_strtoofft invokes
  - lib: Rename curlx_strtoofft to Curl_str_numblanks()
  - lib: Replace while(ISBLANK()) loops with Curl_str_passblanks()
  - lib: Simplify more white space loops
  - lib: strtoofft.h header cleanup
  - lib: Use Curl_str_* instead of strtok_r()
  - lib: Use Curl_str_number() for parsing decimal numbers
  - libssh2: Fix freeing of resources in disconnect
  - libssh2: Fix memory leak in 'SSH_SFTP_REALPATH' state
  - libssh2: Fix to ignore 'known_hosts' if SHA256 host public key is set
  - libssh2: Print user with verbose flag
  - libssh2: Show crypto backend in the verbose connect log
  - libssh: Fix freeing of resources in disconnect
  - libssh: Fix scp large file upload for 32-bit size_t systems
  - libtest/first.c: Remove the Test: stderr output for unity builds
  - libtest/libprereq.c: Set CURLOPT_FOLLOWLOCATION with a long
  - managen: Accept more markdown-quote-markers
  - managen: Correct the warning for un-escaped '&lt;' and '&gt;'
  - mbedtls: Re-enable an error check
  - memdebug.h: Avoid '-Wredundant-decls' with an extra guard
  - memdebug: Drop dynamic allocation from 'curl_dbg_log()'
  - mprintf: Switch three number parsers to use strparse
  - mqtt: Convert sendleftovers to dynbuf
  - msvc: Drop support for VS2005 and older
  - multi: Call protocol handler done() if PROTOCONNECT or later
  - multi: Event based rework
  - multi: Kill off remaining internal handles in curl_multi_cleanup
  - multi: Start the loop over when handles are removed
  - multi_ev: Fixes regarding connection shutdowns
  - ngtcp2: Do not iterate over multi handles
  - ntlm: Merge ntlm.h into ntlm.c
  - openssl-quic: Do not iterate over multi handles
  - openssl: Check return value of X509_get0_pubkey
  - openssl: Drop support for old OpenSSL/LibreSSL versions
  - openssl: Fix crash on missing cert password
  - openssl: Fix pkcs11 URI checking for key files
  - openssl: Remove bad 'goto's into other scope
  - prox/preproxy.md: Document argument within &lt;brackets&gt;
  - pytest: Test negotiate with http proxy
  - quiche: Do not iterate over multi handles
  - RELEASE-PROCEDURE.md: Explain release candidates
  - request: Clear sendbuf_hds_len when resetting request bufq
  - resolve: Fix building without Unix sockets and 'CURLDEBUG'
  - runtests: Accept 'CURL_DIRSUFFIX' without ending slash
  - runtests: Add feature-based filtering
  - runtests: Check and report if 'diff' tool is missing
  - runtests: Drop logic calling the 'handle' tool (Windows)
  - runtests: Drop recognizing 'winssl' as Schannel
  - runtests: Drop ref to unused external function
  - runtests: Fix bundled test invocation with '-g' option
  - runtests: Fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs
  - runtests: Fix test key format for libssh2 WinCNG (and others)
  - runtests: Generate certs dynamically, bump to EC-256, tidy up
  - runtests: Recognize AWS-LC as OpenSSL
  - runtests: Rewrite 'genserv.sh' in Perl
  - runtests: Support multi-target cmake, drop workarounds from CI
  - runtests: Support running tests under wine or qemu (cont.)
  - runtests: Support running tests under wine or qemu
  - runtests: Use 'setfacl' on Cygwin/MSYS, if present
  - rustls: Add ECH support with string ECH config
  - rustls: Cap maximum allowed CRL file size to 8MB
  - rustls: Support ECH GREASE
  - rustls: Use client cert and key if available
  - schannel: Deduplicate Windows Vista detection
  - schannel: Enable ALPN support under WINE 6.0+
  - schannel: Enable ALPN with MinGW, fix ALPN for UWP builds
  - schannel: Guard ALPN init code to ALPN builds
  - scripts/managen: Fix option 'single'
  - scripts/managen: Fix parsing of markdown code sections
  - scripts: Update completion.pl to parse options from docs
  - sectransp: Add support for HTTP/2 in gcc builds
  - sendf: Client reader line conversion: do not change data-&gt;state.infilesize
  - setopt: Illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: Remove unnecessary void pointer typecasts
  - setopt: Setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - shutdowns: Split shutdown handling from connection pool
  - socks: Remove bad assert from do_SOCKS5()
  - src: Avoid strdup on platforms not doing UTF-8 conversions
  - src: Clean-up ISBLANK vs. ISSPACE
  - src: Remove Curl_ prefix from tool-specific function
  - src: Remove final uses of Curl_ symbol prefixes in tool code
  - src: Replace strto[u][ld] with curlx_str_ parsers
  - ssh: Consider sftp quote commands case sensitive
  - sshserver.pl: Adjust 'AuthorizedKeysFile2' cutoff version
  - sshserver.pl: Use Perl 'chmod'
  - sshserver: Fix excluding obsolete client config lines
  - ssl session cache: Add exportable flag
  - SSLCERTS: List support for SSL_CERT_FILE and SSL_CERT_DIR
  - strparse: Make Curl_str_number() return error for no digits
  - strparse: Switch the API to work on 'const char *'
  - strparse: Switch to curl_off_t as base data type
  - test1022: Add support for rc releases
  - test1167: Catch #defines with extra whitespace
  - test313: Disable CRL test for Schannel due to lack of support and flakiness
  - test313: Disable via '&lt;features&gt;' for backends without CRL support
  - test489: Set output dir
  - test612: SCP 'rm' the uploaded remote file (not the local source), unignore in CI
  - test613: Make it pass on Windows, fix postprocess, unignore in CI
  - test615: Fix for Cygwin, unignore in CI
  - tests/certs: Clean up
  - tests/server: Drop unused 'base64.pl'
  - tests/server: Fix to check against winsock2 error codes on Windows
  - tests/server: Give global 'path' variable a more descriptive name
  - tests/server: Make the signal handler signal-safe
  - tests/server: Replace 'errno' with 'SOCKERRNO' in sockfilt, socksd, sws
  - tests/server: Replace 'strerror' with 'sstrerror' in socksd
  - tests/server: Support bundle binary
  - tests/server: Sync 'wait_ms()' with the libcurl implementation
  - tests/server: Use 'curlx_str_numblanks()' to avoid 'errno'
  - tests/servers.pm: Remove unused variable 'portrange'
  - tests: Build non-debug unit tests with autotools, run them
  - tests: Fix comment in lib533
  - tests: Fix enum/int confusion, fix autotools 'CFLAGS' for 'servers'
  - tests: Make sure 'commands.log' is generated in the correct logdir
  - tests: Mark tests 1631, 1632 flaky
  - tests: Reformat error messages to avoid tripping MSBuild
  - tests: Remove base64 encoded sections
  - tests: Remove unused variables
  - tests: Replace remaining non-ASCII bytes with hex markup
  - tftpd: Prefix TFTP protocol error 'E*' constants with 'TFTP_'
  - tidy-up: Align MSYS2/Cygwin codepaths, follow Cygwin 'MAX_PID' bump
  - tidy-up: Delete, comment or scope C macros reported unused
  - tidy-up: Drop unused 'CURL_INADDR_NONE' macro and 'in_addr_t' type
  - tidy-up: Use 'CURL_ARRAYSIZE()'
  - timediff: Fix comment for curlx_mstotv()
  - timediff: Remove unnecessary double typecast
  - tool_dirhie: Create dir hierarchy without strtok
  - tool_getparam: Clear sensitive arguments better
  - tool_getparam: Do parse_upload_flags without the alloc/free
  - tool_getparam: Parse --trace-config without strdup()/free()
  - tool_getparam: parse_header() without strtok
  - tool_operate: Change "1 retries" to "1 retry"
  - tool_operate: Fail SSH transfers without server auth
  - tool_operate: Fix pluralization of seconds
  - tool_operate: Remove unnecessary (long) typecasts
  - tool_paramhlp: Do --proto parsing without strtok
  - tool_parsecfg: Make my_get_line skip comments and newlines
  - tool_setopt: Reduce use of "code hiding" macros
  - url: Call protocol handler's disconnect in Curl_conn_free
  - urlapi: Fix redirect from file:// with query, and simplify
  - urlapi: Remove percent encoded dot sequences from the URL path
  - urlapi: Simplify junkscan
  - urldata: Remove 'hostname' from struct Curl_async
  - variable.md: Clarify 'trim' example
  - vquic: Obey IOV_MAX
  - vtls: Fix compiler warnings seen with gcc 7.3.0 and mbedTLS
  - winbuild: Reduce command-line length by dropping whitespace
  - windows: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - windows: Drop code and curl manifest targeting W2K and older
  - windows: Fix issues detected by clang-tidy, and some more
  - wolfssh: Fix freeing of resources in disconnect
  - wolfssh: Retrieve the error using wolfSSH_get_error
  - wolfssl: Fix CA certificate multiple location import
  - wolfssl: Fix unused variable warning
  - wolfssl: Warn if CA native import option is ignored
  - wolfssl: When using PQ KEM, use ML-KEM, not Kyber
  - ws: Corrected curlws_cont to reflect its documented purpose
  - ws: Fix and extend CURLWS_CONT handling
  - zlib: Bump minimum to 1.2.5.2 (was: 1.2.0.4)
- BR: openssl, needed for cert generation in test suite
- Drop "compat" build support in spec
- Drop legacy ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.0.cf" date="1748433600">- Update to 8.14.0
  - mqtt: Send ping at upkeep interval
  - schannel: Handle pkcs12 client certificates containing CA certificates
  - TLS: Add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: Import v2025.04.20 script and documentation
  - websocket: Add option to disable auto-pong reply
  - _SEEALSO.md: Remove spaces around command and man page section
  - asny-thrdd: Fix detach from running thread
  - asnyc-thrdd: Explain how this is okay with a comment
  - async resolver code improvements
  - async-threaded resolver: Use ref counter
  - async: DoH improvements
  - autotools: Detect 'wolfSSL_set_quic_use_legacy_code' like cmake does
  - autotools: Install shell completion files on cross build
  - aws-sigv4: Allow a blank string
  - build: Check required rustls-ffi version
  - build: Enable gcc-12/13+, clang-10+ picky warnings
  - build: Enable gcc-15 picky warnings
  - certs: Drop unused 'default_bits' from '.prm' files
  - cf-https-connect: Use the passed-in dns struct pointer
  - cf-socket: Fix FTP accept connect
  - cfilters: Remove assert
  - cmake/FindNGTCP2: Simplify multi-pkg-config detection
  - cmake: Append picky warnings to 'CMAKE_REQUIRED_FLAGS' as string
  - cmake: Avoid 'target is imported but not globally visible' when consuming
    libcurl with old cmake
  - cmake: Do not install 'mk-ca-bundle' script and manpage
  - cmake: Enable '-Wall' for MSVC when 'PICKY_COMPILER=ON'
  - cmake: Extend integration tests
  - cmake: Fix 'fish' install directory detection via 'pkg-config'
  - cmake: Fix nghttp3 static linking with 'USE_OPENSSL_QUIC=ON'
  - cmake: Fix option() and mark_as_advanced() mixed order
  - cmake: Fix shell completion install when just one flavour is enabled
  - cmake: Honour individual picky option overrides found in 'CMAKE_C_FLAGS'
  - cmake: Install shell completions for cross-builds
  - cmake: Link 'crypt32' for OpenSSL feature detection
  - cmake: Merge 'CURL_WERROR' logic into 'PickyWarnings.cmake'
  - cmake: Prefer 'COMPILE_OPTIONS' over 'CMAKE_C_FLAGS' for custom C options
  - cmake: Quotes, whitespace, use 'VERSION_GREATER_EQUAL'
  - cmake: Revert 'CURL_LTO' behaviour for multi-config generators
  - cmake: Set 'BUILDING_LIBCURL' directly for unit test targets
  - cmake: Stop deleting '-W&lt;n&gt;' from 'CMAKE_C_FLAGS' (MSVC)
  - cmake: Tidy up and document feature detections in dependencies
  - cmake: Use 'CMAKE_COMPILE_WARNING_AS_ERROR' if available
  - cmake: Use 'INCLUDE_DIRECTORIES' prop to specify local header dirs
  - cmake: Use 'LIB_NAME' in 'curl-config.cmake.in'
  - cmake: Use absolute paths for completion targets
  - cmake: Use the 'LINK_OPTIONS' property with CMake 3.13+
  - configure: Catch asking for double resolver without https-rr
  - configure: Fix --disable-rt
  - configure: Restore link checks
  - configure: Suppress command not found for brew
  - conncache: Make Curl_cpool_init return void
  - connect: Shutdown timer fix
  - content_encoding: Transfer-Encoding parser improvements
  - CONTRIBUTE: Add project guidelines for AI use
  - contrithanks.sh: Drop set -e
  - cpool/cshutdown: Force close connections under pressure
  - curl: Fix memory leak when -h is used in config file
  - curl: Only warn once for --manual in manual-disabled build
  - curl_get_line: Handle lines ending on the buffer boundary
  - curl_krb5: Only use functions if FTP is still enabled
  - curl_multibyte: Fix up low-level calls, include in unity builds
  - curl_osslq: Remove a leftover debug fprintf() call
  - curl_url_get.md: Don't call it normalized
  - curl_version_info.md: Clarify ssl_version for MultiSSL
  - CURLMOPT_TIMERFUNCTION.md: Correct the example
  - CURLOPT_ERRORBUFFER.md: Buffer is read only after curl takes ownership
  - CURLOPT_FOLLOWLOCATION.md: Switch to GET =&gt; no body
  - CURLOPT_READFUNCTION.md: Mention the seek callback
  - CURLOPT_XFERINFOFUNCTION.md: Fix the callback return type in example
  - curlx: Move the docs to docs/internals/
  - DEPRECATE.md: Drop support for VS2008
  - DEPRECATE.md: Drop Windows CE support
  - dist: Drop duplicate entry from 'CMAKE_DIST'
  - dns_entry: Move from conn to data-&gt;state
  - Dockerfile: Update debian:bookworm-slim Docker digest to 90522ee
  - docs/INSTALL.md: Drop reference to removed configure option
  - docs/libcurl: Fix type and prototype problems in examples
  - docs/libcurl: Make examples build with picky compiler options
  - docs/libcurl: Mention sensitive data/headers
  - docs: Add missing return statement in examples
  - docs: Fix incorrect shell substitution in docker run example command
  - docs: Fix typo in retry.md
  - docs: Update distros links
  - doh: httpsrr fix
  - doh: Make sure CURLOPT_PROTOCOLS is set with a "long" arg
  - doh: Reduce the DNS request buffer size
  - easy_reset: Fix dohfor_mid member
  - ECH: Reference the OpenSSL ECH feature branch
  - etag-save.md: Mention how using both options is a good idea
  - eventfd: Fix feature guards
  - formdata: Clean-ups
  - ftp: Fix bug in failed init
  - ftp: Fix race in upload handling
  - ftplistparser: Add two overflow preventions
  - ftplistparser: Split up into more functions
  - generate.bat: Exclude curlinfo.c from legacy VS projects
  - genserv.pl: Fail with a message if 'openssl' is missing or failing
  - headers: Enforce a max number of response header to accept
  - headers: Set an error message on illegal response headers
  - hostip: Fix build without threaded-resolver and without DoH
  - hostip: Show the correct name on proxy resolve error
  - http2: Fix stream window size after unpausing
  - HTTP3.md: Fix incorrect variable placeholders
  - http: Fix a build error when all auths are disabled
  - http: Fix HTTP/2 handling of TE request header using "trailers"
  - http: In alt-svc negotiation only allow supported HTTP versions
  - http_aws_sigv4: Add additional verbose log statements
  - http_aws_sigv4: Improve sigv4 url encoding and canonicalization
  - http_chunks: Narrow variable scope for 'trlen'
  - http_negotiate: Fix non-SSL build with GSSAPI
  - https-connect: Fix httpsrr target check
  - HTTPSRR.md: Clarify somewhat
  - if2ip: Build the function also if FTP is present
  - imap: Remove redundant condition
  - INSTALL-CMAKE.md: Fix typo
  - INSTALL.md: Update the minimal libcurl size example
  - KNOWN_BUGS: Fix link in sivg4 issue 16.3
  - lib/src/docs/test: Improve curl_easy_setopt() calls
  - lib1560: Use hex notation, drop non-ASCII exception
  - lib3026: Drop DLL pre-load perf mitigation for old mingw
  - lib: Add const to clientwriter tables
  - lib: Drop curlx_getpid, use fake pid in SMB
  - lib: Include files using known path
  - lib: Make Curl_easyopts const
  - lib: Unify conversions to/from hex
  - libcurl-tutorial.md: Fix read callback explanation
  - libssh: Add NULL check for Curl_meta_get()
  - libssh: Fix memory leak
  - libssh: Remove a condition that always equals false
  - libtest/first: Stop defining MEMDEBUG_NODEFINES
  - libtests: Define CURL_DISABLE_DEPRECATION first
  - make: Clean tests better
  - mbedtls: TLS 1.3 is max when mbedtls has 1.3 support
  - metahash: Add asserts to help analyzers
  - mk-ca-bundle.pl: Follow redirects
  - mk-ca-bundle: Switch URLs to GitHub versions
  - mkhelp: Fix to not generate a line-ending space in some cases
  - mqtt: Use conn/easy meta hash
  - multi: Do transfer book keeping using mid
  - multi: init_do(): Check result
  - netrc: Avoid NULL deref on weird input
  - netrc: Avoid strdup NULL
  - netrc: Deal with null token better
  - ngtcp2: Clarify ignoring of result
  - openssl-quic: Avoid potential '-Wnull-dereference', add assert
  - openssl-quic: Fix printf mask
  - openssl-quic: Fix shutdown when stream not open
  - openssl: Enable builds for *both* engines and providers
  - openssl: Set the cipher string before doing private cert
  - parsedate: Provide Curl_wkday also for GnuTLS builds
  - processhelp.pm: Always call 'taskkill' with '-f' (force)
  - processhelp.pm: Avoid potential endless loop, log more (Windows)
  - progress: Avoid integer overflow when gathering total transfer size
  - pytest tls: Extend coverage (fixes WolfSSL cert validation, CVE-2025-4947)
  - pytest-xdist: pytest in parallel
  - pytest: Add pinnedpubkey test cases (fixes WolfSSL pinning, CVE-2025-5025)
  - pytest: Give parameterised tests better ids for read- and parsability
  - pytest: Make test_07_22 more lenient to exit codes
  - quic: No local idle connection timeout, ngtcp2 keep-alive
  - rand: Update comment on Curl_rand_bytes weak random
  - RELEASE-PROCEDURE.md: Release candidate git tagging explained
  - rtsp: Remove redundant condition
  - runtests: Add retry option to reduce flakiness
  - runtests: Fix indentation
  - runtests: Recognize lowercase 'windows' in 'curl -V'
  - runtests: Remove server verification after start
  - runtests: Split 'SSH_PWD' into 'SCP_PWD' and 'SFTP_PWD', and more
  - rustls: Make max size of cert and key reasonable
  - sasl: Give help when unable to select AUTH
  - scripts: completion.pl: Sort the completion file for all shells
  - scripts: Drop unused import, formatting
  - scripts: Fix --opts-dir help in completion.pl
  - scripts: Fix perl indentation, whitespace, semicolons
  - sectransp: Fix building for macOS Sierra and older
  - setopt: Provide info for CURLE_BAD_FUNCTION_ARGUMENT
  - smb: Avoid integer overflow on weird input date
  - socket: Use accept4 when available
  - socketpair: Support pipe2 where available
  - spacecheck.pl: Check for non-ASCII chars, fix fallouts
  - spacecheck.pl: Verify 'tests/data/test*' for non-ASCII chars
  - src: Drop strcase.[ch] from tool builds
  - src: Include memdebug.h consistently with angle brackets &lt;&gt;
  - src: Rename curlx_safefree to tool_safefree
  - test1173.pl: Whitelist some option-looking names that aren't options
  - test1658: Add unit test for the HTTPS RR decoder
  - test: Make unittest 1308 into a libtest
  - tests/ech_tests.sh: Sync shebang with rest of bash scripts
  - tests/FILEFORMAT.md: Clarify %hex[] formatting
  - tests/FILEFORMAT.md: Document the aws feature
  - tests/README.md: Document --test-duphandle
  - tests/README.md: List the openssl tool among the prerequisites
  - tests/server/dnsd: Basic DNS server for test suite
  - tests/server: Check for 'stream != NULL' in mqttd
  - tests/server: Fix typo in comment
  - tests/server: Stop using libcurl string comparisons
  - tests/server: Stop using libcurl's printf functions
  - tests/serverhelp: Remove last remnants of http-pipe server
  - tests/tunit: Make a separate directory for tool-based unit tests
  - tests: Add aws feature to the related tests
  - tests: Add https-mtls server to force client auth
  - tests: Fix some test tag mismatches
  - tests: Mark ipfs tests to require ipfs
  - tests: Move a boolean variable out of the path section
  - tests: Prefer '--insecure' over '-k'
  - tests: Provide all non-ascii data hex encoded
  - tests: Remove some unused test case sections
  - tests: Require IPv6 for 1265, 1324, 2086
  - tests: Separate tunit tests from unit tests more
  - tests: Stop using libcurl's strdup
  - tests: Unify test case keywords
  - tests: Use a more portable null device path
  - TODO: Remove "nicer lacking perl message"
  - tool_cb_write.c: Handle EINTR on flush
  - tool_getparam: Clear argument only when needed
  - tool_operate: Make retrycheck() a separate function
  - tool_operate: When retrying, only truncate regular files
  - tool_paramhlp: Avoid integer overflow in secs2ms()
  - tool_parsecfg: Make get_line handle lines ending on the buffer boundary
  - typecheck-gcc.h: Fix the typechecks
  - urlapi: Redirecting to "" is considered fine
  - urlapi: Remove unneeded guards around PUNY2IDN
  - urldata: Remove the unused struct field 'hide_progress'
  - VERSIONS: List all past releases
  - vquic: Consistent name for the stream struct across backends
  - vquic: Init for every call to recvmsg
  - vtls: Avoid NULL deref on bad PEM input
  - vtls: Fix build with ssl but without http
  - VULN-DISCLOSURE-POLICY: Use of weak algos
  - winbuild: Add the deprecation warning to the README
  - winbuild: curl_get_line is not used for tool builds
  - windows: Fix builds targeting WinXP, test it in CI
  - wolfssl: Fix to enable ALPN when available
  - ws: Fix the header replace check
  - ws: Store protocol context as connection meta data</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.1.cf" date="1748520000">- Fix regression: curl_multi_add_handle() returning OOM when using more than
  400 handles (GH#17475)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.1-1.0.cf" date="1749038400">- Update to 8.14.1
  - asyn-thrdd: Fix clean-up when RR fails due to OOM
  - autotools: Recognize more Linux targets when setting '-D_GNU_SOURCE'
  - BUG-BOUNTY.md: Mention the medium bounty amount in 2025
  - cmake: Fix missed version number for multi-pkg-config detections
  - cmdline-docs: Mention HTTP resumed uploads to be shaky
  - curl: make -N handled correctly
  - curl: Upload from '.' fix
  - dllmain: Exclude from Cygwin builds
  - docs/tests: Remove mention of hyper
  - docs: Fix typos
  - ftp: Fix teardown of DATA connection in done
  - http: Fail early when rewind of input failed when following redirects
  - license: Update some copyright links to curl.se
  - memanalyze.pl: Fix getaddrinfo/freeaddrinfo checks
  - misc: Fix spelling
  - misc: We write *an* IPv6 address
  - multi: Fix add_handle resizing
  - spelling: 'a' vs. 'an'
  - spelling: Call it null-terminate consistently
  - test1510: Fix expectation
  - tests: Await portfile to be complete
  - tests: Fix checks for https-mtls proto
  - tests: Improve server start reliability
  - tests: Move test docs into /docs
  - tests: Re-enable 1510, document heimdal memleak
  - tests: Test mtls also w/ clientAuth EKU only
  - tests: Test mtls with --insecure
  - tls BIOs: Handle BIO_CTRL_EOF correctly
  - tool_getparam: Make --no-anyauth not be accepted
  - tool_getparam: Refactored, simplified
  - tool_getparam: Remove two nextarg NULL checks
  - VULN-DISCLOSURE-POLICY.md: The distros list wants ≤ 7 days embargo
  - wolfssl: Fix sending of early data
  - ws: Handle blocked sends better (CVE-2025-5399)
  - ws: Tests and fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-1.0.cf" date="1752667200">- Update to 8.15.0
  - TLS: Remove support for Secure Transport and BearSSL
  - altsvc: Accept 'clear' without semicolon as well
  - asyn-ares: Remove redundant NULL check
  - asyn-thrdd: Free the previous name before strdup'ing the new
  - autotools: Detect and link 'brotlicommon' library for brotli
  - autotools: Drop '$top_builddir/src' from src header path
  - autotools: Drop headers from src mk-unity rules (fixup)
  - autotools: Drop no longer necessary '--srcdir' unity options
  - autotools: Drop redundant 'Makefile.inc' from 'EXTRA_DIST' in src
  - autotools: Simplify configuration in tests, examples
  - bufq: Change read/write signatures
  - bufq: Remove the unused Curl_bufq_unwrite function
  - build: Assume 'sys/socket.h', 'sys/time.h' on non-Windows (as in 'curl/curl.h')
  - build: Drop 'HAVE_SYS_SOCKET_H' and 'HAVE_SYS_TIME_H' macros
  - build: Drop explicit curlx from hdr paths, refer headers with 'curlx/' prefix
  - build: Drop unused variables in tests
  - build: Fix libcurltool with cmake and tunits, related tidy-ups
  - build: Split '.c' and '.h' file lists in tests
  - build: Stop checking for 'sys/stat.h'
  - build: stubgss tidy-ups (in tests)
  - build: Sync build scripts between client/libtest
  - build: Tidy up 'Makefile.inc' use in lib and src
  - build: Tidy up header paths, use srcdir where possible
  - cf-socket: Make socket data_pending a no-op
  - checksrc-all: Rewrite in Perl, remove 'checksrc.bat'
  - checksrc: Reduce exceptions, apply again to curlx
  - cmake/FindGSS: Fix processing C header path options
  - cmake/FindGSS: Initialize result variables
  - cmake: 'curl_add_clang_tidy_test_target' tidy-ups
  - cmake: Build 'stubgss' library for libtests to match autotools
  - cmake: Check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
  - cmake: Configure c-ares header directory in project root (was: lib)
  - cmake: Document OpenSSL and ngtcp2 crypto lib custom variables
  - cmake: Drop never-propagated C macros
  - cmake: Drop passing redundant 'CURL_STATICLIB' in examples and clients
  - cmake: Drop redundant macro from test clients
  - cmake: Drop reference to future variable
  - cmake: Enable soversion by default for OpenHarmony OS
  - cmake: Fix 'curl_add_clang_tidy_test_target' when no '-D' option
  - cmake: Fix generator expression in docs/examples
  - cmake: Gather options recursively in 'curl_add_clang_tidy_test_target'
  - cmake: Make docs depend on support files
  - cmake: Move 'OUTPUT' argument in the 'add_custom_command()' line
  - cmake: Omit clang-tidy on internal libs curlu and curltool
  - cmake: Replace 'cmakelint' with 'cmake-lint' from 'cmakelang', fix issues
  - cmake: Replace the way clang-tidy verifies tests, fix issues found
  - cmake: Simplify handling generated 'lib1521.c' in libtests
  - cmake: Sync 'target_link_libraries()' order in tests more
  - cmake: Sync tests scripts by using the variable 'BUNDLE'
  - cmake: Sync tests scripts with each other and autotools (more)
  - cmake: Use 'target_link_options()' when available
  - config-win32: Fix default targets, shorten macro logic
  - configure: Order LDAP after the SSL libraries
  - connect: Drop unused struct member
  - connection: Clarify 'transport'
  - connection: Eliminate member 'remote_addr'
  - curl-config: Fix whitespace in usage text
  - curl.h: Make CURL_IPRESOLVE_* symbols defined as longs
  - curl.h: Make CURLSSLOPT_* symbols defined as longs
  - curl.h: Remove the "RESERVED" error codes
  - curl: Implement non-blocking STDIN read on Windows
  - curl: Improve non-blocking STDIN performance
  - curl: Remove the global argument from many functions
  - curl: Unify pointer names to global config
  - curl_get_line: Make sure lines end with newline
  - curl_memory.h: Fix to undefine 'accept4'
  - curl_path: Make SFTP handle a path like /~ properly
  - curlinfo: Provide the 'digest' feature
  - CURLSHOPT_SHARE.md: Mention multi-threading requires callbacks
  - DEPRECATE.md: Add VS2005 removal to the list
  - digest: Fix build with disabled digest auth
  - DISTROS: Update NixOS link
  - docs,tests: Fix english grammar "allow to" -&gt; "allow &lt;something&gt; to"
  - docs/CONTRIBUTE: Fix broken link
  - docs/examples: Add ftp-delete.c
  - docs: Beef up examples/websocket.c
  - docs: Fix broken link in CODE_REVIEW.md
  - docs: Fix broken link in INSTALL.md
  - docs: Fix docs for CURLOPT_PREQUOTE after #17616
  - docs: Fix documentation of connect_only 2
  - docs: Fix two typos
  - docs: Mention that the netrc file works without port numbers
  - docs: Mention the as-is concept generically
  - docs: Note SSLS-EXPORT feature in -ssl-sessions doc
  - docs: Reflect that delimiter-separated capath is only OpenSSL
  - docs: Sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
  - docs: Warn about lifetime in CURLOPT_CLOSESOCKET*
  - easy: Fix comment-documentation
  - easygetopt: Fix curl logo in header comment
  - firefox-db2pem: Avoid use of eval in script
  - ftp: Fix prequotes for a directory in URL
  - ftplistparser: Split parse_unix into sub-functions
  - h2_serverpush: Fix file handle leaks reported by clang-tidy
  - h3: Fix query of concurrent streams
  - http/3: Report handshake with version and cipher as for TCP connections
  - http2: Do not delay RST send on aborted transfer
  - http2: Fix var types in is_alive() implementations
  - http: Explicitly ignore parsing errors for Retry-After
  - http: Fix build with cookies and HSTS disabled
  - http_ntlm: Protect against null deref
  - http_ntlm: Remove unreachable code
  - INSTALL.md: Cygwin details and add source code link
  - ldap: Avoid automake caching issues with LDAP library names
  - ldap: If ldap-lib is sufficient, add it to LIBS
  - ldap: Initial support for --with-ldap option
  - lib2082: Drop 'typedef struct'
  - lib: Address singleuse issues
  - lib: Avoid reusing unclean connection
  - lib: Drop two interim macros in favor of native libcurl API calls
  - lib: Fix unused parameter/function compiler warnings
  - lib: Make 'CURLX_SET_BINMODE()' and use it
  - lib: Make 'curlx_wait_ms()' and use it
  - lib: Replace scache no-op macros with '#ifdef'
  - lib: Stop 'time()' debug overrides at the end of source in altsvc, hsts
  - lib: Unify recv/send function signatures
  - libcurl-env.md: Drop LOGNAME, USER and NTLMUSER
  - libcurl.m4: Fix indentation
  - libssh2: Remove use of 'initialised' for clean-up
  - libssh: De-complex myssh_statemach_act()
  - libssh: Fix readdir issues
  - libtests: Make tests 1503, 1504, 1505 use the 1502 binary
  - libtests: More header tidy-ups
  - libtests: Stop building the same source multiple times
  - memdebug.h: #undef 'fclose' before defining it
  - memdebug.h: Eliminate global macro 'CURL_MT_LOGFNAME_BUFSIZE'
  - memdebug: Include in unity batch
  - memory: Stop overriding unused 'wcsdup()'/'_wcsdup()' system functions
  - memory: Tidy up '_tcsdup()' override
  - misc: Fix typos
  - mk-lib1521: Replace 'printf' with 'curl_mprintf'
  - multi: Add dirty bitset
  - multi: Do not expire a blocked transfer
  - multi: Fix polling with pending input
  - multi: Remove careful bounds check as coverity says it is not needed
  - multi: xfer table/bitset, handle limits
  - ngtcp2: Fix coverity warning about result handling
  - openssl: Enable readahead
  - openssl: Error on SSL_ERROR_SYSCALL
  - openssl: Fix handling of buffered data
  - openssl: Fix openssl engine use
  - openssl: Fix pkcs11 provider available check
  - os400: Upgrade ILE/RPG bindings with latest definitions
  - pingpong: On disconnect, check for unflushed pingpong state
  - projects/build-openssl.bat: Remove
  - pytest: test_07_70, weaken early data check
  - pytest: Adapt for runs with openssl-1.1.1
  - pytest: Disable test_07_37 and test_07_36 with openssl's quic
  - quic: Implement CURLINFO_TLS_SSL_PTR
  - RELEASE-PROCEDURE.md: Update docs/VERSIONS
  - runtests.pl: Fix sprintf() using one too many %s
  - runtests: Fix 'LD_PRELOAD' detection for cmake-built curl binaries
  - runtests: Support memory-limits per test
  - rustls: Apply memory function overrides, fixing an ECH buffer free
  - rustls: Don't try printing the not provided file
  - schannel: Allow partial chains for manual peer verification
  - schannel: Drop Windows 2000 compatibility logic
  - scorecard: Flame graphs and documentation
  - SCP/SFTP: Avoid busy loop after EAGAIN
  - scripts: Fix to quote the copyright email address
  - socks: Fix query when filter context is null
  - system.h: Remove some macros
  - test1117: Reduce write delays
  - test1175: Fix to run, and fix documentation issues detected
  - test1222: Fix for out-of-tree and no-libcurl-manual builds
  - test1499, 1599: use '%LOGDIR'
  - test1499: Verify two chunked responses on reused connection
  - test1596: Let test pass after year 2036
  - test1706: Pass include directory to 'managen' for out-of-tree builds
  - tests/client: Drop autotools logic no longer necessary
  - tests/client: Use 'curl_mfprintf()'
  - tests/dnsd: Read config from file
  - tests/http/clients: Drop hack and use 'curl_setup.h' again
  - tests/http/clients: Move to tests/client
  - tests/http/requirements: Remove multipart
  - tests/libtest: Call 'curlx_now_init()' for unit 1399, 2600 (Windows)
  - tests/libtest: Drop 'TEST_HANG_TIMEOUT' redefinition hack
  - tests/libtest: Drop a checksrc exception
  - tests/libtest: Use 'curltime' from curlx
  - tests/server/util.c: Include netinet/in6.h
  - tests/server: De-dupe/merge three 'sockdaemon()' clones into one
  - tests/server: Drop 'memdebug.h'
  - tests/server: Make all global vars/funcs static
  - tests/server: Move memory init to 'memptr.c'
  - tests/servers.pm: Add more ways to figure out current user
  - tests: Always make bundles, adapt build and tests
  - tests: Bundle http clients, de-dupe, enable for MSVC
  - tests: Constify, make consts static
  - tests: Drop 'BUNDLE_SRC' variable
  - tests: Drop mk-bundle exceptions
  - tests: Drop unused or redundant includes
  - tests: Drop useless "nodist_SOURCES" assignments
  - tests: Fail torture if !valgrind&amp;threaded resolver
  - tests: Fix 1301, 1308 to fail on error
  - tests: Fix 'BUNDLE' variable references in 'Makefile.am'
  - tests: Make all names &lt; 75 characters long
  - tests: Make individual test sources compile cleanly
  - tests: Make sshserver less verbose
  - tests: Move 'curlcheck.h' to libtest as 'unitcheck.h'
  - tests: Move GSS-API dynamic stub into debug-mode libcurl
  - tests: torture: Don't duplicate valgrind command
  - tests: Use %b64[] to base64 data
  - tests: Use %b64[] to base64 data in 2056, 2057
  - tftpd: Use 'CURLMIN()' macro
  - tidy-up: Replace '&lt;memdebug.h&gt;' with '"memdebug.h"' (src, units)
  - tls: Remove Curl_ssl false_start
  - tool1621: Drop unused internal libcurl headers
  - tool_getparam: Fix --ftp-pasv
  - tool_operate: Fix return code when --retry is used but not triggered
  - tool_paramhelp: Fix language in comments
  - top-complexity: Lower max allowed complexity threshold to 90
  - unit tests: Extract "private" prototypes at build time
  - unit1302: Expand the base64 encode/decode tests
  - url: Fix connection lifetime checks
  - url: Fix NULL deref with bad password when no user is provided
  - urlapi: Simplify and split into sub functions
  - urlapi: Use uppercase hex encoding
  - vauth: Move auth structs to conn meta data
  - vtls: Change send/recv signatures of tls backends
  - vtls: Fix a copy-pasted early data comment typo
  - vtls: Log rustls negotiated KEX group name
  - vtls: Prefer ciphersuite to cipher in msgs
  - vtls: Prefer rustls-ffi ciphersuite name API
  - VULN-DISCLOSURE-POLICY.md: Fix typos
  - VULN-DISCLOSURE-POLICY: All reports should be disclosed
  - VULN-DISCLOSURE-POLICY: Exclude not installed software
  - VULN-DISCLOSURE-POLICY: Minor language polish
  - warnless: Drop parts of the 'read'/'write' preprocessor hack (Windows)
  - warnless: Replace 'read()'/'write()' wrapper functions with macros (Windows)
  - windows: Drop redundant 'curl_wcsdup_callback' callback
  - windows: Fixup 'fopen()' in 'CURLDEBUG' builds
  - windows: Reduce/stop loading DLLs at runtime
  - wolfssl: Add support for ML_KEM hybrids
  - ws: Drop redundant 'CURL_EXTERN' from function definitions
  - xfer: Manage pause bits</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.0.cf" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.1.cf" date="1753617600">- Fix dependency on CA bundle when we don't use the old one at
  /etc/pki/tls/certs/ca-bundle.crt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
</package>
<package pkgid="68883d3e76b1cd400075e83cabc68db84cc45f999684af77fb64282a5c6d90b3" name="davfs2" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.0-7.0.cf" date="1730289600">- Add support for building with neon version 0.33</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-1.0.cf" date="1732276800">- Update to 1.7.1
  - The project has been moved to github, which will make it easier to track
    issues, receive PR requests, implement CI, etc.
  - Hide password prompt when -o username=myname is specified
  - Fix segfault on prop query on backup node
  - Fix autoload fuse module</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-1.1.cf" date="1733486400">- Add support for building with neon version 0.34</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-3.0.cf" date="1753876800">- Add sysusers.d config file to allow rpm to create users/groups automatically
  from Fedora 43 onwards
- Add support for building with neon version 0.35</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-4.0.cf" date="1753876801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.2-1.0.cf" date="1756209600">- Update to 1.7.2 (rhbz#2391098)
  - Add support for libneon 34, 35
  - Increase buf read size to 64 (fixes read issue on linux 6.16)
  - Allow setting a mount password via DAVFS_PASSWORD
  - Introduce sync_on_lookup option (off by default)
  - Don't compress man pages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.2-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.3-1.0.cf" date="1773403200">- Update to 1.7.3 (rhbz#2447065)
  - Add musl support
  - Fix macro-substitution in manual pages
  - Remove hardcoded neon versions from configure.ac
- Use %{make_build} and %{make_install}
- Consider AUTHORS as a license file rather than just documentation</changelog>
</package>
<package pkgid="c0659d8b2737f99c66f53259efde1238fe091d611030a6cce47fcf1231cf8341" name="demoroniser" arch="noarch">
  <version epoch="0" ver="1" rel="3.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1-2" date="1651060800">- Modernize spec and add dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1-3" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a854a30666b08189cb7509bc60ef766bb435aca4732e1d5857f986249c66a7aa" name="dovecot" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="4ab33f3c809fef47447479bac0194761e0076125406c11cc2cc77279692b2438" name="dovecot-devel" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="2daf8295adee9cf1474d114f2eeab80dac710632a32e61fbaf0fd3223f9f6e17" name="dovecot-mysql" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="cea73fcdafaf5d8f9810199357455477fc57473b5e860095246ca8df6b7270e8" name="dovecot-pgsql" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="003a12a90664b823334a6fba249a6d0750d80d54947d950876da001b971cc4ea" name="dovecot-pigeonhole" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="33cb4f9e7cb3026d9a2b040f9361a073a123de2dc4a6b91d69f59d6dd317fa70" name="dsbl-testers" arch="x86_64">
  <version epoch="0" ver="0.9.5" rel="5"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.4-1" date="1069934400">- Initial RPM build</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.4-2" date="1071662400">- More macros
- Extra SMTP AUTH tests in relaytest
- Fix for relaytest when server drops connection</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.4-3" date="1072094400">- Added getcookie program and DSBL_COOKIE environment
  variable for batch testing
- Added -v (verbose) option to relaytest</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.4-4" date="1073390400">- Added auth-relaytest and (in doc area) a sample script to try
  the same set of usernames/passwords as used by spammer Alan
  Ralsky when exploiting relays in 2002-2003
  (HMAC_MD5 code from http://www.dscinet.com/eZ80/OpenEZ/ project)
  (Ralsky exploits described at http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK2669)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.5-0.test3" date="1073476800">- Update to 0.9.5-test3</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.5-1" date="1073563200">- Update to 0.9.5</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.5-2" date="1078920000">- Patch to correct URL of MS article on anonymous NTLM authentication</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.5-3" date="1083240000">- Patch to add additional tests to relaytest.c as suggested by mkolesar@broadnet.cz</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.5-4" date="1092830400">- /etc replaced by /etc - actually more portable
- /var/tmp/dsbl-testers-0.9.5-5-root replaced with $RPM_BUILD_ROOT as per Fedora
  packaging guidelines</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.5-5" date="1105012800">- Update Spamhaus URLs for auth-relaytest references
- Simplify build process by use sed -i to do in-place Makefile
  substitutions</changelog>
</package>
<package pkgid="faab6f8c9bf652693c611459624c65998d9c14c4e854605576c94b957d88ee53" name="ecncheck" arch="x86_64">
  <version epoch="0" ver="0.9.6" rel="2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.0-1" date="1076673600">- Initial RPM build.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.0-2" date="1076673601">- Fix program locations.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.1-1" date="1077019200">- Update to 0.9.1.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.2-1" date="1077710400">- Update to 0.9.2.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.4-1" date="1078142400">- Update to 0.9.4.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.5-1" date="1078833600">- Update to 0.9.5.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.6-1" date="1078920000">- Update to 0.9.6.
- Source now bzip2 compressed instead of gzipped.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.6-2" date="1092830400">- /etc replaced by /etc - actually more portable
- /var/tmp/ecncheck-0.9.6-2-root-phowarth replaced with $RPM_BUILD_ROOT as per Fedora
  packaging guidelines</changelog>
</package>
<package pkgid="bf3ebbf88701de4fd81dd2d66816c5a8f17e6aaa4d79b5692f1d135aa6c722e0" name="firedns" arch="x86_64">
  <version epoch="0" ver="0.9.12" rel="3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.6-1" date="1073563200">- Update to 0.9.6.
- More macros in "configure" phase for portability.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.7-1" date="1074513600">- Update to 0.9.7.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.8-1" date="1076673600">- Update to 0.9.8.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.8-2" date="1076673601">- Add patch to fix bug causing breakage for non-IPV6 systems.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.9-1" date="1076673602">- Update to 0.9.9.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.10-1" date="1077710400">- Update to 0.9.10.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.11-1" date="1078833600">- Update to 0.9.11.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-1" date="1078920000">- Update to 0.9.12.
- Source now compressed using bzip2, not gzip.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-2" date="1080129600">- Moved library manpages to devel package where they belong.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-3" date="1092830400">- /etc replaced by /etc - actually more portable
- /var/tmp/firedns-0.9.12-3-root-phowarth replaced with $RPM_BUILD_ROOT as per Fedora
  packaging guidelines</changelog>
</package>
<package pkgid="1b148d89a61c2562fcea62cc4cf7837ecc749d0b16bcc8d392988127b3c82671" name="firedns-devel" arch="x86_64">
  <version epoch="0" ver="0.9.12" rel="3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.6-1" date="1073563200">- Update to 0.9.6.
- More macros in "configure" phase for portability.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.7-1" date="1074513600">- Update to 0.9.7.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.8-1" date="1076673600">- Update to 0.9.8.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.8-2" date="1076673601">- Add patch to fix bug causing breakage for non-IPV6 systems.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.9-1" date="1076673602">- Update to 0.9.9.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.10-1" date="1077710400">- Update to 0.9.10.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.11-1" date="1078833600">- Update to 0.9.11.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-1" date="1078920000">- Update to 0.9.12.
- Source now compressed using bzip2, not gzip.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-2" date="1080129600">- Moved library manpages to devel package where they belong.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-3" date="1092830400">- /etc replaced by /etc - actually more portable
- /var/tmp/firedns-0.9.12-3-root-phowarth replaced with $RPM_BUILD_ROOT as per Fedora
  packaging guidelines</changelog>
</package>
<package pkgid="0285caf74dfb0f49c86ce099554b2cbb89685ede03d6739df075c3fd6048cbf0" name="firedns-progs" arch="x86_64">
  <version epoch="0" ver="0.9.12" rel="3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.6-1" date="1073563200">- Update to 0.9.6.
- More macros in "configure" phase for portability.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.7-1" date="1074513600">- Update to 0.9.7.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.8-1" date="1076673600">- Update to 0.9.8.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.8-2" date="1076673601">- Add patch to fix bug causing breakage for non-IPV6 systems.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.9-1" date="1076673602">- Update to 0.9.9.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.10-1" date="1077710400">- Update to 0.9.10.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.11-1" date="1078833600">- Update to 0.9.11.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-1" date="1078920000">- Update to 0.9.12.
- Source now compressed using bzip2, not gzip.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-2" date="1080129600">- Moved library manpages to devel package where they belong.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-3" date="1092830400">- /etc replaced by /etc - actually more portable
- /var/tmp/firedns-0.9.12-3-root-phowarth replaced with $RPM_BUILD_ROOT as per Fedora
  packaging guidelines</changelog>
</package>
<package pkgid="e9778c333cdd0ae91f5079868469aa9132e77f2d804db408cf64cc7b70263865" name="firestring" arch="x86_64">
  <version epoch="0" ver="0.9.12" rel="3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.6-1" date="1069848000">- Initial RPM build.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.8-1" date="1070712000">- Update to 0.9.8.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.9-1" date="1073563200">- Update to 0.9.9.
- More macros used in "configure" phase for portability.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.10-1" date="1077710400">- Update to 0.9.10.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.11-1" date="1078833600">- Update to 0.9.11.
- More macros for portability.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-1" date="1078920000">- Update to 0.9.12.
- Source now bzip2 compressed, not gzipped.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-2" date="1080129600">- Manpages put in devel package where they belong.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-3" date="1092830400">- %{_sysconfdir} replaced by /etc - actually more portable
- %{buildroot} replaced with $RPM_BUILD_ROOT as per Fedora
  packaging guidelines</changelog>
</package>
<package pkgid="74474a2919559530b8e85591f1f01e58c81eb331204a073b6d237dd1b5622405" name="firestring-devel" arch="x86_64">
  <version epoch="0" ver="0.9.12" rel="3"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.6-1" date="1069848000">- Initial RPM build.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.8-1" date="1070712000">- Update to 0.9.8.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.9-1" date="1073563200">- Update to 0.9.9.
- More macros used in "configure" phase for portability.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.10-1" date="1077710400">- Update to 0.9.10.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.11-1" date="1078833600">- Update to 0.9.11.
- More macros for portability.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-1" date="1078920000">- Update to 0.9.12.
- Source now bzip2 compressed, not gzipped.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-2" date="1080129600">- Manpages put in devel package where they belong.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.9.12-3" date="1092830400">- %{_sysconfdir} replaced by /etc - actually more portable
- %{buildroot} replaced with $RPM_BUILD_ROOT as per Fedora
  packaging guidelines</changelog>
</package>
<package pkgid="4379e16ce46aa9bee2c0d3ddb36f73c5dd307465614560b89654b85ce5137b24" name="geoipupdate" arch="x86_64">
  <version epoch="0" ver="4.6.0" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.0.2-2" date="1549972800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.0.3-1" date="1560168000">- Update to 4.0.3
  - Update flock dependency from 'theckman/go-flock' to 'gofrs/flock' (GH#22)
  - Switch to Go modules and update dependencies
  - Fix version output on Ubuntu PPA and Homebrew releases
- Revert switch to Go Modules as our tooling isn't ready for that yet</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.0.4-1" date="1567339200">- Update to 4.0.4
  - Do not try to sync the database directory when running on Windows; syncing
    this way is not supported there and would lead to an error (GH#32)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.0.6-1" date="1568462400">- Update to 4.0.6
  - Ignore errors when syncing file system: these errors were primarily due to
    the file system not supporting the sync call (GH#37)
  - Use CRLF line endings on Windows for text files
  - Fix tests on Windows
  - Improve man page formatting (GH#38)
  - Dependencies are no longer vendored (GH#39)
- Drop modules patch, no longer needed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.1.4-1" date="1573214400">- Update to 4.1.4
  - Improve man page formatting and organization (GH#44)
  - Provide update functionality as an importable package as well as a
    standalone program (GH#48)
  - Remove formatting, linting, and testing from the geoipupdate target in the
    Makefile</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.1.5-1" date="1573387200">- Update to 4.1.5
  - Respect the defaultConfigFile and defaultDatabaseDirectory variables in the
    main package again; they were ignored in 4.1.0 through 4.1.4 (if not
    specified, the GitHub and PPA releases for these versions used the config
    /usr/local/etc/GeoIP.conf instead of /etc/GeoIP.conf and the database
    directory /usr/local/share/GeoIP instead of /usr/share/GeoIP)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.2.2-1" date="1582545600">- Update to 4.2.2
  - The major version of the module is now included at the end of the module
    path; previously, it was not possible to import the module in projects that
    were using Go modules (GH#81)
  - A valid account ID and license key combination is now required for database
    downloads, so those configuration options are now required
  - The error handling when closing a local database file would previously
    ignore errors and, upon upgrading to 'github.com/pkg/errors' 0.9.0, would
    fail to ignore expected errors (GH#69, GH#70)
  - The RPM release was previously lacking the correct owner and group on files
    and directories: among other things, this caused the package to conflict
    with the 'GeoIP' package in CentOS 7 and 'GeoIP-GeoLite-data' in CentOS 8;
    the files are now owned by 'root' (GH#76)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.3.0-1" date="1587124800">- Update to 4.3.0
  - First release to Docker Hub (GH#24)
  - The binary builds are now built with CGO_ENABLED=0 (GH#63)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.5.0-1" date="1603972800">- Update to 4.5.0
  - The edition ID is now included when there is a failure retrieving a
    database
  - The Docker image no longer prints the generated GeoIP.conf when starting
    up, which prevents a possible leak of the account's license key (GH#109)
  - The minimum Go version is now 1.11
  - Failing HTTP requests are now retried using an exponential backoff: the
    period to keep retrying any failed request is set to 5 minutes by default
    and can be adjusted using the new RetryFor configuration option
  - When using the go package rather than the command-line tool, the default
    value for RetryFor will be 0 seconds, which means no retries will be
    performed: to change that, set RetryFor explicitly in the Config you
    provide, or obtain your Config value via geoipupdate.NewConfig</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.6.0-1" date="1608033600">- Update to 4.6.0
  - Show version number in verbose output
  - Retry downloads in more scenarios: previously we would not retry failures
    occurring when reading the response body, but now we do</changelog>
</package>
<package pkgid="82a0a8024f0039fcc23bc61b2165589ca9eaae7f1ac1e6655f6076d46411ec88" name="geoipupdate-cron" arch="noarch">
  <version epoch="0" ver="4.6.0" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.0.2-2" date="1549972800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.0.3-1" date="1560168000">- Update to 4.0.3
  - Update flock dependency from 'theckman/go-flock' to 'gofrs/flock' (GH#22)
  - Switch to Go modules and update dependencies
  - Fix version output on Ubuntu PPA and Homebrew releases
- Revert switch to Go Modules as our tooling isn't ready for that yet</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.0.4-1" date="1567339200">- Update to 4.0.4
  - Do not try to sync the database directory when running on Windows; syncing
    this way is not supported there and would lead to an error (GH#32)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.0.6-1" date="1568462400">- Update to 4.0.6
  - Ignore errors when syncing file system: these errors were primarily due to
    the file system not supporting the sync call (GH#37)
  - Use CRLF line endings on Windows for text files
  - Fix tests on Windows
  - Improve man page formatting (GH#38)
  - Dependencies are no longer vendored (GH#39)
- Drop modules patch, no longer needed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.1.4-1" date="1573214400">- Update to 4.1.4
  - Improve man page formatting and organization (GH#44)
  - Provide update functionality as an importable package as well as a
    standalone program (GH#48)
  - Remove formatting, linting, and testing from the geoipupdate target in the
    Makefile</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.1.5-1" date="1573387200">- Update to 4.1.5
  - Respect the defaultConfigFile and defaultDatabaseDirectory variables in the
    main package again; they were ignored in 4.1.0 through 4.1.4 (if not
    specified, the GitHub and PPA releases for these versions used the config
    /usr/local/etc/GeoIP.conf instead of /etc/GeoIP.conf and the database
    directory /usr/local/share/GeoIP instead of /usr/share/GeoIP)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.2.2-1" date="1582545600">- Update to 4.2.2
  - The major version of the module is now included at the end of the module
    path; previously, it was not possible to import the module in projects that
    were using Go modules (GH#81)
  - A valid account ID and license key combination is now required for database
    downloads, so those configuration options are now required
  - The error handling when closing a local database file would previously
    ignore errors and, upon upgrading to 'github.com/pkg/errors' 0.9.0, would
    fail to ignore expected errors (GH#69, GH#70)
  - The RPM release was previously lacking the correct owner and group on files
    and directories: among other things, this caused the package to conflict
    with the 'GeoIP' package in CentOS 7 and 'GeoIP-GeoLite-data' in CentOS 8;
    the files are now owned by 'root' (GH#76)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.3.0-1" date="1587124800">- Update to 4.3.0
  - First release to Docker Hub (GH#24)
  - The binary builds are now built with CGO_ENABLED=0 (GH#63)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.5.0-1" date="1603972800">- Update to 4.5.0
  - The edition ID is now included when there is a failure retrieving a
    database
  - The Docker image no longer prints the generated GeoIP.conf when starting
    up, which prevents a possible leak of the account's license key (GH#109)
  - The minimum Go version is now 1.11
  - Failing HTTP requests are now retried using an exponential backoff: the
    period to keep retrying any failed request is set to 5 minutes by default
    and can be adjusted using the new RetryFor configuration option
  - When using the go package rather than the command-line tool, the default
    value for RetryFor will be 0 seconds, which means no retries will be
    performed: to change that, set RetryFor explicitly in the Config you
    provide, or obtain your Config value via geoipupdate.NewConfig</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.6.0-1" date="1608033600">- Update to 4.6.0
  - Show version number in verbose output
  - Retry downloads in more scenarios: previously we would not retry failures
    occurring when reading the response body, but now we do</changelog>
</package>
<package pkgid="d02bcd3778fe80339e2ab32757612d6134275b07c034935c13e98c19f29815c5" name="getmail" arch="noarch">
  <version epoch="0" ver="5.16" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.16-1" date="1635768000">- Update to 5.16
  - Add new use_netrc and netrc_file configuration options to support reading
    username/password from a .netrc file
  - Documentation updates
- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.16-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f4a459ec9ff35560c1ef351a3ac424713df28800defd080925bf88622a32c411" name="gotmail" arch="noarch">
  <version epoch="1" ver="0.9.0" rel="2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.8.2-2" date="1116712800">- Include patch to fix updated hotmail login issue; see:
  http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1205355&amp;group_id=96810&amp;atid=615991
- Fix up cleantempfiles patch to work with new patch</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.8.3-1" date="1118700000">- New upstream version 0.8.3
- Remove hotmail login patch, now included upstream
- Unpack tarball quietly</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.8.4-1" date="1119304800">- New upstream version 0.8.4
- Fix summary patch
- Add NEWS</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.8.5-1" date="1124748000">- New upstream version 0.8.5
- Use "make install"
- Add %{__id_u} definition if necessary
- Update patches to apply against 0.8.5</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.8.6-1" date="1124834400">- New upstream version 0.8.6
- Patches now included upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.8.7.1-1" date="1134511200">- New upstream version 0.8.7.1
- Use bzipped tarball instead of gzipped one
- Remove buildroot unconditionally in %clean and %install
- %install now simpler as upstream install directories are now more sane</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.8.8-1" date="1141077600">- New upstream version 0.8.8
- Bump curl requirement to &gt;= 7.10.0 due to use of -k option</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.8.9-1" date="1145916000">- New upstream version 0.8.9
- Define %{__id_u} in a more portable way</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.9.0-1" date="1176328800">- New upstream version 0.9.0 (repackaged tarball due to upstream
  permissions cock-up)
- Update source URL dl.sf.net -&gt; downloads.sf.net
- Use "install -p" to preserve timestamps
- Package gotmail4evolution (as %doc)
- Require perl(URI) rather than perl-URI
- Drop explicit perl dependency
- NEWS no longer included in upstream distribution</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.9.0-2" date="1187820000">- Apply patch for "Page doesn't contain any form action field!" problem
  (http://sourceforge.net/tracker/?func=detail&amp;atid=615989&amp;aid=1777163&amp;group_id=96810)
- Clarify license as GPL v2 or later</changelog>
</package>
<package pkgid="1078a8330a645aed5b1295fcf2729e2de7dba4d8d8a2198702efa64b22ee05ad" name="grepmail" arch="noarch">
  <version epoch="0" ver="5.3111" rel="22.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-16.0.cf" date="1674129600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-17.0.cf" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-18.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-20.0.cf" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-22.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="0666391d271c04aae6aa5898015b07d0f9b79d689a3577538ac3335696fab7f3" name="gtkwave" arch="x86_64">
  <version epoch="0" ver="3.3.127" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.121-1" date="1728475200">- Update to 3.3.121
  - Add launchable tag in io.github.gtkwave.GTKWave.metainfo.xml
  - Fix memory leak on name in build_hierarchy_array()
  - Fix memory leak in ptranslate/ttranslate
  - Fix case of missing newline at EOF for VCD loaders
  - Add escape handling state machine for vars in FST loader
  - Remove escape check on coalesce in FST loader
  - CreateFileMapping() warning fix for Win32 compiles
  - Integrate gtkwave/pull/376 and gtkwave/pull/377 updates to the FST loader
    for Windows and warnings fixes
  - Clang warning fixes in fstapi.c on dynamic arrays</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.122-1" date="1745323200">- Update to 3.3.122
  - Buffer warning fix in fstVcdIDForFwrite
  - Warning fixes in vzt_read.c and fstapi.c
  - Prototype fixes for port to gcc15
  - Added fixes for --saveonexit command line option
  - Fix for convert_real for TR_REAL traces
  - Fix for popen_san() in vcd2fst using fsdb binaries
  - Added fstWriterGetFlushContextPending() to fstapi.c/.h
  - Unnamed scope fix for fstReader
  - Opaque pointer warning fix for fstapi.c
  - Remove broken pseudo-2D array support in fst.c
  - Fix in fst.c for signals whose MSB/LSB/len mismatch
  - libfst #15: fstReaderOpen should not fail on empty FST file
  - Fix fstminer not handling string transitions correctly (GH#423)
  - Fix in fst.c for duplicate string values
  - Remove duplicate string values from adjacent value changes
  - libghw: Add from upstream for ghdl_rtik_type_i64
  - Fix inconsistent handling of invalid vector bounds in VCD and FST loaders
    (GH#428)
- Drop support for EOL distributions prior to F-28, EL-8
  - Use %{make_build} and %{make_install}
  - Always install and check appdata
  - Can always use weak dependencies
  - %{_pkgdocdir} macro always available
  - Remove always-redundant scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.123-1" date="1746792000">- Update to 3.3.123
  - Fix broken autocoalesce of bitblasted vectors that fix for GH#428 in
    3.3.122 introduced
  - Fix improper autocoalesce of adjacent duplicate symbols
  - Preserve dimension on integer array element when expanded</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.124-1" date="1747224000">- Update to 3.3.124
  - Ensure type name in $var for VCD saver is &gt;0 length
  - Preserve bitblasted vector ordering with VCD saver
  - Use full type names in VCD saver instead of abbreviations
  - Dump all bits for a bitblasted vector in VCD saver in order to ensure
    stray bit extractions do not cause a failure to reconstruct vectors in
    proper order in the extracted file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.125-1" date="1755691200">- Update to 3.3.125
  - Added json2stems to distribution to support newer versions of Verilator
  - VCD parser fix for colon in VCD variable name
  - Parameter size 0 fix for Vivado: backs out very old fix (for MTI) that
    converts 0 size signals to reals
  - Update vcd2fst so that it handles MTI 0 size conversion</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.126-1" date="1767614400">- Update to 3.3.126
  - Fix for rendering multiline string constants in dumps
  - Updated libghw to current version
  - Changed behaviour of X search in pattern search so it is matched by a
    single X bit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.127-1" date="1776081600">- Update to 3.3.127
  - Fix for fixed point shift that does not disable it on the specify value
    change menu option
  - Changed ps2pdf to pstopdf on Mac as ps removed by Sonoma
  - Warnings fix in vcd2fst for missing string.h include
  - Added FST_ST_SV_ARRAY (FST) and "sv_array" (VCD) for arrays
    (gtkwave/libfst#17)
  - Update FSDB to handle FST_ST_SV_ARRAY (VCS emits this),
    FSDB_ST_SV_INTERFACEPORT_REF, and FSDB_VT_STRING
  - Added "SV_ST_ARRAY" to exclude file parsing on init
  - Fix use after free of GLOBALS-&gt;entrybox_text in regexp_highlight_generic()</changelog>
</package>
<package pkgid="80f463e3f1ed385f05b77dcf09b0412f54189c93a02b8db7bdc23ab42bcdacd9" name="lckdo" arch="x86_64">
  <version epoch="0" ver="0.0" rel="1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.0-1" date="1101902400">- Initial RPM build.</changelog>
</package>
<package pkgid="38780f9815ab31c5c700b2df523875907ef109b7942d3e49049bb0a12138fd93" name="libcurl" arch="i686">
  <version epoch="0" ver="8.17.0" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12.1-1.0.cf" date="1739448000">- Update to 8.12.1
  - All: Remove FIXME and TODO comments
  - asyn-thread: Fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: Fix HTTPS RR crash
  - asyn-thread: Fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: Survive a c-ares channel set to NULL
  - build: Add tool_hugehelp.c into IBMi build
  - checksrc.pl: Warn on FIXME/TODO comments
  - cmake/Find: Set '&lt;Modulename&gt;_FOUND' for compatibility when found via 'pkg-config'
  - cmake: Add integration tests, run them in CI
  - cmake: Always reference OpenSSL and ZLIB via imported targets
  - cmake: Avoid unnecessary '-L' for implicit link dirs
  - cmake: Drop 'LDAP_DEPRECATED=1' macro, to sync with autotools
  - cmake: Fix 'HAVE_GETHOSTBYNAME_R_*' detections with 'CURL_WERROR=ON'
  - cmake: Fix to detect 'HAVE_OPENSSL_SRP' in MSVC UWP builds
  - cmake: Fix/add missing feature detections for Windows/MS-DOS
  - cmake: Initialize variables where missing
  - cmake: Library order fixes for picky linkers (e.g. binutils 'ld')
  - cmake: Normalize before matching paths with syspaths
  - cmake: Respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: Respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - cmake: Save a line with 'CMAKE_C_IMPLICIT_LINK_DIRECTORIES' exclusion
  - cmake: Tidy up string append and list prepend syntax
  - configure/cmake: Check for realpath
  - configure/cmake: Set asyn-rr as feature only if httpsrr is enabled
  - content_encoding: #error on too old zlib
  - curl_global_sslset.md: Add SSL backend names
  - CURLOPT_SSH_KNOWNHOSTS.md: Strongly recommend using this
  - CURLSHOPT_SHARE.md: Adjust for the new SSL session cache
  - docs: Better explain multi-part byte range behaviour
  - docs: Use valid example domain names
  - generate.bat: Remove curl_get_line.c from the curlx file list
  - header.md: Mention 'Authorization:' and 'Cookie:' special treatment
  - imap: TLS upgrade fix
  - INTERNALS: Fix c-ares, as we actually support 1.6.0 or later
  - ldap: Drop support for legacy Novell LDAP SDK
  - lib: include necessary headers for 'inet_ntop'/'inet_pton'
  - lib: Silence LibreSSL collision warning on non-MSVC Windows
  - libssh2: Comparison is always true because rc &lt;= -1
  - libssh2: Raise lowest supported version to 1.2.8
  - libssh: Drop support for libssh older than 0.9.0
  - libssh: Silence '-Wconversion' with a cast (Windows 32-bit)
  - netrc: return code clean-up, fix missing file error
  - openssl-quic: Ignore ciphers for h3
  - openssl: Fix out of scope variables in goto
  - pop3: TLS upgrade fix
  - runtests: Fix the disabling of the memory tracking
  - runtests: Quote commands to support paths with spaces
  - scache: Add magic checks
  - smb: Silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - SPONSORS.md: Clarify that we don't promise goods or services
  - test1516: Avoid failure due to spaces in path
  - test2080: Simplify, avoid the null byte
  - tests: Fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
  - tidy-up: Make per-file 'ARRAYSIZE' macros global as 'CURL_ARRAYSIZE'
  - tool_cfgable: Sort struct fields by size, use bitfields for booleans
  - tool_getparam: Add "TLS required" flag for each such option
  - tool_progress: Fix percent output of large parallel transfers
  - tool_ssls: Switch to tool-specific get_line function
  - verbose.md: Mention how carriage-return might occur in headers
  - vquic: Make the "disable GSO" use infof, not failf
  - vtls: Fix multissl-init
  - vtsl: Eliminate 'data-&gt;state.ssl_scache'
  - wakeup_write: Make sure the eventfd write sends eight bytes
  - wolfssl: Silence compiler warning (MSVC 2019), simplify existing
- Use libssh2 rather than libssh for Fedora 28 and 29 builds since their
  versions of libssh are too old for curl now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.13.0-1.0.cf" date="1743595200">- Update to 8.13.0
  - curl: Add write-out variable 'tls_earlydata'
  - curl: Make --url support a file with URLs
  - gnutls: Set priority via --ciphers
  - IMAP: Add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: Add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: Add support for TLSv1.3 early data
  - rustls: Add support for CERTINFO
  - rustls: Add support for SSLKEYLOGFILE
  - rustls: Support ECH with DoH lookup for config
  - rustls: Support native platform verifier
  - var: Add a '64dec' function that can base64 decode a string
  - wolfssl: TLS early data support
  - addrinfo: Add curl macro to avoid redefining foreign symbols
  - asyn-thread: Avoid the separate 'struct resdata' alloc
  - asyn-thread: Avoid the separate curl_mutex_t alloc
  - asyn-thread: Do not allocate thread_data separately
  - asyn-thread: Remove 'status' from struct Curl_async
  - autotools: Fix 'dllmain.c' in unity builds
  - autotools: Fix 'libtest' bundle to depend on 'FIRSTFILES'
  - autotools: Use 'CURLDEBUG' to exclude TrackMemory code from unity
  - aws_sigv4: Cannot be used for proxy
  - aws_sigv4: Merge repeated headers in canonical request
  - aws_sigv4: Use strparse more for parsing
  - base64: Drop 'BUILDING_CURL' macro, always include in tests/server
  - build: Add Windows CE / CeGCC support, with CI jobs
  - build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls)
  - build: Do not apply curl debug macros to 'tests/server' by default
  - build: Drop unused 'getpart' tool
  - build: Enable -Wjump-misses-init for GCC 4.5+
  - build: Enable '-Wcast-qual', fix or silence compiler warnings
  - build: Fix compiler warnings in feature detections
  - build: Replace Curl_ prefix with curlx_ for functions used in servers
  - build: Set '-O3' and tune WinCE in CI, fix 'getpart', 'vtls_scache' fallouts
  - build: Set 'HAVE_STDINT_H' if 'stdint.h' is available
  - build: Set 'HAVE_WRITABLE_ARGV' for Apple cross-builds
  - build: Silence bogus '-Wconversion' warnings with gcc 5.1-5.4
  - build: Silence mingw32ce C99 format warnings, simplify CI
  - build: Tidy-ups around 'inet_pton'
  - c-ares httpsrr: Fix ifdef
  - c-ares: Error out for unsupported versions, drop unused macros
  - ca-native.md: Sync with CURLSSLOPT_NATIVE_CA
  - cf-socket: Deduplicate Windows Vista detection
  - cf-socket: Remove empty switch
  - client writer: Handle pause before decoding
  - cmake: 'CURL_LIBDIRS' improvements (upstreamed from vcpkg)
  - cmake: 'SHARE_LIB_OBJECT=ON' requires CMake 3.12 or newer
  - cmake: Add custom command scripts as dependencies where missing
  - cmake: Add pre-fill for Unix, enable in GHA/macos, verify pre-fills
  - cmake: Add shell completion support
  - cmake: Allow 'CURL_STATIC_CRT' with shared libcurl and no curl exe
  - cmake: Allow 'CURL_STATIC_CRT' with UCRT VS2015+ builds
  - cmake: Allow empty 'IMPORT_LIB_SUFFIX', add suffix collision detection
  - cmake: Avoid '-Wnonnull' warning in 'HAVE_FSETXATTR_5' detection
  - cmake: Disable HTTPS-proxy as a feature if proxy is disabled
  - cmake: Drop 'CURL_DISABLE_TESTS' option
  - cmake: Drop 'HAVE_C_FLAG_Wno_long_double' logic for ancient Apple gcc
  - cmake: Drop 'HAVE_IN_ADDR_T' from pre-fill too
  - cmake: Drop two stray TLS feature checks for wolfSSL
  - cmake: Exclude '-MP' for 'clang-cl' again
  - cmake: Fix 'HAVE_ATOMIC'/'HAVE_STDATOMIC' pre-fill for clang-cl
  - cmake: Fix clang-tidy builds to verify tests, fix fallouts
  - cmake: Fix detection pre-fills for iOS
  - cmake: Fix ECH detection in custom-patched OpenSSL
  - cmake: Fix typo in ECH config error msg
  - cmake: Hide empty 'MINGW64_VERSION' output for mingw32ce
  - cmake: Improve httpd detection for pytest
  - cmake: Mention 'insecure' in the debug build warning
  - cmake: Misc tidy-ups
  - cmake: Pre-fill known type sizes for Windows OSes
  - cmake: Replace CMAKE_COMPILER_IS_GNUCC with CMAKE_C_COMPILER_ID
  - cmake: Replace exec_program() with execute_process()
  - cmake: Restrict static CRT builds to static curl exe, test in CI
  - cmake: Sync cutoff version with autotools for picky option '-ftree-vrp'
  - cmake: Sync OpenSSL(-fork) feature checks with './configure'
  - cmake: Unity mode optimization for non-'CURLDEBUG' 'testdeps' targets
  - CODE_STYLE: Readability and banned functions
  - config-win32: Set 'HAVE_STDINT_H' where available
  - configure: Call the blocking resolver "blocking", not "default"
  - configure: Fix ECH detection with MultiSSL
  - configure: Silence compiler warnings in feature checks, drop duplicates
  - configure: Tidy up shell completion rules
  - configure: Use 'curl_cv_apple' variable
  - conn: Eliminate 'conn-&gt;now'
  - conn: Fix connection reuse when SSL is optional
  - conncache: Eliminate 'conn-&gt;destination_len' as premature optimization
  - contributors.sh: Lowercase 'github' for consistency
  - contrithanks.sh: Update docs/THANKS in place
  - cookie: Do prefix matching case-sensitively
  - cookie: Minor parser simplification
  - cookie: Simplify invalid_octets()
  - core: Stop redefining 'E*' macros on Windows, map 'EACCES', related fixes
  - curl.h: Change some enums to defines with L suffix
  - curl.h: Convert CURLUSESSL* names to defines
  - curl.h: Stop defining non-curl '__has_declspec_attribute'
  - curl.h: Switch 'CURL_HTTP_VERSION*' enums to long constants
  - curl/system.h: Drop leftover comment about 32 bit curl_off_t
  - curl: Add my_setopt_long() and _offt()
  - curl_msh3: Remove verify bypass from DEBUGBUILDs
  - curl_setup: Drop 'ERANGE' (for WinCE), no longer used
  - curl_setup_once: Drop 'E*' macro redefines unused (with winsock2)
  - curl_setup_once: Stop redefining 'ENAMETOOLONG' to winsock2 error code
  - curl_trc: Fix build with CURL_DISABLE_VERBOSE_STRINGS
  - curl_ws_recv.md: Expand a little on the fragments the API delivers
  - CURLMOPT_SOCKETFUNCTION.md: Add advice for socket callback invocation
  - CURLOPT_HTTPHEADER.md: Add comments to the example
  - CURLOPT_HTTPHEADER.md: Rephrases
  - curltime: Use libcurl time functions in src and tests/server
  - DISABLED: Add 313 for sectransp (move from GHA/macos)
  - docs/cmdline-opts: Use imperative form
  - docs: Adapt to removed --with-random
  - docs: Add FD_ZERO to curl_multi_fdset example
  - docs: Bump 'rustls' to 0.14.1
  - docs: Correct argument names and URL redirection
  - docs: Minor edits to please the new spellchecker regime
  - docs: Rework RUSTLS install instructions
  - docs: Unify HTTP version style in --help output
  - docs: Vulnerabilities in debug code are not eligible for a bounty
  - doh: Improve HTTPS RR svcparams parsing
  - doh: Remove wrong but unreachable exit path from doh_decode_rdata_name
  - dynbuf: Assert init on free
  - easy: Drop 'break' after 'return'
  - easy: Fix warning about possible comma misuse
  - eventfd: Allow use on all CPUs
  - examples: Prefer 'return' over 'exit()' (cont.)
  - ftp/sftp: strdup data info memory
  - ftp: Fix comment
  - gnutls: Fix connection state check on handshake
  - gnutls: Fix use of pkcs11 urls for keys/certs
  - gtls: Fix uninitialized variable
  - hash: Use single linked list for entries
  - hostip: Don't use alarm() for DoH resolves
  - hostip: Make CURLOPT_RESOLVE support replacing IPv6 addresses
  - http2: Add on_invalid_frame callback for error detection
  - http2: Detect session being closed on ingress handling
  - http2: Enhance error messages on Curl_dyn* upon receiving headers
  - http2: Fix stream assignemnt for pushes
  - http2: Reset stream on response header error
  - HTTP3.md: Only speak about minimal versions
  - http: Convert parsers to strparse
  - http: Fix NTLM info message typo
  - http: Fix the auth check
  - http: Make the RTSP version check stricter
  - http: Negotiation and room for alt-svc/https RR to navigate
  - http: Remove a HTTP method size restriction
  - http: Version negotiation
  - http_chunks: Replace a strofft call with curl_str_hex
  - https-rr: Implementation improvements
  - httpsrr: Fix port detection
  - httpsrr: Fix the HTTPS-RR threaded-resolver build combo
  - INFRASTRUCTURE.md: Add IRC and Matrix details
  - INSTALL-CMAKE.md: CMake usage updates
  - INSTALL-CMAKE.md: mention 'ZLIB_USE_STATIC_LIBS'
  - lib1156: Pass longs to 'curl_easy_setopt()'
  - lib1560: Test set path containing LR or CR
  - lib2302: Fix crash due to stack overflow on MSVC and clang Windows
  - lib696: Fix building on Windows in non-bundle mode
  - lib: Better optimized casecompare() and ncasecompare()
  - lib: Clear up CURLRES_ASYNCH vs. USE_CURL_ASYNC use
  - lib: Fix two curlx_strtoofft invokes
  - lib: Rename curlx_strtoofft to Curl_str_numblanks()
  - lib: Replace while(ISBLANK()) loops with Curl_str_passblanks()
  - lib: Simplify more white space loops
  - lib: strtoofft.h header cleanup
  - lib: Use Curl_str_* instead of strtok_r()
  - lib: Use Curl_str_number() for parsing decimal numbers
  - libssh2: Fix freeing of resources in disconnect
  - libssh2: Fix memory leak in 'SSH_SFTP_REALPATH' state
  - libssh2: Fix to ignore 'known_hosts' if SHA256 host public key is set
  - libssh2: Print user with verbose flag
  - libssh2: Show crypto backend in the verbose connect log
  - libssh: Fix freeing of resources in disconnect
  - libssh: Fix scp large file upload for 32-bit size_t systems
  - libtest/first.c: Remove the Test: stderr output for unity builds
  - libtest/libprereq.c: Set CURLOPT_FOLLOWLOCATION with a long
  - managen: Accept more markdown-quote-markers
  - managen: Correct the warning for un-escaped '&lt;' and '&gt;'
  - mbedtls: Re-enable an error check
  - memdebug.h: Avoid '-Wredundant-decls' with an extra guard
  - memdebug: Drop dynamic allocation from 'curl_dbg_log()'
  - mprintf: Switch three number parsers to use strparse
  - mqtt: Convert sendleftovers to dynbuf
  - msvc: Drop support for VS2005 and older
  - multi: Call protocol handler done() if PROTOCONNECT or later
  - multi: Event based rework
  - multi: Kill off remaining internal handles in curl_multi_cleanup
  - multi: Start the loop over when handles are removed
  - multi_ev: Fixes regarding connection shutdowns
  - ngtcp2: Do not iterate over multi handles
  - ntlm: Merge ntlm.h into ntlm.c
  - openssl-quic: Do not iterate over multi handles
  - openssl: Check return value of X509_get0_pubkey
  - openssl: Drop support for old OpenSSL/LibreSSL versions
  - openssl: Fix crash on missing cert password
  - openssl: Fix pkcs11 URI checking for key files
  - openssl: Remove bad 'goto's into other scope
  - prox/preproxy.md: Document argument within &lt;brackets&gt;
  - pytest: Test negotiate with http proxy
  - quiche: Do not iterate over multi handles
  - RELEASE-PROCEDURE.md: Explain release candidates
  - request: Clear sendbuf_hds_len when resetting request bufq
  - resolve: Fix building without Unix sockets and 'CURLDEBUG'
  - runtests: Accept 'CURL_DIRSUFFIX' without ending slash
  - runtests: Add feature-based filtering
  - runtests: Check and report if 'diff' tool is missing
  - runtests: Drop logic calling the 'handle' tool (Windows)
  - runtests: Drop recognizing 'winssl' as Schannel
  - runtests: Drop ref to unused external function
  - runtests: Fix bundled test invocation with '-g' option
  - runtests: Fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs
  - runtests: Fix test key format for libssh2 WinCNG (and others)
  - runtests: Generate certs dynamically, bump to EC-256, tidy up
  - runtests: Recognize AWS-LC as OpenSSL
  - runtests: Rewrite 'genserv.sh' in Perl
  - runtests: Support multi-target cmake, drop workarounds from CI
  - runtests: Support running tests under wine or qemu (cont.)
  - runtests: Support running tests under wine or qemu
  - runtests: Use 'setfacl' on Cygwin/MSYS, if present
  - rustls: Add ECH support with string ECH config
  - rustls: Cap maximum allowed CRL file size to 8MB
  - rustls: Support ECH GREASE
  - rustls: Use client cert and key if available
  - schannel: Deduplicate Windows Vista detection
  - schannel: Enable ALPN support under WINE 6.0+
  - schannel: Enable ALPN with MinGW, fix ALPN for UWP builds
  - schannel: Guard ALPN init code to ALPN builds
  - scripts/managen: Fix option 'single'
  - scripts/managen: Fix parsing of markdown code sections
  - scripts: Update completion.pl to parse options from docs
  - sectransp: Add support for HTTP/2 in gcc builds
  - sendf: Client reader line conversion: do not change data-&gt;state.infilesize
  - setopt: Illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: Remove unnecessary void pointer typecasts
  - setopt: Setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - shutdowns: Split shutdown handling from connection pool
  - socks: Remove bad assert from do_SOCKS5()
  - src: Avoid strdup on platforms not doing UTF-8 conversions
  - src: Clean-up ISBLANK vs. ISSPACE
  - src: Remove Curl_ prefix from tool-specific function
  - src: Remove final uses of Curl_ symbol prefixes in tool code
  - src: Replace strto[u][ld] with curlx_str_ parsers
  - ssh: Consider sftp quote commands case sensitive
  - sshserver.pl: Adjust 'AuthorizedKeysFile2' cutoff version
  - sshserver.pl: Use Perl 'chmod'
  - sshserver: Fix excluding obsolete client config lines
  - ssl session cache: Add exportable flag
  - SSLCERTS: List support for SSL_CERT_FILE and SSL_CERT_DIR
  - strparse: Make Curl_str_number() return error for no digits
  - strparse: Switch the API to work on 'const char *'
  - strparse: Switch to curl_off_t as base data type
  - test1022: Add support for rc releases
  - test1167: Catch #defines with extra whitespace
  - test313: Disable CRL test for Schannel due to lack of support and flakiness
  - test313: Disable via '&lt;features&gt;' for backends without CRL support
  - test489: Set output dir
  - test612: SCP 'rm' the uploaded remote file (not the local source), unignore in CI
  - test613: Make it pass on Windows, fix postprocess, unignore in CI
  - test615: Fix for Cygwin, unignore in CI
  - tests/certs: Clean up
  - tests/server: Drop unused 'base64.pl'
  - tests/server: Fix to check against winsock2 error codes on Windows
  - tests/server: Give global 'path' variable a more descriptive name
  - tests/server: Make the signal handler signal-safe
  - tests/server: Replace 'errno' with 'SOCKERRNO' in sockfilt, socksd, sws
  - tests/server: Replace 'strerror' with 'sstrerror' in socksd
  - tests/server: Support bundle binary
  - tests/server: Sync 'wait_ms()' with the libcurl implementation
  - tests/server: Use 'curlx_str_numblanks()' to avoid 'errno'
  - tests/servers.pm: Remove unused variable 'portrange'
  - tests: Build non-debug unit tests with autotools, run them
  - tests: Fix comment in lib533
  - tests: Fix enum/int confusion, fix autotools 'CFLAGS' for 'servers'
  - tests: Make sure 'commands.log' is generated in the correct logdir
  - tests: Mark tests 1631, 1632 flaky
  - tests: Reformat error messages to avoid tripping MSBuild
  - tests: Remove base64 encoded sections
  - tests: Remove unused variables
  - tests: Replace remaining non-ASCII bytes with hex markup
  - tftpd: Prefix TFTP protocol error 'E*' constants with 'TFTP_'
  - tidy-up: Align MSYS2/Cygwin codepaths, follow Cygwin 'MAX_PID' bump
  - tidy-up: Delete, comment or scope C macros reported unused
  - tidy-up: Drop unused 'CURL_INADDR_NONE' macro and 'in_addr_t' type
  - tidy-up: Use 'CURL_ARRAYSIZE()'
  - timediff: Fix comment for curlx_mstotv()
  - timediff: Remove unnecessary double typecast
  - tool_dirhie: Create dir hierarchy without strtok
  - tool_getparam: Clear sensitive arguments better
  - tool_getparam: Do parse_upload_flags without the alloc/free
  - tool_getparam: Parse --trace-config without strdup()/free()
  - tool_getparam: parse_header() without strtok
  - tool_operate: Change "1 retries" to "1 retry"
  - tool_operate: Fail SSH transfers without server auth
  - tool_operate: Fix pluralization of seconds
  - tool_operate: Remove unnecessary (long) typecasts
  - tool_paramhlp: Do --proto parsing without strtok
  - tool_parsecfg: Make my_get_line skip comments and newlines
  - tool_setopt: Reduce use of "code hiding" macros
  - url: Call protocol handler's disconnect in Curl_conn_free
  - urlapi: Fix redirect from file:// with query, and simplify
  - urlapi: Remove percent encoded dot sequences from the URL path
  - urlapi: Simplify junkscan
  - urldata: Remove 'hostname' from struct Curl_async
  - variable.md: Clarify 'trim' example
  - vquic: Obey IOV_MAX
  - vtls: Fix compiler warnings seen with gcc 7.3.0 and mbedTLS
  - winbuild: Reduce command-line length by dropping whitespace
  - windows: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - windows: Drop code and curl manifest targeting W2K and older
  - windows: Fix issues detected by clang-tidy, and some more
  - wolfssh: Fix freeing of resources in disconnect
  - wolfssh: Retrieve the error using wolfSSH_get_error
  - wolfssl: Fix CA certificate multiple location import
  - wolfssl: Fix unused variable warning
  - wolfssl: Warn if CA native import option is ignored
  - wolfssl: When using PQ KEM, use ML-KEM, not Kyber
  - ws: Corrected curlws_cont to reflect its documented purpose
  - ws: Fix and extend CURLWS_CONT handling
  - zlib: Bump minimum to 1.2.5.2 (was: 1.2.0.4)
- BR: openssl, needed for cert generation in test suite
- Drop "compat" build support in spec
- Drop legacy ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.0.cf" date="1748433600">- Update to 8.14.0
  - mqtt: Send ping at upkeep interval
  - schannel: Handle pkcs12 client certificates containing CA certificates
  - TLS: Add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: Import v2025.04.20 script and documentation
  - websocket: Add option to disable auto-pong reply
  - _SEEALSO.md: Remove spaces around command and man page section
  - asny-thrdd: Fix detach from running thread
  - asnyc-thrdd: Explain how this is okay with a comment
  - async resolver code improvements
  - async-threaded resolver: Use ref counter
  - async: DoH improvements
  - autotools: Detect 'wolfSSL_set_quic_use_legacy_code' like cmake does
  - autotools: Install shell completion files on cross build
  - aws-sigv4: Allow a blank string
  - build: Check required rustls-ffi version
  - build: Enable gcc-12/13+, clang-10+ picky warnings
  - build: Enable gcc-15 picky warnings
  - certs: Drop unused 'default_bits' from '.prm' files
  - cf-https-connect: Use the passed-in dns struct pointer
  - cf-socket: Fix FTP accept connect
  - cfilters: Remove assert
  - cmake/FindNGTCP2: Simplify multi-pkg-config detection
  - cmake: Append picky warnings to 'CMAKE_REQUIRED_FLAGS' as string
  - cmake: Avoid 'target is imported but not globally visible' when consuming
    libcurl with old cmake
  - cmake: Do not install 'mk-ca-bundle' script and manpage
  - cmake: Enable '-Wall' for MSVC when 'PICKY_COMPILER=ON'
  - cmake: Extend integration tests
  - cmake: Fix 'fish' install directory detection via 'pkg-config'
  - cmake: Fix nghttp3 static linking with 'USE_OPENSSL_QUIC=ON'
  - cmake: Fix option() and mark_as_advanced() mixed order
  - cmake: Fix shell completion install when just one flavour is enabled
  - cmake: Honour individual picky option overrides found in 'CMAKE_C_FLAGS'
  - cmake: Install shell completions for cross-builds
  - cmake: Link 'crypt32' for OpenSSL feature detection
  - cmake: Merge 'CURL_WERROR' logic into 'PickyWarnings.cmake'
  - cmake: Prefer 'COMPILE_OPTIONS' over 'CMAKE_C_FLAGS' for custom C options
  - cmake: Quotes, whitespace, use 'VERSION_GREATER_EQUAL'
  - cmake: Revert 'CURL_LTO' behaviour for multi-config generators
  - cmake: Set 'BUILDING_LIBCURL' directly for unit test targets
  - cmake: Stop deleting '-W&lt;n&gt;' from 'CMAKE_C_FLAGS' (MSVC)
  - cmake: Tidy up and document feature detections in dependencies
  - cmake: Use 'CMAKE_COMPILE_WARNING_AS_ERROR' if available
  - cmake: Use 'INCLUDE_DIRECTORIES' prop to specify local header dirs
  - cmake: Use 'LIB_NAME' in 'curl-config.cmake.in'
  - cmake: Use absolute paths for completion targets
  - cmake: Use the 'LINK_OPTIONS' property with CMake 3.13+
  - configure: Catch asking for double resolver without https-rr
  - configure: Fix --disable-rt
  - configure: Restore link checks
  - configure: Suppress command not found for brew
  - conncache: Make Curl_cpool_init return void
  - connect: Shutdown timer fix
  - content_encoding: Transfer-Encoding parser improvements
  - CONTRIBUTE: Add project guidelines for AI use
  - contrithanks.sh: Drop set -e
  - cpool/cshutdown: Force close connections under pressure
  - curl: Fix memory leak when -h is used in config file
  - curl: Only warn once for --manual in manual-disabled build
  - curl_get_line: Handle lines ending on the buffer boundary
  - curl_krb5: Only use functions if FTP is still enabled
  - curl_multibyte: Fix up low-level calls, include in unity builds
  - curl_osslq: Remove a leftover debug fprintf() call
  - curl_url_get.md: Don't call it normalized
  - curl_version_info.md: Clarify ssl_version for MultiSSL
  - CURLMOPT_TIMERFUNCTION.md: Correct the example
  - CURLOPT_ERRORBUFFER.md: Buffer is read only after curl takes ownership
  - CURLOPT_FOLLOWLOCATION.md: Switch to GET =&gt; no body
  - CURLOPT_READFUNCTION.md: Mention the seek callback
  - CURLOPT_XFERINFOFUNCTION.md: Fix the callback return type in example
  - curlx: Move the docs to docs/internals/
  - DEPRECATE.md: Drop support for VS2008
  - DEPRECATE.md: Drop Windows CE support
  - dist: Drop duplicate entry from 'CMAKE_DIST'
  - dns_entry: Move from conn to data-&gt;state
  - Dockerfile: Update debian:bookworm-slim Docker digest to 90522ee
  - docs/INSTALL.md: Drop reference to removed configure option
  - docs/libcurl: Fix type and prototype problems in examples
  - docs/libcurl: Make examples build with picky compiler options
  - docs/libcurl: Mention sensitive data/headers
  - docs: Add missing return statement in examples
  - docs: Fix incorrect shell substitution in docker run example command
  - docs: Fix typo in retry.md
  - docs: Update distros links
  - doh: httpsrr fix
  - doh: Make sure CURLOPT_PROTOCOLS is set with a "long" arg
  - doh: Reduce the DNS request buffer size
  - easy_reset: Fix dohfor_mid member
  - ECH: Reference the OpenSSL ECH feature branch
  - etag-save.md: Mention how using both options is a good idea
  - eventfd: Fix feature guards
  - formdata: Clean-ups
  - ftp: Fix bug in failed init
  - ftp: Fix race in upload handling
  - ftplistparser: Add two overflow preventions
  - ftplistparser: Split up into more functions
  - generate.bat: Exclude curlinfo.c from legacy VS projects
  - genserv.pl: Fail with a message if 'openssl' is missing or failing
  - headers: Enforce a max number of response header to accept
  - headers: Set an error message on illegal response headers
  - hostip: Fix build without threaded-resolver and without DoH
  - hostip: Show the correct name on proxy resolve error
  - http2: Fix stream window size after unpausing
  - HTTP3.md: Fix incorrect variable placeholders
  - http: Fix a build error when all auths are disabled
  - http: Fix HTTP/2 handling of TE request header using "trailers"
  - http: In alt-svc negotiation only allow supported HTTP versions
  - http_aws_sigv4: Add additional verbose log statements
  - http_aws_sigv4: Improve sigv4 url encoding and canonicalization
  - http_chunks: Narrow variable scope for 'trlen'
  - http_negotiate: Fix non-SSL build with GSSAPI
  - https-connect: Fix httpsrr target check
  - HTTPSRR.md: Clarify somewhat
  - if2ip: Build the function also if FTP is present
  - imap: Remove redundant condition
  - INSTALL-CMAKE.md: Fix typo
  - INSTALL.md: Update the minimal libcurl size example
  - KNOWN_BUGS: Fix link in sivg4 issue 16.3
  - lib/src/docs/test: Improve curl_easy_setopt() calls
  - lib1560: Use hex notation, drop non-ASCII exception
  - lib3026: Drop DLL pre-load perf mitigation for old mingw
  - lib: Add const to clientwriter tables
  - lib: Drop curlx_getpid, use fake pid in SMB
  - lib: Include files using known path
  - lib: Make Curl_easyopts const
  - lib: Unify conversions to/from hex
  - libcurl-tutorial.md: Fix read callback explanation
  - libssh: Add NULL check for Curl_meta_get()
  - libssh: Fix memory leak
  - libssh: Remove a condition that always equals false
  - libtest/first: Stop defining MEMDEBUG_NODEFINES
  - libtests: Define CURL_DISABLE_DEPRECATION first
  - make: Clean tests better
  - mbedtls: TLS 1.3 is max when mbedtls has 1.3 support
  - metahash: Add asserts to help analyzers
  - mk-ca-bundle.pl: Follow redirects
  - mk-ca-bundle: Switch URLs to GitHub versions
  - mkhelp: Fix to not generate a line-ending space in some cases
  - mqtt: Use conn/easy meta hash
  - multi: Do transfer book keeping using mid
  - multi: init_do(): Check result
  - netrc: Avoid NULL deref on weird input
  - netrc: Avoid strdup NULL
  - netrc: Deal with null token better
  - ngtcp2: Clarify ignoring of result
  - openssl-quic: Avoid potential '-Wnull-dereference', add assert
  - openssl-quic: Fix printf mask
  - openssl-quic: Fix shutdown when stream not open
  - openssl: Enable builds for *both* engines and providers
  - openssl: Set the cipher string before doing private cert
  - parsedate: Provide Curl_wkday also for GnuTLS builds
  - processhelp.pm: Always call 'taskkill' with '-f' (force)
  - processhelp.pm: Avoid potential endless loop, log more (Windows)
  - progress: Avoid integer overflow when gathering total transfer size
  - pytest tls: Extend coverage (fixes WolfSSL cert validation, CVE-2025-4947)
  - pytest-xdist: pytest in parallel
  - pytest: Add pinnedpubkey test cases (fixes WolfSSL pinning, CVE-2025-5025)
  - pytest: Give parameterised tests better ids for read- and parsability
  - pytest: Make test_07_22 more lenient to exit codes
  - quic: No local idle connection timeout, ngtcp2 keep-alive
  - rand: Update comment on Curl_rand_bytes weak random
  - RELEASE-PROCEDURE.md: Release candidate git tagging explained
  - rtsp: Remove redundant condition
  - runtests: Add retry option to reduce flakiness
  - runtests: Fix indentation
  - runtests: Recognize lowercase 'windows' in 'curl -V'
  - runtests: Remove server verification after start
  - runtests: Split 'SSH_PWD' into 'SCP_PWD' and 'SFTP_PWD', and more
  - rustls: Make max size of cert and key reasonable
  - sasl: Give help when unable to select AUTH
  - scripts: completion.pl: Sort the completion file for all shells
  - scripts: Drop unused import, formatting
  - scripts: Fix --opts-dir help in completion.pl
  - scripts: Fix perl indentation, whitespace, semicolons
  - sectransp: Fix building for macOS Sierra and older
  - setopt: Provide info for CURLE_BAD_FUNCTION_ARGUMENT
  - smb: Avoid integer overflow on weird input date
  - socket: Use accept4 when available
  - socketpair: Support pipe2 where available
  - spacecheck.pl: Check for non-ASCII chars, fix fallouts
  - spacecheck.pl: Verify 'tests/data/test*' for non-ASCII chars
  - src: Drop strcase.[ch] from tool builds
  - src: Include memdebug.h consistently with angle brackets &lt;&gt;
  - src: Rename curlx_safefree to tool_safefree
  - test1173.pl: Whitelist some option-looking names that aren't options
  - test1658: Add unit test for the HTTPS RR decoder
  - test: Make unittest 1308 into a libtest
  - tests/ech_tests.sh: Sync shebang with rest of bash scripts
  - tests/FILEFORMAT.md: Clarify %hex[] formatting
  - tests/FILEFORMAT.md: Document the aws feature
  - tests/README.md: Document --test-duphandle
  - tests/README.md: List the openssl tool among the prerequisites
  - tests/server/dnsd: Basic DNS server for test suite
  - tests/server: Check for 'stream != NULL' in mqttd
  - tests/server: Fix typo in comment
  - tests/server: Stop using libcurl string comparisons
  - tests/server: Stop using libcurl's printf functions
  - tests/serverhelp: Remove last remnants of http-pipe server
  - tests/tunit: Make a separate directory for tool-based unit tests
  - tests: Add aws feature to the related tests
  - tests: Add https-mtls server to force client auth
  - tests: Fix some test tag mismatches
  - tests: Mark ipfs tests to require ipfs
  - tests: Move a boolean variable out of the path section
  - tests: Prefer '--insecure' over '-k'
  - tests: Provide all non-ascii data hex encoded
  - tests: Remove some unused test case sections
  - tests: Require IPv6 for 1265, 1324, 2086
  - tests: Separate tunit tests from unit tests more
  - tests: Stop using libcurl's strdup
  - tests: Unify test case keywords
  - tests: Use a more portable null device path
  - TODO: Remove "nicer lacking perl message"
  - tool_cb_write.c: Handle EINTR on flush
  - tool_getparam: Clear argument only when needed
  - tool_operate: Make retrycheck() a separate function
  - tool_operate: When retrying, only truncate regular files
  - tool_paramhlp: Avoid integer overflow in secs2ms()
  - tool_parsecfg: Make get_line handle lines ending on the buffer boundary
  - typecheck-gcc.h: Fix the typechecks
  - urlapi: Redirecting to "" is considered fine
  - urlapi: Remove unneeded guards around PUNY2IDN
  - urldata: Remove the unused struct field 'hide_progress'
  - VERSIONS: List all past releases
  - vquic: Consistent name for the stream struct across backends
  - vquic: Init for every call to recvmsg
  - vtls: Avoid NULL deref on bad PEM input
  - vtls: Fix build with ssl but without http
  - VULN-DISCLOSURE-POLICY: Use of weak algos
  - winbuild: Add the deprecation warning to the README
  - winbuild: curl_get_line is not used for tool builds
  - windows: Fix builds targeting WinXP, test it in CI
  - wolfssl: Fix to enable ALPN when available
  - ws: Fix the header replace check
  - ws: Store protocol context as connection meta data</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.1.cf" date="1748520000">- Fix regression: curl_multi_add_handle() returning OOM when using more than
  400 handles (GH#17475)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.1-1.0.cf" date="1749038400">- Update to 8.14.1
  - asyn-thrdd: Fix clean-up when RR fails due to OOM
  - autotools: Recognize more Linux targets when setting '-D_GNU_SOURCE'
  - BUG-BOUNTY.md: Mention the medium bounty amount in 2025
  - cmake: Fix missed version number for multi-pkg-config detections
  - cmdline-docs: Mention HTTP resumed uploads to be shaky
  - curl: make -N handled correctly
  - curl: Upload from '.' fix
  - dllmain: Exclude from Cygwin builds
  - docs/tests: Remove mention of hyper
  - docs: Fix typos
  - ftp: Fix teardown of DATA connection in done
  - http: Fail early when rewind of input failed when following redirects
  - license: Update some copyright links to curl.se
  - memanalyze.pl: Fix getaddrinfo/freeaddrinfo checks
  - misc: Fix spelling
  - misc: We write *an* IPv6 address
  - multi: Fix add_handle resizing
  - spelling: 'a' vs. 'an'
  - spelling: Call it null-terminate consistently
  - test1510: Fix expectation
  - tests: Await portfile to be complete
  - tests: Fix checks for https-mtls proto
  - tests: Improve server start reliability
  - tests: Move test docs into /docs
  - tests: Re-enable 1510, document heimdal memleak
  - tests: Test mtls also w/ clientAuth EKU only
  - tests: Test mtls with --insecure
  - tls BIOs: Handle BIO_CTRL_EOF correctly
  - tool_getparam: Make --no-anyauth not be accepted
  - tool_getparam: Refactored, simplified
  - tool_getparam: Remove two nextarg NULL checks
  - VULN-DISCLOSURE-POLICY.md: The distros list wants ≤ 7 days embargo
  - wolfssl: Fix sending of early data
  - ws: Handle blocked sends better (CVE-2025-5399)
  - ws: Tests and fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-1.0.cf" date="1752667200">- Update to 8.15.0
  - TLS: Remove support for Secure Transport and BearSSL
  - altsvc: Accept 'clear' without semicolon as well
  - asyn-ares: Remove redundant NULL check
  - asyn-thrdd: Free the previous name before strdup'ing the new
  - autotools: Detect and link 'brotlicommon' library for brotli
  - autotools: Drop '$top_builddir/src' from src header path
  - autotools: Drop headers from src mk-unity rules (fixup)
  - autotools: Drop no longer necessary '--srcdir' unity options
  - autotools: Drop redundant 'Makefile.inc' from 'EXTRA_DIST' in src
  - autotools: Simplify configuration in tests, examples
  - bufq: Change read/write signatures
  - bufq: Remove the unused Curl_bufq_unwrite function
  - build: Assume 'sys/socket.h', 'sys/time.h' on non-Windows (as in 'curl/curl.h')
  - build: Drop 'HAVE_SYS_SOCKET_H' and 'HAVE_SYS_TIME_H' macros
  - build: Drop explicit curlx from hdr paths, refer headers with 'curlx/' prefix
  - build: Drop unused variables in tests
  - build: Fix libcurltool with cmake and tunits, related tidy-ups
  - build: Split '.c' and '.h' file lists in tests
  - build: Stop checking for 'sys/stat.h'
  - build: stubgss tidy-ups (in tests)
  - build: Sync build scripts between client/libtest
  - build: Tidy up 'Makefile.inc' use in lib and src
  - build: Tidy up header paths, use srcdir where possible
  - cf-socket: Make socket data_pending a no-op
  - checksrc-all: Rewrite in Perl, remove 'checksrc.bat'
  - checksrc: Reduce exceptions, apply again to curlx
  - cmake/FindGSS: Fix processing C header path options
  - cmake/FindGSS: Initialize result variables
  - cmake: 'curl_add_clang_tidy_test_target' tidy-ups
  - cmake: Build 'stubgss' library for libtests to match autotools
  - cmake: Check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
  - cmake: Configure c-ares header directory in project root (was: lib)
  - cmake: Document OpenSSL and ngtcp2 crypto lib custom variables
  - cmake: Drop never-propagated C macros
  - cmake: Drop passing redundant 'CURL_STATICLIB' in examples and clients
  - cmake: Drop redundant macro from test clients
  - cmake: Drop reference to future variable
  - cmake: Enable soversion by default for OpenHarmony OS
  - cmake: Fix 'curl_add_clang_tidy_test_target' when no '-D' option
  - cmake: Fix generator expression in docs/examples
  - cmake: Gather options recursively in 'curl_add_clang_tidy_test_target'
  - cmake: Make docs depend on support files
  - cmake: Move 'OUTPUT' argument in the 'add_custom_command()' line
  - cmake: Omit clang-tidy on internal libs curlu and curltool
  - cmake: Replace 'cmakelint' with 'cmake-lint' from 'cmakelang', fix issues
  - cmake: Replace the way clang-tidy verifies tests, fix issues found
  - cmake: Simplify handling generated 'lib1521.c' in libtests
  - cmake: Sync 'target_link_libraries()' order in tests more
  - cmake: Sync tests scripts by using the variable 'BUNDLE'
  - cmake: Sync tests scripts with each other and autotools (more)
  - cmake: Use 'target_link_options()' when available
  - config-win32: Fix default targets, shorten macro logic
  - configure: Order LDAP after the SSL libraries
  - connect: Drop unused struct member
  - connection: Clarify 'transport'
  - connection: Eliminate member 'remote_addr'
  - curl-config: Fix whitespace in usage text
  - curl.h: Make CURL_IPRESOLVE_* symbols defined as longs
  - curl.h: Make CURLSSLOPT_* symbols defined as longs
  - curl.h: Remove the "RESERVED" error codes
  - curl: Implement non-blocking STDIN read on Windows
  - curl: Improve non-blocking STDIN performance
  - curl: Remove the global argument from many functions
  - curl: Unify pointer names to global config
  - curl_get_line: Make sure lines end with newline
  - curl_memory.h: Fix to undefine 'accept4'
  - curl_path: Make SFTP handle a path like /~ properly
  - curlinfo: Provide the 'digest' feature
  - CURLSHOPT_SHARE.md: Mention multi-threading requires callbacks
  - DEPRECATE.md: Add VS2005 removal to the list
  - digest: Fix build with disabled digest auth
  - DISTROS: Update NixOS link
  - docs,tests: Fix english grammar "allow to" -&gt; "allow &lt;something&gt; to"
  - docs/CONTRIBUTE: Fix broken link
  - docs/examples: Add ftp-delete.c
  - docs: Beef up examples/websocket.c
  - docs: Fix broken link in CODE_REVIEW.md
  - docs: Fix broken link in INSTALL.md
  - docs: Fix docs for CURLOPT_PREQUOTE after #17616
  - docs: Fix documentation of connect_only 2
  - docs: Fix two typos
  - docs: Mention that the netrc file works without port numbers
  - docs: Mention the as-is concept generically
  - docs: Note SSLS-EXPORT feature in -ssl-sessions doc
  - docs: Reflect that delimiter-separated capath is only OpenSSL
  - docs: Sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
  - docs: Warn about lifetime in CURLOPT_CLOSESOCKET*
  - easy: Fix comment-documentation
  - easygetopt: Fix curl logo in header comment
  - firefox-db2pem: Avoid use of eval in script
  - ftp: Fix prequotes for a directory in URL
  - ftplistparser: Split parse_unix into sub-functions
  - h2_serverpush: Fix file handle leaks reported by clang-tidy
  - h3: Fix query of concurrent streams
  - http/3: Report handshake with version and cipher as for TCP connections
  - http2: Do not delay RST send on aborted transfer
  - http2: Fix var types in is_alive() implementations
  - http: Explicitly ignore parsing errors for Retry-After
  - http: Fix build with cookies and HSTS disabled
  - http_ntlm: Protect against null deref
  - http_ntlm: Remove unreachable code
  - INSTALL.md: Cygwin details and add source code link
  - ldap: Avoid automake caching issues with LDAP library names
  - ldap: If ldap-lib is sufficient, add it to LIBS
  - ldap: Initial support for --with-ldap option
  - lib2082: Drop 'typedef struct'
  - lib: Address singleuse issues
  - lib: Avoid reusing unclean connection
  - lib: Drop two interim macros in favor of native libcurl API calls
  - lib: Fix unused parameter/function compiler warnings
  - lib: Make 'CURLX_SET_BINMODE()' and use it
  - lib: Make 'curlx_wait_ms()' and use it
  - lib: Replace scache no-op macros with '#ifdef'
  - lib: Stop 'time()' debug overrides at the end of source in altsvc, hsts
  - lib: Unify recv/send function signatures
  - libcurl-env.md: Drop LOGNAME, USER and NTLMUSER
  - libcurl.m4: Fix indentation
  - libssh2: Remove use of 'initialised' for clean-up
  - libssh: De-complex myssh_statemach_act()
  - libssh: Fix readdir issues
  - libtests: Make tests 1503, 1504, 1505 use the 1502 binary
  - libtests: More header tidy-ups
  - libtests: Stop building the same source multiple times
  - memdebug.h: #undef 'fclose' before defining it
  - memdebug.h: Eliminate global macro 'CURL_MT_LOGFNAME_BUFSIZE'
  - memdebug: Include in unity batch
  - memory: Stop overriding unused 'wcsdup()'/'_wcsdup()' system functions
  - memory: Tidy up '_tcsdup()' override
  - misc: Fix typos
  - mk-lib1521: Replace 'printf' with 'curl_mprintf'
  - multi: Add dirty bitset
  - multi: Do not expire a blocked transfer
  - multi: Fix polling with pending input
  - multi: Remove careful bounds check as coverity says it is not needed
  - multi: xfer table/bitset, handle limits
  - ngtcp2: Fix coverity warning about result handling
  - openssl: Enable readahead
  - openssl: Error on SSL_ERROR_SYSCALL
  - openssl: Fix handling of buffered data
  - openssl: Fix openssl engine use
  - openssl: Fix pkcs11 provider available check
  - os400: Upgrade ILE/RPG bindings with latest definitions
  - pingpong: On disconnect, check for unflushed pingpong state
  - projects/build-openssl.bat: Remove
  - pytest: test_07_70, weaken early data check
  - pytest: Adapt for runs with openssl-1.1.1
  - pytest: Disable test_07_37 and test_07_36 with openssl's quic
  - quic: Implement CURLINFO_TLS_SSL_PTR
  - RELEASE-PROCEDURE.md: Update docs/VERSIONS
  - runtests.pl: Fix sprintf() using one too many %s
  - runtests: Fix 'LD_PRELOAD' detection for cmake-built curl binaries
  - runtests: Support memory-limits per test
  - rustls: Apply memory function overrides, fixing an ECH buffer free
  - rustls: Don't try printing the not provided file
  - schannel: Allow partial chains for manual peer verification
  - schannel: Drop Windows 2000 compatibility logic
  - scorecard: Flame graphs and documentation
  - SCP/SFTP: Avoid busy loop after EAGAIN
  - scripts: Fix to quote the copyright email address
  - socks: Fix query when filter context is null
  - system.h: Remove some macros
  - test1117: Reduce write delays
  - test1175: Fix to run, and fix documentation issues detected
  - test1222: Fix for out-of-tree and no-libcurl-manual builds
  - test1499, 1599: use '%LOGDIR'
  - test1499: Verify two chunked responses on reused connection
  - test1596: Let test pass after year 2036
  - test1706: Pass include directory to 'managen' for out-of-tree builds
  - tests/client: Drop autotools logic no longer necessary
  - tests/client: Use 'curl_mfprintf()'
  - tests/dnsd: Read config from file
  - tests/http/clients: Drop hack and use 'curl_setup.h' again
  - tests/http/clients: Move to tests/client
  - tests/http/requirements: Remove multipart
  - tests/libtest: Call 'curlx_now_init()' for unit 1399, 2600 (Windows)
  - tests/libtest: Drop 'TEST_HANG_TIMEOUT' redefinition hack
  - tests/libtest: Drop a checksrc exception
  - tests/libtest: Use 'curltime' from curlx
  - tests/server/util.c: Include netinet/in6.h
  - tests/server: De-dupe/merge three 'sockdaemon()' clones into one
  - tests/server: Drop 'memdebug.h'
  - tests/server: Make all global vars/funcs static
  - tests/server: Move memory init to 'memptr.c'
  - tests/servers.pm: Add more ways to figure out current user
  - tests: Always make bundles, adapt build and tests
  - tests: Bundle http clients, de-dupe, enable for MSVC
  - tests: Constify, make consts static
  - tests: Drop 'BUNDLE_SRC' variable
  - tests: Drop mk-bundle exceptions
  - tests: Drop unused or redundant includes
  - tests: Drop useless "nodist_SOURCES" assignments
  - tests: Fail torture if !valgrind&amp;threaded resolver
  - tests: Fix 1301, 1308 to fail on error
  - tests: Fix 'BUNDLE' variable references in 'Makefile.am'
  - tests: Make all names &lt; 75 characters long
  - tests: Make individual test sources compile cleanly
  - tests: Make sshserver less verbose
  - tests: Move 'curlcheck.h' to libtest as 'unitcheck.h'
  - tests: Move GSS-API dynamic stub into debug-mode libcurl
  - tests: torture: Don't duplicate valgrind command
  - tests: Use %b64[] to base64 data
  - tests: Use %b64[] to base64 data in 2056, 2057
  - tftpd: Use 'CURLMIN()' macro
  - tidy-up: Replace '&lt;memdebug.h&gt;' with '"memdebug.h"' (src, units)
  - tls: Remove Curl_ssl false_start
  - tool1621: Drop unused internal libcurl headers
  - tool_getparam: Fix --ftp-pasv
  - tool_operate: Fix return code when --retry is used but not triggered
  - tool_paramhelp: Fix language in comments
  - top-complexity: Lower max allowed complexity threshold to 90
  - unit tests: Extract "private" prototypes at build time
  - unit1302: Expand the base64 encode/decode tests
  - url: Fix connection lifetime checks
  - url: Fix NULL deref with bad password when no user is provided
  - urlapi: Simplify and split into sub functions
  - urlapi: Use uppercase hex encoding
  - vauth: Move auth structs to conn meta data
  - vtls: Change send/recv signatures of tls backends
  - vtls: Fix a copy-pasted early data comment typo
  - vtls: Log rustls negotiated KEX group name
  - vtls: Prefer ciphersuite to cipher in msgs
  - vtls: Prefer rustls-ffi ciphersuite name API
  - VULN-DISCLOSURE-POLICY.md: Fix typos
  - VULN-DISCLOSURE-POLICY: All reports should be disclosed
  - VULN-DISCLOSURE-POLICY: Exclude not installed software
  - VULN-DISCLOSURE-POLICY: Minor language polish
  - warnless: Drop parts of the 'read'/'write' preprocessor hack (Windows)
  - warnless: Replace 'read()'/'write()' wrapper functions with macros (Windows)
  - windows: Drop redundant 'curl_wcsdup_callback' callback
  - windows: Fixup 'fopen()' in 'CURLDEBUG' builds
  - windows: Reduce/stop loading DLLs at runtime
  - wolfssl: Add support for ML_KEM hybrids
  - ws: Drop redundant 'CURL_EXTERN' from function definitions
  - xfer: Manage pause bits</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.0.cf" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.1.cf" date="1753617600">- Fix dependency on CA bundle when we don't use the old one at
  /etc/pki/tls/certs/ca-bundle.crt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
</package>
<package pkgid="87e2ea353295bf03e6722e9f2d6be69be067eca79849152234cf40c3a563445c" name="libcurl" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12.1-1.0.cf" date="1739448000">- Update to 8.12.1
  - All: Remove FIXME and TODO comments
  - asyn-thread: Fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: Fix HTTPS RR crash
  - asyn-thread: Fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: Survive a c-ares channel set to NULL
  - build: Add tool_hugehelp.c into IBMi build
  - checksrc.pl: Warn on FIXME/TODO comments
  - cmake/Find: Set '&lt;Modulename&gt;_FOUND' for compatibility when found via 'pkg-config'
  - cmake: Add integration tests, run them in CI
  - cmake: Always reference OpenSSL and ZLIB via imported targets
  - cmake: Avoid unnecessary '-L' for implicit link dirs
  - cmake: Drop 'LDAP_DEPRECATED=1' macro, to sync with autotools
  - cmake: Fix 'HAVE_GETHOSTBYNAME_R_*' detections with 'CURL_WERROR=ON'
  - cmake: Fix to detect 'HAVE_OPENSSL_SRP' in MSVC UWP builds
  - cmake: Fix/add missing feature detections for Windows/MS-DOS
  - cmake: Initialize variables where missing
  - cmake: Library order fixes for picky linkers (e.g. binutils 'ld')
  - cmake: Normalize before matching paths with syspaths
  - cmake: Respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: Respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - cmake: Save a line with 'CMAKE_C_IMPLICIT_LINK_DIRECTORIES' exclusion
  - cmake: Tidy up string append and list prepend syntax
  - configure/cmake: Check for realpath
  - configure/cmake: Set asyn-rr as feature only if httpsrr is enabled
  - content_encoding: #error on too old zlib
  - curl_global_sslset.md: Add SSL backend names
  - CURLOPT_SSH_KNOWNHOSTS.md: Strongly recommend using this
  - CURLSHOPT_SHARE.md: Adjust for the new SSL session cache
  - docs: Better explain multi-part byte range behaviour
  - docs: Use valid example domain names
  - generate.bat: Remove curl_get_line.c from the curlx file list
  - header.md: Mention 'Authorization:' and 'Cookie:' special treatment
  - imap: TLS upgrade fix
  - INTERNALS: Fix c-ares, as we actually support 1.6.0 or later
  - ldap: Drop support for legacy Novell LDAP SDK
  - lib: include necessary headers for 'inet_ntop'/'inet_pton'
  - lib: Silence LibreSSL collision warning on non-MSVC Windows
  - libssh2: Comparison is always true because rc &lt;= -1
  - libssh2: Raise lowest supported version to 1.2.8
  - libssh: Drop support for libssh older than 0.9.0
  - libssh: Silence '-Wconversion' with a cast (Windows 32-bit)
  - netrc: return code clean-up, fix missing file error
  - openssl-quic: Ignore ciphers for h3
  - openssl: Fix out of scope variables in goto
  - pop3: TLS upgrade fix
  - runtests: Fix the disabling of the memory tracking
  - runtests: Quote commands to support paths with spaces
  - scache: Add magic checks
  - smb: Silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - SPONSORS.md: Clarify that we don't promise goods or services
  - test1516: Avoid failure due to spaces in path
  - test2080: Simplify, avoid the null byte
  - tests: Fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
  - tidy-up: Make per-file 'ARRAYSIZE' macros global as 'CURL_ARRAYSIZE'
  - tool_cfgable: Sort struct fields by size, use bitfields for booleans
  - tool_getparam: Add "TLS required" flag for each such option
  - tool_progress: Fix percent output of large parallel transfers
  - tool_ssls: Switch to tool-specific get_line function
  - verbose.md: Mention how carriage-return might occur in headers
  - vquic: Make the "disable GSO" use infof, not failf
  - vtls: Fix multissl-init
  - vtsl: Eliminate 'data-&gt;state.ssl_scache'
  - wakeup_write: Make sure the eventfd write sends eight bytes
  - wolfssl: Silence compiler warning (MSVC 2019), simplify existing
- Use libssh2 rather than libssh for Fedora 28 and 29 builds since their
  versions of libssh are too old for curl now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.13.0-1.0.cf" date="1743595200">- Update to 8.13.0
  - curl: Add write-out variable 'tls_earlydata'
  - curl: Make --url support a file with URLs
  - gnutls: Set priority via --ciphers
  - IMAP: Add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: Add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: Add support for TLSv1.3 early data
  - rustls: Add support for CERTINFO
  - rustls: Add support for SSLKEYLOGFILE
  - rustls: Support ECH with DoH lookup for config
  - rustls: Support native platform verifier
  - var: Add a '64dec' function that can base64 decode a string
  - wolfssl: TLS early data support
  - addrinfo: Add curl macro to avoid redefining foreign symbols
  - asyn-thread: Avoid the separate 'struct resdata' alloc
  - asyn-thread: Avoid the separate curl_mutex_t alloc
  - asyn-thread: Do not allocate thread_data separately
  - asyn-thread: Remove 'status' from struct Curl_async
  - autotools: Fix 'dllmain.c' in unity builds
  - autotools: Fix 'libtest' bundle to depend on 'FIRSTFILES'
  - autotools: Use 'CURLDEBUG' to exclude TrackMemory code from unity
  - aws_sigv4: Cannot be used for proxy
  - aws_sigv4: Merge repeated headers in canonical request
  - aws_sigv4: Use strparse more for parsing
  - base64: Drop 'BUILDING_CURL' macro, always include in tests/server
  - build: Add Windows CE / CeGCC support, with CI jobs
  - build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls)
  - build: Do not apply curl debug macros to 'tests/server' by default
  - build: Drop unused 'getpart' tool
  - build: Enable -Wjump-misses-init for GCC 4.5+
  - build: Enable '-Wcast-qual', fix or silence compiler warnings
  - build: Fix compiler warnings in feature detections
  - build: Replace Curl_ prefix with curlx_ for functions used in servers
  - build: Set '-O3' and tune WinCE in CI, fix 'getpart', 'vtls_scache' fallouts
  - build: Set 'HAVE_STDINT_H' if 'stdint.h' is available
  - build: Set 'HAVE_WRITABLE_ARGV' for Apple cross-builds
  - build: Silence bogus '-Wconversion' warnings with gcc 5.1-5.4
  - build: Silence mingw32ce C99 format warnings, simplify CI
  - build: Tidy-ups around 'inet_pton'
  - c-ares httpsrr: Fix ifdef
  - c-ares: Error out for unsupported versions, drop unused macros
  - ca-native.md: Sync with CURLSSLOPT_NATIVE_CA
  - cf-socket: Deduplicate Windows Vista detection
  - cf-socket: Remove empty switch
  - client writer: Handle pause before decoding
  - cmake: 'CURL_LIBDIRS' improvements (upstreamed from vcpkg)
  - cmake: 'SHARE_LIB_OBJECT=ON' requires CMake 3.12 or newer
  - cmake: Add custom command scripts as dependencies where missing
  - cmake: Add pre-fill for Unix, enable in GHA/macos, verify pre-fills
  - cmake: Add shell completion support
  - cmake: Allow 'CURL_STATIC_CRT' with shared libcurl and no curl exe
  - cmake: Allow 'CURL_STATIC_CRT' with UCRT VS2015+ builds
  - cmake: Allow empty 'IMPORT_LIB_SUFFIX', add suffix collision detection
  - cmake: Avoid '-Wnonnull' warning in 'HAVE_FSETXATTR_5' detection
  - cmake: Disable HTTPS-proxy as a feature if proxy is disabled
  - cmake: Drop 'CURL_DISABLE_TESTS' option
  - cmake: Drop 'HAVE_C_FLAG_Wno_long_double' logic for ancient Apple gcc
  - cmake: Drop 'HAVE_IN_ADDR_T' from pre-fill too
  - cmake: Drop two stray TLS feature checks for wolfSSL
  - cmake: Exclude '-MP' for 'clang-cl' again
  - cmake: Fix 'HAVE_ATOMIC'/'HAVE_STDATOMIC' pre-fill for clang-cl
  - cmake: Fix clang-tidy builds to verify tests, fix fallouts
  - cmake: Fix detection pre-fills for iOS
  - cmake: Fix ECH detection in custom-patched OpenSSL
  - cmake: Fix typo in ECH config error msg
  - cmake: Hide empty 'MINGW64_VERSION' output for mingw32ce
  - cmake: Improve httpd detection for pytest
  - cmake: Mention 'insecure' in the debug build warning
  - cmake: Misc tidy-ups
  - cmake: Pre-fill known type sizes for Windows OSes
  - cmake: Replace CMAKE_COMPILER_IS_GNUCC with CMAKE_C_COMPILER_ID
  - cmake: Replace exec_program() with execute_process()
  - cmake: Restrict static CRT builds to static curl exe, test in CI
  - cmake: Sync cutoff version with autotools for picky option '-ftree-vrp'
  - cmake: Sync OpenSSL(-fork) feature checks with './configure'
  - cmake: Unity mode optimization for non-'CURLDEBUG' 'testdeps' targets
  - CODE_STYLE: Readability and banned functions
  - config-win32: Set 'HAVE_STDINT_H' where available
  - configure: Call the blocking resolver "blocking", not "default"
  - configure: Fix ECH detection with MultiSSL
  - configure: Silence compiler warnings in feature checks, drop duplicates
  - configure: Tidy up shell completion rules
  - configure: Use 'curl_cv_apple' variable
  - conn: Eliminate 'conn-&gt;now'
  - conn: Fix connection reuse when SSL is optional
  - conncache: Eliminate 'conn-&gt;destination_len' as premature optimization
  - contributors.sh: Lowercase 'github' for consistency
  - contrithanks.sh: Update docs/THANKS in place
  - cookie: Do prefix matching case-sensitively
  - cookie: Minor parser simplification
  - cookie: Simplify invalid_octets()
  - core: Stop redefining 'E*' macros on Windows, map 'EACCES', related fixes
  - curl.h: Change some enums to defines with L suffix
  - curl.h: Convert CURLUSESSL* names to defines
  - curl.h: Stop defining non-curl '__has_declspec_attribute'
  - curl.h: Switch 'CURL_HTTP_VERSION*' enums to long constants
  - curl/system.h: Drop leftover comment about 32 bit curl_off_t
  - curl: Add my_setopt_long() and _offt()
  - curl_msh3: Remove verify bypass from DEBUGBUILDs
  - curl_setup: Drop 'ERANGE' (for WinCE), no longer used
  - curl_setup_once: Drop 'E*' macro redefines unused (with winsock2)
  - curl_setup_once: Stop redefining 'ENAMETOOLONG' to winsock2 error code
  - curl_trc: Fix build with CURL_DISABLE_VERBOSE_STRINGS
  - curl_ws_recv.md: Expand a little on the fragments the API delivers
  - CURLMOPT_SOCKETFUNCTION.md: Add advice for socket callback invocation
  - CURLOPT_HTTPHEADER.md: Add comments to the example
  - CURLOPT_HTTPHEADER.md: Rephrases
  - curltime: Use libcurl time functions in src and tests/server
  - DISABLED: Add 313 for sectransp (move from GHA/macos)
  - docs/cmdline-opts: Use imperative form
  - docs: Adapt to removed --with-random
  - docs: Add FD_ZERO to curl_multi_fdset example
  - docs: Bump 'rustls' to 0.14.1
  - docs: Correct argument names and URL redirection
  - docs: Minor edits to please the new spellchecker regime
  - docs: Rework RUSTLS install instructions
  - docs: Unify HTTP version style in --help output
  - docs: Vulnerabilities in debug code are not eligible for a bounty
  - doh: Improve HTTPS RR svcparams parsing
  - doh: Remove wrong but unreachable exit path from doh_decode_rdata_name
  - dynbuf: Assert init on free
  - easy: Drop 'break' after 'return'
  - easy: Fix warning about possible comma misuse
  - eventfd: Allow use on all CPUs
  - examples: Prefer 'return' over 'exit()' (cont.)
  - ftp/sftp: strdup data info memory
  - ftp: Fix comment
  - gnutls: Fix connection state check on handshake
  - gnutls: Fix use of pkcs11 urls for keys/certs
  - gtls: Fix uninitialized variable
  - hash: Use single linked list for entries
  - hostip: Don't use alarm() for DoH resolves
  - hostip: Make CURLOPT_RESOLVE support replacing IPv6 addresses
  - http2: Add on_invalid_frame callback for error detection
  - http2: Detect session being closed on ingress handling
  - http2: Enhance error messages on Curl_dyn* upon receiving headers
  - http2: Fix stream assignemnt for pushes
  - http2: Reset stream on response header error
  - HTTP3.md: Only speak about minimal versions
  - http: Convert parsers to strparse
  - http: Fix NTLM info message typo
  - http: Fix the auth check
  - http: Make the RTSP version check stricter
  - http: Negotiation and room for alt-svc/https RR to navigate
  - http: Remove a HTTP method size restriction
  - http: Version negotiation
  - http_chunks: Replace a strofft call with curl_str_hex
  - https-rr: Implementation improvements
  - httpsrr: Fix port detection
  - httpsrr: Fix the HTTPS-RR threaded-resolver build combo
  - INFRASTRUCTURE.md: Add IRC and Matrix details
  - INSTALL-CMAKE.md: CMake usage updates
  - INSTALL-CMAKE.md: mention 'ZLIB_USE_STATIC_LIBS'
  - lib1156: Pass longs to 'curl_easy_setopt()'
  - lib1560: Test set path containing LR or CR
  - lib2302: Fix crash due to stack overflow on MSVC and clang Windows
  - lib696: Fix building on Windows in non-bundle mode
  - lib: Better optimized casecompare() and ncasecompare()
  - lib: Clear up CURLRES_ASYNCH vs. USE_CURL_ASYNC use
  - lib: Fix two curlx_strtoofft invokes
  - lib: Rename curlx_strtoofft to Curl_str_numblanks()
  - lib: Replace while(ISBLANK()) loops with Curl_str_passblanks()
  - lib: Simplify more white space loops
  - lib: strtoofft.h header cleanup
  - lib: Use Curl_str_* instead of strtok_r()
  - lib: Use Curl_str_number() for parsing decimal numbers
  - libssh2: Fix freeing of resources in disconnect
  - libssh2: Fix memory leak in 'SSH_SFTP_REALPATH' state
  - libssh2: Fix to ignore 'known_hosts' if SHA256 host public key is set
  - libssh2: Print user with verbose flag
  - libssh2: Show crypto backend in the verbose connect log
  - libssh: Fix freeing of resources in disconnect
  - libssh: Fix scp large file upload for 32-bit size_t systems
  - libtest/first.c: Remove the Test: stderr output for unity builds
  - libtest/libprereq.c: Set CURLOPT_FOLLOWLOCATION with a long
  - managen: Accept more markdown-quote-markers
  - managen: Correct the warning for un-escaped '&lt;' and '&gt;'
  - mbedtls: Re-enable an error check
  - memdebug.h: Avoid '-Wredundant-decls' with an extra guard
  - memdebug: Drop dynamic allocation from 'curl_dbg_log()'
  - mprintf: Switch three number parsers to use strparse
  - mqtt: Convert sendleftovers to dynbuf
  - msvc: Drop support for VS2005 and older
  - multi: Call protocol handler done() if PROTOCONNECT or later
  - multi: Event based rework
  - multi: Kill off remaining internal handles in curl_multi_cleanup
  - multi: Start the loop over when handles are removed
  - multi_ev: Fixes regarding connection shutdowns
  - ngtcp2: Do not iterate over multi handles
  - ntlm: Merge ntlm.h into ntlm.c
  - openssl-quic: Do not iterate over multi handles
  - openssl: Check return value of X509_get0_pubkey
  - openssl: Drop support for old OpenSSL/LibreSSL versions
  - openssl: Fix crash on missing cert password
  - openssl: Fix pkcs11 URI checking for key files
  - openssl: Remove bad 'goto's into other scope
  - prox/preproxy.md: Document argument within &lt;brackets&gt;
  - pytest: Test negotiate with http proxy
  - quiche: Do not iterate over multi handles
  - RELEASE-PROCEDURE.md: Explain release candidates
  - request: Clear sendbuf_hds_len when resetting request bufq
  - resolve: Fix building without Unix sockets and 'CURLDEBUG'
  - runtests: Accept 'CURL_DIRSUFFIX' without ending slash
  - runtests: Add feature-based filtering
  - runtests: Check and report if 'diff' tool is missing
  - runtests: Drop logic calling the 'handle' tool (Windows)
  - runtests: Drop recognizing 'winssl' as Schannel
  - runtests: Drop ref to unused external function
  - runtests: Fix bundled test invocation with '-g' option
  - runtests: Fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs
  - runtests: Fix test key format for libssh2 WinCNG (and others)
  - runtests: Generate certs dynamically, bump to EC-256, tidy up
  - runtests: Recognize AWS-LC as OpenSSL
  - runtests: Rewrite 'genserv.sh' in Perl
  - runtests: Support multi-target cmake, drop workarounds from CI
  - runtests: Support running tests under wine or qemu (cont.)
  - runtests: Support running tests under wine or qemu
  - runtests: Use 'setfacl' on Cygwin/MSYS, if present
  - rustls: Add ECH support with string ECH config
  - rustls: Cap maximum allowed CRL file size to 8MB
  - rustls: Support ECH GREASE
  - rustls: Use client cert and key if available
  - schannel: Deduplicate Windows Vista detection
  - schannel: Enable ALPN support under WINE 6.0+
  - schannel: Enable ALPN with MinGW, fix ALPN for UWP builds
  - schannel: Guard ALPN init code to ALPN builds
  - scripts/managen: Fix option 'single'
  - scripts/managen: Fix parsing of markdown code sections
  - scripts: Update completion.pl to parse options from docs
  - sectransp: Add support for HTTP/2 in gcc builds
  - sendf: Client reader line conversion: do not change data-&gt;state.infilesize
  - setopt: Illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: Remove unnecessary void pointer typecasts
  - setopt: Setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - shutdowns: Split shutdown handling from connection pool
  - socks: Remove bad assert from do_SOCKS5()
  - src: Avoid strdup on platforms not doing UTF-8 conversions
  - src: Clean-up ISBLANK vs. ISSPACE
  - src: Remove Curl_ prefix from tool-specific function
  - src: Remove final uses of Curl_ symbol prefixes in tool code
  - src: Replace strto[u][ld] with curlx_str_ parsers
  - ssh: Consider sftp quote commands case sensitive
  - sshserver.pl: Adjust 'AuthorizedKeysFile2' cutoff version
  - sshserver.pl: Use Perl 'chmod'
  - sshserver: Fix excluding obsolete client config lines
  - ssl session cache: Add exportable flag
  - SSLCERTS: List support for SSL_CERT_FILE and SSL_CERT_DIR
  - strparse: Make Curl_str_number() return error for no digits
  - strparse: Switch the API to work on 'const char *'
  - strparse: Switch to curl_off_t as base data type
  - test1022: Add support for rc releases
  - test1167: Catch #defines with extra whitespace
  - test313: Disable CRL test for Schannel due to lack of support and flakiness
  - test313: Disable via '&lt;features&gt;' for backends without CRL support
  - test489: Set output dir
  - test612: SCP 'rm' the uploaded remote file (not the local source), unignore in CI
  - test613: Make it pass on Windows, fix postprocess, unignore in CI
  - test615: Fix for Cygwin, unignore in CI
  - tests/certs: Clean up
  - tests/server: Drop unused 'base64.pl'
  - tests/server: Fix to check against winsock2 error codes on Windows
  - tests/server: Give global 'path' variable a more descriptive name
  - tests/server: Make the signal handler signal-safe
  - tests/server: Replace 'errno' with 'SOCKERRNO' in sockfilt, socksd, sws
  - tests/server: Replace 'strerror' with 'sstrerror' in socksd
  - tests/server: Support bundle binary
  - tests/server: Sync 'wait_ms()' with the libcurl implementation
  - tests/server: Use 'curlx_str_numblanks()' to avoid 'errno'
  - tests/servers.pm: Remove unused variable 'portrange'
  - tests: Build non-debug unit tests with autotools, run them
  - tests: Fix comment in lib533
  - tests: Fix enum/int confusion, fix autotools 'CFLAGS' for 'servers'
  - tests: Make sure 'commands.log' is generated in the correct logdir
  - tests: Mark tests 1631, 1632 flaky
  - tests: Reformat error messages to avoid tripping MSBuild
  - tests: Remove base64 encoded sections
  - tests: Remove unused variables
  - tests: Replace remaining non-ASCII bytes with hex markup
  - tftpd: Prefix TFTP protocol error 'E*' constants with 'TFTP_'
  - tidy-up: Align MSYS2/Cygwin codepaths, follow Cygwin 'MAX_PID' bump
  - tidy-up: Delete, comment or scope C macros reported unused
  - tidy-up: Drop unused 'CURL_INADDR_NONE' macro and 'in_addr_t' type
  - tidy-up: Use 'CURL_ARRAYSIZE()'
  - timediff: Fix comment for curlx_mstotv()
  - timediff: Remove unnecessary double typecast
  - tool_dirhie: Create dir hierarchy without strtok
  - tool_getparam: Clear sensitive arguments better
  - tool_getparam: Do parse_upload_flags without the alloc/free
  - tool_getparam: Parse --trace-config without strdup()/free()
  - tool_getparam: parse_header() without strtok
  - tool_operate: Change "1 retries" to "1 retry"
  - tool_operate: Fail SSH transfers without server auth
  - tool_operate: Fix pluralization of seconds
  - tool_operate: Remove unnecessary (long) typecasts
  - tool_paramhlp: Do --proto parsing without strtok
  - tool_parsecfg: Make my_get_line skip comments and newlines
  - tool_setopt: Reduce use of "code hiding" macros
  - url: Call protocol handler's disconnect in Curl_conn_free
  - urlapi: Fix redirect from file:// with query, and simplify
  - urlapi: Remove percent encoded dot sequences from the URL path
  - urlapi: Simplify junkscan
  - urldata: Remove 'hostname' from struct Curl_async
  - variable.md: Clarify 'trim' example
  - vquic: Obey IOV_MAX
  - vtls: Fix compiler warnings seen with gcc 7.3.0 and mbedTLS
  - winbuild: Reduce command-line length by dropping whitespace
  - windows: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - windows: Drop code and curl manifest targeting W2K and older
  - windows: Fix issues detected by clang-tidy, and some more
  - wolfssh: Fix freeing of resources in disconnect
  - wolfssh: Retrieve the error using wolfSSH_get_error
  - wolfssl: Fix CA certificate multiple location import
  - wolfssl: Fix unused variable warning
  - wolfssl: Warn if CA native import option is ignored
  - wolfssl: When using PQ KEM, use ML-KEM, not Kyber
  - ws: Corrected curlws_cont to reflect its documented purpose
  - ws: Fix and extend CURLWS_CONT handling
  - zlib: Bump minimum to 1.2.5.2 (was: 1.2.0.4)
- BR: openssl, needed for cert generation in test suite
- Drop "compat" build support in spec
- Drop legacy ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.0.cf" date="1748433600">- Update to 8.14.0
  - mqtt: Send ping at upkeep interval
  - schannel: Handle pkcs12 client certificates containing CA certificates
  - TLS: Add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: Import v2025.04.20 script and documentation
  - websocket: Add option to disable auto-pong reply
  - _SEEALSO.md: Remove spaces around command and man page section
  - asny-thrdd: Fix detach from running thread
  - asnyc-thrdd: Explain how this is okay with a comment
  - async resolver code improvements
  - async-threaded resolver: Use ref counter
  - async: DoH improvements
  - autotools: Detect 'wolfSSL_set_quic_use_legacy_code' like cmake does
  - autotools: Install shell completion files on cross build
  - aws-sigv4: Allow a blank string
  - build: Check required rustls-ffi version
  - build: Enable gcc-12/13+, clang-10+ picky warnings
  - build: Enable gcc-15 picky warnings
  - certs: Drop unused 'default_bits' from '.prm' files
  - cf-https-connect: Use the passed-in dns struct pointer
  - cf-socket: Fix FTP accept connect
  - cfilters: Remove assert
  - cmake/FindNGTCP2: Simplify multi-pkg-config detection
  - cmake: Append picky warnings to 'CMAKE_REQUIRED_FLAGS' as string
  - cmake: Avoid 'target is imported but not globally visible' when consuming
    libcurl with old cmake
  - cmake: Do not install 'mk-ca-bundle' script and manpage
  - cmake: Enable '-Wall' for MSVC when 'PICKY_COMPILER=ON'
  - cmake: Extend integration tests
  - cmake: Fix 'fish' install directory detection via 'pkg-config'
  - cmake: Fix nghttp3 static linking with 'USE_OPENSSL_QUIC=ON'
  - cmake: Fix option() and mark_as_advanced() mixed order
  - cmake: Fix shell completion install when just one flavour is enabled
  - cmake: Honour individual picky option overrides found in 'CMAKE_C_FLAGS'
  - cmake: Install shell completions for cross-builds
  - cmake: Link 'crypt32' for OpenSSL feature detection
  - cmake: Merge 'CURL_WERROR' logic into 'PickyWarnings.cmake'
  - cmake: Prefer 'COMPILE_OPTIONS' over 'CMAKE_C_FLAGS' for custom C options
  - cmake: Quotes, whitespace, use 'VERSION_GREATER_EQUAL'
  - cmake: Revert 'CURL_LTO' behaviour for multi-config generators
  - cmake: Set 'BUILDING_LIBCURL' directly for unit test targets
  - cmake: Stop deleting '-W&lt;n&gt;' from 'CMAKE_C_FLAGS' (MSVC)
  - cmake: Tidy up and document feature detections in dependencies
  - cmake: Use 'CMAKE_COMPILE_WARNING_AS_ERROR' if available
  - cmake: Use 'INCLUDE_DIRECTORIES' prop to specify local header dirs
  - cmake: Use 'LIB_NAME' in 'curl-config.cmake.in'
  - cmake: Use absolute paths for completion targets
  - cmake: Use the 'LINK_OPTIONS' property with CMake 3.13+
  - configure: Catch asking for double resolver without https-rr
  - configure: Fix --disable-rt
  - configure: Restore link checks
  - configure: Suppress command not found for brew
  - conncache: Make Curl_cpool_init return void
  - connect: Shutdown timer fix
  - content_encoding: Transfer-Encoding parser improvements
  - CONTRIBUTE: Add project guidelines for AI use
  - contrithanks.sh: Drop set -e
  - cpool/cshutdown: Force close connections under pressure
  - curl: Fix memory leak when -h is used in config file
  - curl: Only warn once for --manual in manual-disabled build
  - curl_get_line: Handle lines ending on the buffer boundary
  - curl_krb5: Only use functions if FTP is still enabled
  - curl_multibyte: Fix up low-level calls, include in unity builds
  - curl_osslq: Remove a leftover debug fprintf() call
  - curl_url_get.md: Don't call it normalized
  - curl_version_info.md: Clarify ssl_version for MultiSSL
  - CURLMOPT_TIMERFUNCTION.md: Correct the example
  - CURLOPT_ERRORBUFFER.md: Buffer is read only after curl takes ownership
  - CURLOPT_FOLLOWLOCATION.md: Switch to GET =&gt; no body
  - CURLOPT_READFUNCTION.md: Mention the seek callback
  - CURLOPT_XFERINFOFUNCTION.md: Fix the callback return type in example
  - curlx: Move the docs to docs/internals/
  - DEPRECATE.md: Drop support for VS2008
  - DEPRECATE.md: Drop Windows CE support
  - dist: Drop duplicate entry from 'CMAKE_DIST'
  - dns_entry: Move from conn to data-&gt;state
  - Dockerfile: Update debian:bookworm-slim Docker digest to 90522ee
  - docs/INSTALL.md: Drop reference to removed configure option
  - docs/libcurl: Fix type and prototype problems in examples
  - docs/libcurl: Make examples build with picky compiler options
  - docs/libcurl: Mention sensitive data/headers
  - docs: Add missing return statement in examples
  - docs: Fix incorrect shell substitution in docker run example command
  - docs: Fix typo in retry.md
  - docs: Update distros links
  - doh: httpsrr fix
  - doh: Make sure CURLOPT_PROTOCOLS is set with a "long" arg
  - doh: Reduce the DNS request buffer size
  - easy_reset: Fix dohfor_mid member
  - ECH: Reference the OpenSSL ECH feature branch
  - etag-save.md: Mention how using both options is a good idea
  - eventfd: Fix feature guards
  - formdata: Clean-ups
  - ftp: Fix bug in failed init
  - ftp: Fix race in upload handling
  - ftplistparser: Add two overflow preventions
  - ftplistparser: Split up into more functions
  - generate.bat: Exclude curlinfo.c from legacy VS projects
  - genserv.pl: Fail with a message if 'openssl' is missing or failing
  - headers: Enforce a max number of response header to accept
  - headers: Set an error message on illegal response headers
  - hostip: Fix build without threaded-resolver and without DoH
  - hostip: Show the correct name on proxy resolve error
  - http2: Fix stream window size after unpausing
  - HTTP3.md: Fix incorrect variable placeholders
  - http: Fix a build error when all auths are disabled
  - http: Fix HTTP/2 handling of TE request header using "trailers"
  - http: In alt-svc negotiation only allow supported HTTP versions
  - http_aws_sigv4: Add additional verbose log statements
  - http_aws_sigv4: Improve sigv4 url encoding and canonicalization
  - http_chunks: Narrow variable scope for 'trlen'
  - http_negotiate: Fix non-SSL build with GSSAPI
  - https-connect: Fix httpsrr target check
  - HTTPSRR.md: Clarify somewhat
  - if2ip: Build the function also if FTP is present
  - imap: Remove redundant condition
  - INSTALL-CMAKE.md: Fix typo
  - INSTALL.md: Update the minimal libcurl size example
  - KNOWN_BUGS: Fix link in sivg4 issue 16.3
  - lib/src/docs/test: Improve curl_easy_setopt() calls
  - lib1560: Use hex notation, drop non-ASCII exception
  - lib3026: Drop DLL pre-load perf mitigation for old mingw
  - lib: Add const to clientwriter tables
  - lib: Drop curlx_getpid, use fake pid in SMB
  - lib: Include files using known path
  - lib: Make Curl_easyopts const
  - lib: Unify conversions to/from hex
  - libcurl-tutorial.md: Fix read callback explanation
  - libssh: Add NULL check for Curl_meta_get()
  - libssh: Fix memory leak
  - libssh: Remove a condition that always equals false
  - libtest/first: Stop defining MEMDEBUG_NODEFINES
  - libtests: Define CURL_DISABLE_DEPRECATION first
  - make: Clean tests better
  - mbedtls: TLS 1.3 is max when mbedtls has 1.3 support
  - metahash: Add asserts to help analyzers
  - mk-ca-bundle.pl: Follow redirects
  - mk-ca-bundle: Switch URLs to GitHub versions
  - mkhelp: Fix to not generate a line-ending space in some cases
  - mqtt: Use conn/easy meta hash
  - multi: Do transfer book keeping using mid
  - multi: init_do(): Check result
  - netrc: Avoid NULL deref on weird input
  - netrc: Avoid strdup NULL
  - netrc: Deal with null token better
  - ngtcp2: Clarify ignoring of result
  - openssl-quic: Avoid potential '-Wnull-dereference', add assert
  - openssl-quic: Fix printf mask
  - openssl-quic: Fix shutdown when stream not open
  - openssl: Enable builds for *both* engines and providers
  - openssl: Set the cipher string before doing private cert
  - parsedate: Provide Curl_wkday also for GnuTLS builds
  - processhelp.pm: Always call 'taskkill' with '-f' (force)
  - processhelp.pm: Avoid potential endless loop, log more (Windows)
  - progress: Avoid integer overflow when gathering total transfer size
  - pytest tls: Extend coverage (fixes WolfSSL cert validation, CVE-2025-4947)
  - pytest-xdist: pytest in parallel
  - pytest: Add pinnedpubkey test cases (fixes WolfSSL pinning, CVE-2025-5025)
  - pytest: Give parameterised tests better ids for read- and parsability
  - pytest: Make test_07_22 more lenient to exit codes
  - quic: No local idle connection timeout, ngtcp2 keep-alive
  - rand: Update comment on Curl_rand_bytes weak random
  - RELEASE-PROCEDURE.md: Release candidate git tagging explained
  - rtsp: Remove redundant condition
  - runtests: Add retry option to reduce flakiness
  - runtests: Fix indentation
  - runtests: Recognize lowercase 'windows' in 'curl -V'
  - runtests: Remove server verification after start
  - runtests: Split 'SSH_PWD' into 'SCP_PWD' and 'SFTP_PWD', and more
  - rustls: Make max size of cert and key reasonable
  - sasl: Give help when unable to select AUTH
  - scripts: completion.pl: Sort the completion file for all shells
  - scripts: Drop unused import, formatting
  - scripts: Fix --opts-dir help in completion.pl
  - scripts: Fix perl indentation, whitespace, semicolons
  - sectransp: Fix building for macOS Sierra and older
  - setopt: Provide info for CURLE_BAD_FUNCTION_ARGUMENT
  - smb: Avoid integer overflow on weird input date
  - socket: Use accept4 when available
  - socketpair: Support pipe2 where available
  - spacecheck.pl: Check for non-ASCII chars, fix fallouts
  - spacecheck.pl: Verify 'tests/data/test*' for non-ASCII chars
  - src: Drop strcase.[ch] from tool builds
  - src: Include memdebug.h consistently with angle brackets &lt;&gt;
  - src: Rename curlx_safefree to tool_safefree
  - test1173.pl: Whitelist some option-looking names that aren't options
  - test1658: Add unit test for the HTTPS RR decoder
  - test: Make unittest 1308 into a libtest
  - tests/ech_tests.sh: Sync shebang with rest of bash scripts
  - tests/FILEFORMAT.md: Clarify %hex[] formatting
  - tests/FILEFORMAT.md: Document the aws feature
  - tests/README.md: Document --test-duphandle
  - tests/README.md: List the openssl tool among the prerequisites
  - tests/server/dnsd: Basic DNS server for test suite
  - tests/server: Check for 'stream != NULL' in mqttd
  - tests/server: Fix typo in comment
  - tests/server: Stop using libcurl string comparisons
  - tests/server: Stop using libcurl's printf functions
  - tests/serverhelp: Remove last remnants of http-pipe server
  - tests/tunit: Make a separate directory for tool-based unit tests
  - tests: Add aws feature to the related tests
  - tests: Add https-mtls server to force client auth
  - tests: Fix some test tag mismatches
  - tests: Mark ipfs tests to require ipfs
  - tests: Move a boolean variable out of the path section
  - tests: Prefer '--insecure' over '-k'
  - tests: Provide all non-ascii data hex encoded
  - tests: Remove some unused test case sections
  - tests: Require IPv6 for 1265, 1324, 2086
  - tests: Separate tunit tests from unit tests more
  - tests: Stop using libcurl's strdup
  - tests: Unify test case keywords
  - tests: Use a more portable null device path
  - TODO: Remove "nicer lacking perl message"
  - tool_cb_write.c: Handle EINTR on flush
  - tool_getparam: Clear argument only when needed
  - tool_operate: Make retrycheck() a separate function
  - tool_operate: When retrying, only truncate regular files
  - tool_paramhlp: Avoid integer overflow in secs2ms()
  - tool_parsecfg: Make get_line handle lines ending on the buffer boundary
  - typecheck-gcc.h: Fix the typechecks
  - urlapi: Redirecting to "" is considered fine
  - urlapi: Remove unneeded guards around PUNY2IDN
  - urldata: Remove the unused struct field 'hide_progress'
  - VERSIONS: List all past releases
  - vquic: Consistent name for the stream struct across backends
  - vquic: Init for every call to recvmsg
  - vtls: Avoid NULL deref on bad PEM input
  - vtls: Fix build with ssl but without http
  - VULN-DISCLOSURE-POLICY: Use of weak algos
  - winbuild: Add the deprecation warning to the README
  - winbuild: curl_get_line is not used for tool builds
  - windows: Fix builds targeting WinXP, test it in CI
  - wolfssl: Fix to enable ALPN when available
  - ws: Fix the header replace check
  - ws: Store protocol context as connection meta data</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.1.cf" date="1748520000">- Fix regression: curl_multi_add_handle() returning OOM when using more than
  400 handles (GH#17475)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.1-1.0.cf" date="1749038400">- Update to 8.14.1
  - asyn-thrdd: Fix clean-up when RR fails due to OOM
  - autotools: Recognize more Linux targets when setting '-D_GNU_SOURCE'
  - BUG-BOUNTY.md: Mention the medium bounty amount in 2025
  - cmake: Fix missed version number for multi-pkg-config detections
  - cmdline-docs: Mention HTTP resumed uploads to be shaky
  - curl: make -N handled correctly
  - curl: Upload from '.' fix
  - dllmain: Exclude from Cygwin builds
  - docs/tests: Remove mention of hyper
  - docs: Fix typos
  - ftp: Fix teardown of DATA connection in done
  - http: Fail early when rewind of input failed when following redirects
  - license: Update some copyright links to curl.se
  - memanalyze.pl: Fix getaddrinfo/freeaddrinfo checks
  - misc: Fix spelling
  - misc: We write *an* IPv6 address
  - multi: Fix add_handle resizing
  - spelling: 'a' vs. 'an'
  - spelling: Call it null-terminate consistently
  - test1510: Fix expectation
  - tests: Await portfile to be complete
  - tests: Fix checks for https-mtls proto
  - tests: Improve server start reliability
  - tests: Move test docs into /docs
  - tests: Re-enable 1510, document heimdal memleak
  - tests: Test mtls also w/ clientAuth EKU only
  - tests: Test mtls with --insecure
  - tls BIOs: Handle BIO_CTRL_EOF correctly
  - tool_getparam: Make --no-anyauth not be accepted
  - tool_getparam: Refactored, simplified
  - tool_getparam: Remove two nextarg NULL checks
  - VULN-DISCLOSURE-POLICY.md: The distros list wants ≤ 7 days embargo
  - wolfssl: Fix sending of early data
  - ws: Handle blocked sends better (CVE-2025-5399)
  - ws: Tests and fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-1.0.cf" date="1752667200">- Update to 8.15.0
  - TLS: Remove support for Secure Transport and BearSSL
  - altsvc: Accept 'clear' without semicolon as well
  - asyn-ares: Remove redundant NULL check
  - asyn-thrdd: Free the previous name before strdup'ing the new
  - autotools: Detect and link 'brotlicommon' library for brotli
  - autotools: Drop '$top_builddir/src' from src header path
  - autotools: Drop headers from src mk-unity rules (fixup)
  - autotools: Drop no longer necessary '--srcdir' unity options
  - autotools: Drop redundant 'Makefile.inc' from 'EXTRA_DIST' in src
  - autotools: Simplify configuration in tests, examples
  - bufq: Change read/write signatures
  - bufq: Remove the unused Curl_bufq_unwrite function
  - build: Assume 'sys/socket.h', 'sys/time.h' on non-Windows (as in 'curl/curl.h')
  - build: Drop 'HAVE_SYS_SOCKET_H' and 'HAVE_SYS_TIME_H' macros
  - build: Drop explicit curlx from hdr paths, refer headers with 'curlx/' prefix
  - build: Drop unused variables in tests
  - build: Fix libcurltool with cmake and tunits, related tidy-ups
  - build: Split '.c' and '.h' file lists in tests
  - build: Stop checking for 'sys/stat.h'
  - build: stubgss tidy-ups (in tests)
  - build: Sync build scripts between client/libtest
  - build: Tidy up 'Makefile.inc' use in lib and src
  - build: Tidy up header paths, use srcdir where possible
  - cf-socket: Make socket data_pending a no-op
  - checksrc-all: Rewrite in Perl, remove 'checksrc.bat'
  - checksrc: Reduce exceptions, apply again to curlx
  - cmake/FindGSS: Fix processing C header path options
  - cmake/FindGSS: Initialize result variables
  - cmake: 'curl_add_clang_tidy_test_target' tidy-ups
  - cmake: Build 'stubgss' library for libtests to match autotools
  - cmake: Check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
  - cmake: Configure c-ares header directory in project root (was: lib)
  - cmake: Document OpenSSL and ngtcp2 crypto lib custom variables
  - cmake: Drop never-propagated C macros
  - cmake: Drop passing redundant 'CURL_STATICLIB' in examples and clients
  - cmake: Drop redundant macro from test clients
  - cmake: Drop reference to future variable
  - cmake: Enable soversion by default for OpenHarmony OS
  - cmake: Fix 'curl_add_clang_tidy_test_target' when no '-D' option
  - cmake: Fix generator expression in docs/examples
  - cmake: Gather options recursively in 'curl_add_clang_tidy_test_target'
  - cmake: Make docs depend on support files
  - cmake: Move 'OUTPUT' argument in the 'add_custom_command()' line
  - cmake: Omit clang-tidy on internal libs curlu and curltool
  - cmake: Replace 'cmakelint' with 'cmake-lint' from 'cmakelang', fix issues
  - cmake: Replace the way clang-tidy verifies tests, fix issues found
  - cmake: Simplify handling generated 'lib1521.c' in libtests
  - cmake: Sync 'target_link_libraries()' order in tests more
  - cmake: Sync tests scripts by using the variable 'BUNDLE'
  - cmake: Sync tests scripts with each other and autotools (more)
  - cmake: Use 'target_link_options()' when available
  - config-win32: Fix default targets, shorten macro logic
  - configure: Order LDAP after the SSL libraries
  - connect: Drop unused struct member
  - connection: Clarify 'transport'
  - connection: Eliminate member 'remote_addr'
  - curl-config: Fix whitespace in usage text
  - curl.h: Make CURL_IPRESOLVE_* symbols defined as longs
  - curl.h: Make CURLSSLOPT_* symbols defined as longs
  - curl.h: Remove the "RESERVED" error codes
  - curl: Implement non-blocking STDIN read on Windows
  - curl: Improve non-blocking STDIN performance
  - curl: Remove the global argument from many functions
  - curl: Unify pointer names to global config
  - curl_get_line: Make sure lines end with newline
  - curl_memory.h: Fix to undefine 'accept4'
  - curl_path: Make SFTP handle a path like /~ properly
  - curlinfo: Provide the 'digest' feature
  - CURLSHOPT_SHARE.md: Mention multi-threading requires callbacks
  - DEPRECATE.md: Add VS2005 removal to the list
  - digest: Fix build with disabled digest auth
  - DISTROS: Update NixOS link
  - docs,tests: Fix english grammar "allow to" -&gt; "allow &lt;something&gt; to"
  - docs/CONTRIBUTE: Fix broken link
  - docs/examples: Add ftp-delete.c
  - docs: Beef up examples/websocket.c
  - docs: Fix broken link in CODE_REVIEW.md
  - docs: Fix broken link in INSTALL.md
  - docs: Fix docs for CURLOPT_PREQUOTE after #17616
  - docs: Fix documentation of connect_only 2
  - docs: Fix two typos
  - docs: Mention that the netrc file works without port numbers
  - docs: Mention the as-is concept generically
  - docs: Note SSLS-EXPORT feature in -ssl-sessions doc
  - docs: Reflect that delimiter-separated capath is only OpenSSL
  - docs: Sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
  - docs: Warn about lifetime in CURLOPT_CLOSESOCKET*
  - easy: Fix comment-documentation
  - easygetopt: Fix curl logo in header comment
  - firefox-db2pem: Avoid use of eval in script
  - ftp: Fix prequotes for a directory in URL
  - ftplistparser: Split parse_unix into sub-functions
  - h2_serverpush: Fix file handle leaks reported by clang-tidy
  - h3: Fix query of concurrent streams
  - http/3: Report handshake with version and cipher as for TCP connections
  - http2: Do not delay RST send on aborted transfer
  - http2: Fix var types in is_alive() implementations
  - http: Explicitly ignore parsing errors for Retry-After
  - http: Fix build with cookies and HSTS disabled
  - http_ntlm: Protect against null deref
  - http_ntlm: Remove unreachable code
  - INSTALL.md: Cygwin details and add source code link
  - ldap: Avoid automake caching issues with LDAP library names
  - ldap: If ldap-lib is sufficient, add it to LIBS
  - ldap: Initial support for --with-ldap option
  - lib2082: Drop 'typedef struct'
  - lib: Address singleuse issues
  - lib: Avoid reusing unclean connection
  - lib: Drop two interim macros in favor of native libcurl API calls
  - lib: Fix unused parameter/function compiler warnings
  - lib: Make 'CURLX_SET_BINMODE()' and use it
  - lib: Make 'curlx_wait_ms()' and use it
  - lib: Replace scache no-op macros with '#ifdef'
  - lib: Stop 'time()' debug overrides at the end of source in altsvc, hsts
  - lib: Unify recv/send function signatures
  - libcurl-env.md: Drop LOGNAME, USER and NTLMUSER
  - libcurl.m4: Fix indentation
  - libssh2: Remove use of 'initialised' for clean-up
  - libssh: De-complex myssh_statemach_act()
  - libssh: Fix readdir issues
  - libtests: Make tests 1503, 1504, 1505 use the 1502 binary
  - libtests: More header tidy-ups
  - libtests: Stop building the same source multiple times
  - memdebug.h: #undef 'fclose' before defining it
  - memdebug.h: Eliminate global macro 'CURL_MT_LOGFNAME_BUFSIZE'
  - memdebug: Include in unity batch
  - memory: Stop overriding unused 'wcsdup()'/'_wcsdup()' system functions
  - memory: Tidy up '_tcsdup()' override
  - misc: Fix typos
  - mk-lib1521: Replace 'printf' with 'curl_mprintf'
  - multi: Add dirty bitset
  - multi: Do not expire a blocked transfer
  - multi: Fix polling with pending input
  - multi: Remove careful bounds check as coverity says it is not needed
  - multi: xfer table/bitset, handle limits
  - ngtcp2: Fix coverity warning about result handling
  - openssl: Enable readahead
  - openssl: Error on SSL_ERROR_SYSCALL
  - openssl: Fix handling of buffered data
  - openssl: Fix openssl engine use
  - openssl: Fix pkcs11 provider available check
  - os400: Upgrade ILE/RPG bindings with latest definitions
  - pingpong: On disconnect, check for unflushed pingpong state
  - projects/build-openssl.bat: Remove
  - pytest: test_07_70, weaken early data check
  - pytest: Adapt for runs with openssl-1.1.1
  - pytest: Disable test_07_37 and test_07_36 with openssl's quic
  - quic: Implement CURLINFO_TLS_SSL_PTR
  - RELEASE-PROCEDURE.md: Update docs/VERSIONS
  - runtests.pl: Fix sprintf() using one too many %s
  - runtests: Fix 'LD_PRELOAD' detection for cmake-built curl binaries
  - runtests: Support memory-limits per test
  - rustls: Apply memory function overrides, fixing an ECH buffer free
  - rustls: Don't try printing the not provided file
  - schannel: Allow partial chains for manual peer verification
  - schannel: Drop Windows 2000 compatibility logic
  - scorecard: Flame graphs and documentation
  - SCP/SFTP: Avoid busy loop after EAGAIN
  - scripts: Fix to quote the copyright email address
  - socks: Fix query when filter context is null
  - system.h: Remove some macros
  - test1117: Reduce write delays
  - test1175: Fix to run, and fix documentation issues detected
  - test1222: Fix for out-of-tree and no-libcurl-manual builds
  - test1499, 1599: use '%LOGDIR'
  - test1499: Verify two chunked responses on reused connection
  - test1596: Let test pass after year 2036
  - test1706: Pass include directory to 'managen' for out-of-tree builds
  - tests/client: Drop autotools logic no longer necessary
  - tests/client: Use 'curl_mfprintf()'
  - tests/dnsd: Read config from file
  - tests/http/clients: Drop hack and use 'curl_setup.h' again
  - tests/http/clients: Move to tests/client
  - tests/http/requirements: Remove multipart
  - tests/libtest: Call 'curlx_now_init()' for unit 1399, 2600 (Windows)
  - tests/libtest: Drop 'TEST_HANG_TIMEOUT' redefinition hack
  - tests/libtest: Drop a checksrc exception
  - tests/libtest: Use 'curltime' from curlx
  - tests/server/util.c: Include netinet/in6.h
  - tests/server: De-dupe/merge three 'sockdaemon()' clones into one
  - tests/server: Drop 'memdebug.h'
  - tests/server: Make all global vars/funcs static
  - tests/server: Move memory init to 'memptr.c'
  - tests/servers.pm: Add more ways to figure out current user
  - tests: Always make bundles, adapt build and tests
  - tests: Bundle http clients, de-dupe, enable for MSVC
  - tests: Constify, make consts static
  - tests: Drop 'BUNDLE_SRC' variable
  - tests: Drop mk-bundle exceptions
  - tests: Drop unused or redundant includes
  - tests: Drop useless "nodist_SOURCES" assignments
  - tests: Fail torture if !valgrind&amp;threaded resolver
  - tests: Fix 1301, 1308 to fail on error
  - tests: Fix 'BUNDLE' variable references in 'Makefile.am'
  - tests: Make all names &lt; 75 characters long
  - tests: Make individual test sources compile cleanly
  - tests: Make sshserver less verbose
  - tests: Move 'curlcheck.h' to libtest as 'unitcheck.h'
  - tests: Move GSS-API dynamic stub into debug-mode libcurl
  - tests: torture: Don't duplicate valgrind command
  - tests: Use %b64[] to base64 data
  - tests: Use %b64[] to base64 data in 2056, 2057
  - tftpd: Use 'CURLMIN()' macro
  - tidy-up: Replace '&lt;memdebug.h&gt;' with '"memdebug.h"' (src, units)
  - tls: Remove Curl_ssl false_start
  - tool1621: Drop unused internal libcurl headers
  - tool_getparam: Fix --ftp-pasv
  - tool_operate: Fix return code when --retry is used but not triggered
  - tool_paramhelp: Fix language in comments
  - top-complexity: Lower max allowed complexity threshold to 90
  - unit tests: Extract "private" prototypes at build time
  - unit1302: Expand the base64 encode/decode tests
  - url: Fix connection lifetime checks
  - url: Fix NULL deref with bad password when no user is provided
  - urlapi: Simplify and split into sub functions
  - urlapi: Use uppercase hex encoding
  - vauth: Move auth structs to conn meta data
  - vtls: Change send/recv signatures of tls backends
  - vtls: Fix a copy-pasted early data comment typo
  - vtls: Log rustls negotiated KEX group name
  - vtls: Prefer ciphersuite to cipher in msgs
  - vtls: Prefer rustls-ffi ciphersuite name API
  - VULN-DISCLOSURE-POLICY.md: Fix typos
  - VULN-DISCLOSURE-POLICY: All reports should be disclosed
  - VULN-DISCLOSURE-POLICY: Exclude not installed software
  - VULN-DISCLOSURE-POLICY: Minor language polish
  - warnless: Drop parts of the 'read'/'write' preprocessor hack (Windows)
  - warnless: Replace 'read()'/'write()' wrapper functions with macros (Windows)
  - windows: Drop redundant 'curl_wcsdup_callback' callback
  - windows: Fixup 'fopen()' in 'CURLDEBUG' builds
  - windows: Reduce/stop loading DLLs at runtime
  - wolfssl: Add support for ML_KEM hybrids
  - ws: Drop redundant 'CURL_EXTERN' from function definitions
  - xfer: Manage pause bits</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.0.cf" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.1.cf" date="1753617600">- Fix dependency on CA bundle when we don't use the old one at
  /etc/pki/tls/certs/ca-bundle.crt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
</package>
<package pkgid="4c3d2260d8516b45b8a07af6445d18329f3c8ebc3939b58d10b15cf94124e3fe" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="8.17.0" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12.1-1.0.cf" date="1739448000">- Update to 8.12.1
  - All: Remove FIXME and TODO comments
  - asyn-thread: Fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: Fix HTTPS RR crash
  - asyn-thread: Fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: Survive a c-ares channel set to NULL
  - build: Add tool_hugehelp.c into IBMi build
  - checksrc.pl: Warn on FIXME/TODO comments
  - cmake/Find: Set '&lt;Modulename&gt;_FOUND' for compatibility when found via 'pkg-config'
  - cmake: Add integration tests, run them in CI
  - cmake: Always reference OpenSSL and ZLIB via imported targets
  - cmake: Avoid unnecessary '-L' for implicit link dirs
  - cmake: Drop 'LDAP_DEPRECATED=1' macro, to sync with autotools
  - cmake: Fix 'HAVE_GETHOSTBYNAME_R_*' detections with 'CURL_WERROR=ON'
  - cmake: Fix to detect 'HAVE_OPENSSL_SRP' in MSVC UWP builds
  - cmake: Fix/add missing feature detections for Windows/MS-DOS
  - cmake: Initialize variables where missing
  - cmake: Library order fixes for picky linkers (e.g. binutils 'ld')
  - cmake: Normalize before matching paths with syspaths
  - cmake: Respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: Respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - cmake: Save a line with 'CMAKE_C_IMPLICIT_LINK_DIRECTORIES' exclusion
  - cmake: Tidy up string append and list prepend syntax
  - configure/cmake: Check for realpath
  - configure/cmake: Set asyn-rr as feature only if httpsrr is enabled
  - content_encoding: #error on too old zlib
  - curl_global_sslset.md: Add SSL backend names
  - CURLOPT_SSH_KNOWNHOSTS.md: Strongly recommend using this
  - CURLSHOPT_SHARE.md: Adjust for the new SSL session cache
  - docs: Better explain multi-part byte range behaviour
  - docs: Use valid example domain names
  - generate.bat: Remove curl_get_line.c from the curlx file list
  - header.md: Mention 'Authorization:' and 'Cookie:' special treatment
  - imap: TLS upgrade fix
  - INTERNALS: Fix c-ares, as we actually support 1.6.0 or later
  - ldap: Drop support for legacy Novell LDAP SDK
  - lib: include necessary headers for 'inet_ntop'/'inet_pton'
  - lib: Silence LibreSSL collision warning on non-MSVC Windows
  - libssh2: Comparison is always true because rc &lt;= -1
  - libssh2: Raise lowest supported version to 1.2.8
  - libssh: Drop support for libssh older than 0.9.0
  - libssh: Silence '-Wconversion' with a cast (Windows 32-bit)
  - netrc: return code clean-up, fix missing file error
  - openssl-quic: Ignore ciphers for h3
  - openssl: Fix out of scope variables in goto
  - pop3: TLS upgrade fix
  - runtests: Fix the disabling of the memory tracking
  - runtests: Quote commands to support paths with spaces
  - scache: Add magic checks
  - smb: Silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - SPONSORS.md: Clarify that we don't promise goods or services
  - test1516: Avoid failure due to spaces in path
  - test2080: Simplify, avoid the null byte
  - tests: Fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
  - tidy-up: Make per-file 'ARRAYSIZE' macros global as 'CURL_ARRAYSIZE'
  - tool_cfgable: Sort struct fields by size, use bitfields for booleans
  - tool_getparam: Add "TLS required" flag for each such option
  - tool_progress: Fix percent output of large parallel transfers
  - tool_ssls: Switch to tool-specific get_line function
  - verbose.md: Mention how carriage-return might occur in headers
  - vquic: Make the "disable GSO" use infof, not failf
  - vtls: Fix multissl-init
  - vtsl: Eliminate 'data-&gt;state.ssl_scache'
  - wakeup_write: Make sure the eventfd write sends eight bytes
  - wolfssl: Silence compiler warning (MSVC 2019), simplify existing
- Use libssh2 rather than libssh for Fedora 28 and 29 builds since their
  versions of libssh are too old for curl now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.13.0-1.0.cf" date="1743595200">- Update to 8.13.0
  - curl: Add write-out variable 'tls_earlydata'
  - curl: Make --url support a file with URLs
  - gnutls: Set priority via --ciphers
  - IMAP: Add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: Add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: Add support for TLSv1.3 early data
  - rustls: Add support for CERTINFO
  - rustls: Add support for SSLKEYLOGFILE
  - rustls: Support ECH with DoH lookup for config
  - rustls: Support native platform verifier
  - var: Add a '64dec' function that can base64 decode a string
  - wolfssl: TLS early data support
  - addrinfo: Add curl macro to avoid redefining foreign symbols
  - asyn-thread: Avoid the separate 'struct resdata' alloc
  - asyn-thread: Avoid the separate curl_mutex_t alloc
  - asyn-thread: Do not allocate thread_data separately
  - asyn-thread: Remove 'status' from struct Curl_async
  - autotools: Fix 'dllmain.c' in unity builds
  - autotools: Fix 'libtest' bundle to depend on 'FIRSTFILES'
  - autotools: Use 'CURLDEBUG' to exclude TrackMemory code from unity
  - aws_sigv4: Cannot be used for proxy
  - aws_sigv4: Merge repeated headers in canonical request
  - aws_sigv4: Use strparse more for parsing
  - base64: Drop 'BUILDING_CURL' macro, always include in tests/server
  - build: Add Windows CE / CeGCC support, with CI jobs
  - build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls)
  - build: Do not apply curl debug macros to 'tests/server' by default
  - build: Drop unused 'getpart' tool
  - build: Enable -Wjump-misses-init for GCC 4.5+
  - build: Enable '-Wcast-qual', fix or silence compiler warnings
  - build: Fix compiler warnings in feature detections
  - build: Replace Curl_ prefix with curlx_ for functions used in servers
  - build: Set '-O3' and tune WinCE in CI, fix 'getpart', 'vtls_scache' fallouts
  - build: Set 'HAVE_STDINT_H' if 'stdint.h' is available
  - build: Set 'HAVE_WRITABLE_ARGV' for Apple cross-builds
  - build: Silence bogus '-Wconversion' warnings with gcc 5.1-5.4
  - build: Silence mingw32ce C99 format warnings, simplify CI
  - build: Tidy-ups around 'inet_pton'
  - c-ares httpsrr: Fix ifdef
  - c-ares: Error out for unsupported versions, drop unused macros
  - ca-native.md: Sync with CURLSSLOPT_NATIVE_CA
  - cf-socket: Deduplicate Windows Vista detection
  - cf-socket: Remove empty switch
  - client writer: Handle pause before decoding
  - cmake: 'CURL_LIBDIRS' improvements (upstreamed from vcpkg)
  - cmake: 'SHARE_LIB_OBJECT=ON' requires CMake 3.12 or newer
  - cmake: Add custom command scripts as dependencies where missing
  - cmake: Add pre-fill for Unix, enable in GHA/macos, verify pre-fills
  - cmake: Add shell completion support
  - cmake: Allow 'CURL_STATIC_CRT' with shared libcurl and no curl exe
  - cmake: Allow 'CURL_STATIC_CRT' with UCRT VS2015+ builds
  - cmake: Allow empty 'IMPORT_LIB_SUFFIX', add suffix collision detection
  - cmake: Avoid '-Wnonnull' warning in 'HAVE_FSETXATTR_5' detection
  - cmake: Disable HTTPS-proxy as a feature if proxy is disabled
  - cmake: Drop 'CURL_DISABLE_TESTS' option
  - cmake: Drop 'HAVE_C_FLAG_Wno_long_double' logic for ancient Apple gcc
  - cmake: Drop 'HAVE_IN_ADDR_T' from pre-fill too
  - cmake: Drop two stray TLS feature checks for wolfSSL
  - cmake: Exclude '-MP' for 'clang-cl' again
  - cmake: Fix 'HAVE_ATOMIC'/'HAVE_STDATOMIC' pre-fill for clang-cl
  - cmake: Fix clang-tidy builds to verify tests, fix fallouts
  - cmake: Fix detection pre-fills for iOS
  - cmake: Fix ECH detection in custom-patched OpenSSL
  - cmake: Fix typo in ECH config error msg
  - cmake: Hide empty 'MINGW64_VERSION' output for mingw32ce
  - cmake: Improve httpd detection for pytest
  - cmake: Mention 'insecure' in the debug build warning
  - cmake: Misc tidy-ups
  - cmake: Pre-fill known type sizes for Windows OSes
  - cmake: Replace CMAKE_COMPILER_IS_GNUCC with CMAKE_C_COMPILER_ID
  - cmake: Replace exec_program() with execute_process()
  - cmake: Restrict static CRT builds to static curl exe, test in CI
  - cmake: Sync cutoff version with autotools for picky option '-ftree-vrp'
  - cmake: Sync OpenSSL(-fork) feature checks with './configure'
  - cmake: Unity mode optimization for non-'CURLDEBUG' 'testdeps' targets
  - CODE_STYLE: Readability and banned functions
  - config-win32: Set 'HAVE_STDINT_H' where available
  - configure: Call the blocking resolver "blocking", not "default"
  - configure: Fix ECH detection with MultiSSL
  - configure: Silence compiler warnings in feature checks, drop duplicates
  - configure: Tidy up shell completion rules
  - configure: Use 'curl_cv_apple' variable
  - conn: Eliminate 'conn-&gt;now'
  - conn: Fix connection reuse when SSL is optional
  - conncache: Eliminate 'conn-&gt;destination_len' as premature optimization
  - contributors.sh: Lowercase 'github' for consistency
  - contrithanks.sh: Update docs/THANKS in place
  - cookie: Do prefix matching case-sensitively
  - cookie: Minor parser simplification
  - cookie: Simplify invalid_octets()
  - core: Stop redefining 'E*' macros on Windows, map 'EACCES', related fixes
  - curl.h: Change some enums to defines with L suffix
  - curl.h: Convert CURLUSESSL* names to defines
  - curl.h: Stop defining non-curl '__has_declspec_attribute'
  - curl.h: Switch 'CURL_HTTP_VERSION*' enums to long constants
  - curl/system.h: Drop leftover comment about 32 bit curl_off_t
  - curl: Add my_setopt_long() and _offt()
  - curl_msh3: Remove verify bypass from DEBUGBUILDs
  - curl_setup: Drop 'ERANGE' (for WinCE), no longer used
  - curl_setup_once: Drop 'E*' macro redefines unused (with winsock2)
  - curl_setup_once: Stop redefining 'ENAMETOOLONG' to winsock2 error code
  - curl_trc: Fix build with CURL_DISABLE_VERBOSE_STRINGS
  - curl_ws_recv.md: Expand a little on the fragments the API delivers
  - CURLMOPT_SOCKETFUNCTION.md: Add advice for socket callback invocation
  - CURLOPT_HTTPHEADER.md: Add comments to the example
  - CURLOPT_HTTPHEADER.md: Rephrases
  - curltime: Use libcurl time functions in src and tests/server
  - DISABLED: Add 313 for sectransp (move from GHA/macos)
  - docs/cmdline-opts: Use imperative form
  - docs: Adapt to removed --with-random
  - docs: Add FD_ZERO to curl_multi_fdset example
  - docs: Bump 'rustls' to 0.14.1
  - docs: Correct argument names and URL redirection
  - docs: Minor edits to please the new spellchecker regime
  - docs: Rework RUSTLS install instructions
  - docs: Unify HTTP version style in --help output
  - docs: Vulnerabilities in debug code are not eligible for a bounty
  - doh: Improve HTTPS RR svcparams parsing
  - doh: Remove wrong but unreachable exit path from doh_decode_rdata_name
  - dynbuf: Assert init on free
  - easy: Drop 'break' after 'return'
  - easy: Fix warning about possible comma misuse
  - eventfd: Allow use on all CPUs
  - examples: Prefer 'return' over 'exit()' (cont.)
  - ftp/sftp: strdup data info memory
  - ftp: Fix comment
  - gnutls: Fix connection state check on handshake
  - gnutls: Fix use of pkcs11 urls for keys/certs
  - gtls: Fix uninitialized variable
  - hash: Use single linked list for entries
  - hostip: Don't use alarm() for DoH resolves
  - hostip: Make CURLOPT_RESOLVE support replacing IPv6 addresses
  - http2: Add on_invalid_frame callback for error detection
  - http2: Detect session being closed on ingress handling
  - http2: Enhance error messages on Curl_dyn* upon receiving headers
  - http2: Fix stream assignemnt for pushes
  - http2: Reset stream on response header error
  - HTTP3.md: Only speak about minimal versions
  - http: Convert parsers to strparse
  - http: Fix NTLM info message typo
  - http: Fix the auth check
  - http: Make the RTSP version check stricter
  - http: Negotiation and room for alt-svc/https RR to navigate
  - http: Remove a HTTP method size restriction
  - http: Version negotiation
  - http_chunks: Replace a strofft call with curl_str_hex
  - https-rr: Implementation improvements
  - httpsrr: Fix port detection
  - httpsrr: Fix the HTTPS-RR threaded-resolver build combo
  - INFRASTRUCTURE.md: Add IRC and Matrix details
  - INSTALL-CMAKE.md: CMake usage updates
  - INSTALL-CMAKE.md: mention 'ZLIB_USE_STATIC_LIBS'
  - lib1156: Pass longs to 'curl_easy_setopt()'
  - lib1560: Test set path containing LR or CR
  - lib2302: Fix crash due to stack overflow on MSVC and clang Windows
  - lib696: Fix building on Windows in non-bundle mode
  - lib: Better optimized casecompare() and ncasecompare()
  - lib: Clear up CURLRES_ASYNCH vs. USE_CURL_ASYNC use
  - lib: Fix two curlx_strtoofft invokes
  - lib: Rename curlx_strtoofft to Curl_str_numblanks()
  - lib: Replace while(ISBLANK()) loops with Curl_str_passblanks()
  - lib: Simplify more white space loops
  - lib: strtoofft.h header cleanup
  - lib: Use Curl_str_* instead of strtok_r()
  - lib: Use Curl_str_number() for parsing decimal numbers
  - libssh2: Fix freeing of resources in disconnect
  - libssh2: Fix memory leak in 'SSH_SFTP_REALPATH' state
  - libssh2: Fix to ignore 'known_hosts' if SHA256 host public key is set
  - libssh2: Print user with verbose flag
  - libssh2: Show crypto backend in the verbose connect log
  - libssh: Fix freeing of resources in disconnect
  - libssh: Fix scp large file upload for 32-bit size_t systems
  - libtest/first.c: Remove the Test: stderr output for unity builds
  - libtest/libprereq.c: Set CURLOPT_FOLLOWLOCATION with a long
  - managen: Accept more markdown-quote-markers
  - managen: Correct the warning for un-escaped '&lt;' and '&gt;'
  - mbedtls: Re-enable an error check
  - memdebug.h: Avoid '-Wredundant-decls' with an extra guard
  - memdebug: Drop dynamic allocation from 'curl_dbg_log()'
  - mprintf: Switch three number parsers to use strparse
  - mqtt: Convert sendleftovers to dynbuf
  - msvc: Drop support for VS2005 and older
  - multi: Call protocol handler done() if PROTOCONNECT or later
  - multi: Event based rework
  - multi: Kill off remaining internal handles in curl_multi_cleanup
  - multi: Start the loop over when handles are removed
  - multi_ev: Fixes regarding connection shutdowns
  - ngtcp2: Do not iterate over multi handles
  - ntlm: Merge ntlm.h into ntlm.c
  - openssl-quic: Do not iterate over multi handles
  - openssl: Check return value of X509_get0_pubkey
  - openssl: Drop support for old OpenSSL/LibreSSL versions
  - openssl: Fix crash on missing cert password
  - openssl: Fix pkcs11 URI checking for key files
  - openssl: Remove bad 'goto's into other scope
  - prox/preproxy.md: Document argument within &lt;brackets&gt;
  - pytest: Test negotiate with http proxy
  - quiche: Do not iterate over multi handles
  - RELEASE-PROCEDURE.md: Explain release candidates
  - request: Clear sendbuf_hds_len when resetting request bufq
  - resolve: Fix building without Unix sockets and 'CURLDEBUG'
  - runtests: Accept 'CURL_DIRSUFFIX' without ending slash
  - runtests: Add feature-based filtering
  - runtests: Check and report if 'diff' tool is missing
  - runtests: Drop logic calling the 'handle' tool (Windows)
  - runtests: Drop recognizing 'winssl' as Schannel
  - runtests: Drop ref to unused external function
  - runtests: Fix bundled test invocation with '-g' option
  - runtests: Fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs
  - runtests: Fix test key format for libssh2 WinCNG (and others)
  - runtests: Generate certs dynamically, bump to EC-256, tidy up
  - runtests: Recognize AWS-LC as OpenSSL
  - runtests: Rewrite 'genserv.sh' in Perl
  - runtests: Support multi-target cmake, drop workarounds from CI
  - runtests: Support running tests under wine or qemu (cont.)
  - runtests: Support running tests under wine or qemu
  - runtests: Use 'setfacl' on Cygwin/MSYS, if present
  - rustls: Add ECH support with string ECH config
  - rustls: Cap maximum allowed CRL file size to 8MB
  - rustls: Support ECH GREASE
  - rustls: Use client cert and key if available
  - schannel: Deduplicate Windows Vista detection
  - schannel: Enable ALPN support under WINE 6.0+
  - schannel: Enable ALPN with MinGW, fix ALPN for UWP builds
  - schannel: Guard ALPN init code to ALPN builds
  - scripts/managen: Fix option 'single'
  - scripts/managen: Fix parsing of markdown code sections
  - scripts: Update completion.pl to parse options from docs
  - sectransp: Add support for HTTP/2 in gcc builds
  - sendf: Client reader line conversion: do not change data-&gt;state.infilesize
  - setopt: Illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: Remove unnecessary void pointer typecasts
  - setopt: Setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - shutdowns: Split shutdown handling from connection pool
  - socks: Remove bad assert from do_SOCKS5()
  - src: Avoid strdup on platforms not doing UTF-8 conversions
  - src: Clean-up ISBLANK vs. ISSPACE
  - src: Remove Curl_ prefix from tool-specific function
  - src: Remove final uses of Curl_ symbol prefixes in tool code
  - src: Replace strto[u][ld] with curlx_str_ parsers
  - ssh: Consider sftp quote commands case sensitive
  - sshserver.pl: Adjust 'AuthorizedKeysFile2' cutoff version
  - sshserver.pl: Use Perl 'chmod'
  - sshserver: Fix excluding obsolete client config lines
  - ssl session cache: Add exportable flag
  - SSLCERTS: List support for SSL_CERT_FILE and SSL_CERT_DIR
  - strparse: Make Curl_str_number() return error for no digits
  - strparse: Switch the API to work on 'const char *'
  - strparse: Switch to curl_off_t as base data type
  - test1022: Add support for rc releases
  - test1167: Catch #defines with extra whitespace
  - test313: Disable CRL test for Schannel due to lack of support and flakiness
  - test313: Disable via '&lt;features&gt;' for backends without CRL support
  - test489: Set output dir
  - test612: SCP 'rm' the uploaded remote file (not the local source), unignore in CI
  - test613: Make it pass on Windows, fix postprocess, unignore in CI
  - test615: Fix for Cygwin, unignore in CI
  - tests/certs: Clean up
  - tests/server: Drop unused 'base64.pl'
  - tests/server: Fix to check against winsock2 error codes on Windows
  - tests/server: Give global 'path' variable a more descriptive name
  - tests/server: Make the signal handler signal-safe
  - tests/server: Replace 'errno' with 'SOCKERRNO' in sockfilt, socksd, sws
  - tests/server: Replace 'strerror' with 'sstrerror' in socksd
  - tests/server: Support bundle binary
  - tests/server: Sync 'wait_ms()' with the libcurl implementation
  - tests/server: Use 'curlx_str_numblanks()' to avoid 'errno'
  - tests/servers.pm: Remove unused variable 'portrange'
  - tests: Build non-debug unit tests with autotools, run them
  - tests: Fix comment in lib533
  - tests: Fix enum/int confusion, fix autotools 'CFLAGS' for 'servers'
  - tests: Make sure 'commands.log' is generated in the correct logdir
  - tests: Mark tests 1631, 1632 flaky
  - tests: Reformat error messages to avoid tripping MSBuild
  - tests: Remove base64 encoded sections
  - tests: Remove unused variables
  - tests: Replace remaining non-ASCII bytes with hex markup
  - tftpd: Prefix TFTP protocol error 'E*' constants with 'TFTP_'
  - tidy-up: Align MSYS2/Cygwin codepaths, follow Cygwin 'MAX_PID' bump
  - tidy-up: Delete, comment or scope C macros reported unused
  - tidy-up: Drop unused 'CURL_INADDR_NONE' macro and 'in_addr_t' type
  - tidy-up: Use 'CURL_ARRAYSIZE()'
  - timediff: Fix comment for curlx_mstotv()
  - timediff: Remove unnecessary double typecast
  - tool_dirhie: Create dir hierarchy without strtok
  - tool_getparam: Clear sensitive arguments better
  - tool_getparam: Do parse_upload_flags without the alloc/free
  - tool_getparam: Parse --trace-config without strdup()/free()
  - tool_getparam: parse_header() without strtok
  - tool_operate: Change "1 retries" to "1 retry"
  - tool_operate: Fail SSH transfers without server auth
  - tool_operate: Fix pluralization of seconds
  - tool_operate: Remove unnecessary (long) typecasts
  - tool_paramhlp: Do --proto parsing without strtok
  - tool_parsecfg: Make my_get_line skip comments and newlines
  - tool_setopt: Reduce use of "code hiding" macros
  - url: Call protocol handler's disconnect in Curl_conn_free
  - urlapi: Fix redirect from file:// with query, and simplify
  - urlapi: Remove percent encoded dot sequences from the URL path
  - urlapi: Simplify junkscan
  - urldata: Remove 'hostname' from struct Curl_async
  - variable.md: Clarify 'trim' example
  - vquic: Obey IOV_MAX
  - vtls: Fix compiler warnings seen with gcc 7.3.0 and mbedTLS
  - winbuild: Reduce command-line length by dropping whitespace
  - windows: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - windows: Drop code and curl manifest targeting W2K and older
  - windows: Fix issues detected by clang-tidy, and some more
  - wolfssh: Fix freeing of resources in disconnect
  - wolfssh: Retrieve the error using wolfSSH_get_error
  - wolfssl: Fix CA certificate multiple location import
  - wolfssl: Fix unused variable warning
  - wolfssl: Warn if CA native import option is ignored
  - wolfssl: When using PQ KEM, use ML-KEM, not Kyber
  - ws: Corrected curlws_cont to reflect its documented purpose
  - ws: Fix and extend CURLWS_CONT handling
  - zlib: Bump minimum to 1.2.5.2 (was: 1.2.0.4)
- BR: openssl, needed for cert generation in test suite
- Drop "compat" build support in spec
- Drop legacy ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.0.cf" date="1748433600">- Update to 8.14.0
  - mqtt: Send ping at upkeep interval
  - schannel: Handle pkcs12 client certificates containing CA certificates
  - TLS: Add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: Import v2025.04.20 script and documentation
  - websocket: Add option to disable auto-pong reply
  - _SEEALSO.md: Remove spaces around command and man page section
  - asny-thrdd: Fix detach from running thread
  - asnyc-thrdd: Explain how this is okay with a comment
  - async resolver code improvements
  - async-threaded resolver: Use ref counter
  - async: DoH improvements
  - autotools: Detect 'wolfSSL_set_quic_use_legacy_code' like cmake does
  - autotools: Install shell completion files on cross build
  - aws-sigv4: Allow a blank string
  - build: Check required rustls-ffi version
  - build: Enable gcc-12/13+, clang-10+ picky warnings
  - build: Enable gcc-15 picky warnings
  - certs: Drop unused 'default_bits' from '.prm' files
  - cf-https-connect: Use the passed-in dns struct pointer
  - cf-socket: Fix FTP accept connect
  - cfilters: Remove assert
  - cmake/FindNGTCP2: Simplify multi-pkg-config detection
  - cmake: Append picky warnings to 'CMAKE_REQUIRED_FLAGS' as string
  - cmake: Avoid 'target is imported but not globally visible' when consuming
    libcurl with old cmake
  - cmake: Do not install 'mk-ca-bundle' script and manpage
  - cmake: Enable '-Wall' for MSVC when 'PICKY_COMPILER=ON'
  - cmake: Extend integration tests
  - cmake: Fix 'fish' install directory detection via 'pkg-config'
  - cmake: Fix nghttp3 static linking with 'USE_OPENSSL_QUIC=ON'
  - cmake: Fix option() and mark_as_advanced() mixed order
  - cmake: Fix shell completion install when just one flavour is enabled
  - cmake: Honour individual picky option overrides found in 'CMAKE_C_FLAGS'
  - cmake: Install shell completions for cross-builds
  - cmake: Link 'crypt32' for OpenSSL feature detection
  - cmake: Merge 'CURL_WERROR' logic into 'PickyWarnings.cmake'
  - cmake: Prefer 'COMPILE_OPTIONS' over 'CMAKE_C_FLAGS' for custom C options
  - cmake: Quotes, whitespace, use 'VERSION_GREATER_EQUAL'
  - cmake: Revert 'CURL_LTO' behaviour for multi-config generators
  - cmake: Set 'BUILDING_LIBCURL' directly for unit test targets
  - cmake: Stop deleting '-W&lt;n&gt;' from 'CMAKE_C_FLAGS' (MSVC)
  - cmake: Tidy up and document feature detections in dependencies
  - cmake: Use 'CMAKE_COMPILE_WARNING_AS_ERROR' if available
  - cmake: Use 'INCLUDE_DIRECTORIES' prop to specify local header dirs
  - cmake: Use 'LIB_NAME' in 'curl-config.cmake.in'
  - cmake: Use absolute paths for completion targets
  - cmake: Use the 'LINK_OPTIONS' property with CMake 3.13+
  - configure: Catch asking for double resolver without https-rr
  - configure: Fix --disable-rt
  - configure: Restore link checks
  - configure: Suppress command not found for brew
  - conncache: Make Curl_cpool_init return void
  - connect: Shutdown timer fix
  - content_encoding: Transfer-Encoding parser improvements
  - CONTRIBUTE: Add project guidelines for AI use
  - contrithanks.sh: Drop set -e
  - cpool/cshutdown: Force close connections under pressure
  - curl: Fix memory leak when -h is used in config file
  - curl: Only warn once for --manual in manual-disabled build
  - curl_get_line: Handle lines ending on the buffer boundary
  - curl_krb5: Only use functions if FTP is still enabled
  - curl_multibyte: Fix up low-level calls, include in unity builds
  - curl_osslq: Remove a leftover debug fprintf() call
  - curl_url_get.md: Don't call it normalized
  - curl_version_info.md: Clarify ssl_version for MultiSSL
  - CURLMOPT_TIMERFUNCTION.md: Correct the example
  - CURLOPT_ERRORBUFFER.md: Buffer is read only after curl takes ownership
  - CURLOPT_FOLLOWLOCATION.md: Switch to GET =&gt; no body
  - CURLOPT_READFUNCTION.md: Mention the seek callback
  - CURLOPT_XFERINFOFUNCTION.md: Fix the callback return type in example
  - curlx: Move the docs to docs/internals/
  - DEPRECATE.md: Drop support for VS2008
  - DEPRECATE.md: Drop Windows CE support
  - dist: Drop duplicate entry from 'CMAKE_DIST'
  - dns_entry: Move from conn to data-&gt;state
  - Dockerfile: Update debian:bookworm-slim Docker digest to 90522ee
  - docs/INSTALL.md: Drop reference to removed configure option
  - docs/libcurl: Fix type and prototype problems in examples
  - docs/libcurl: Make examples build with picky compiler options
  - docs/libcurl: Mention sensitive data/headers
  - docs: Add missing return statement in examples
  - docs: Fix incorrect shell substitution in docker run example command
  - docs: Fix typo in retry.md
  - docs: Update distros links
  - doh: httpsrr fix
  - doh: Make sure CURLOPT_PROTOCOLS is set with a "long" arg
  - doh: Reduce the DNS request buffer size
  - easy_reset: Fix dohfor_mid member
  - ECH: Reference the OpenSSL ECH feature branch
  - etag-save.md: Mention how using both options is a good idea
  - eventfd: Fix feature guards
  - formdata: Clean-ups
  - ftp: Fix bug in failed init
  - ftp: Fix race in upload handling
  - ftplistparser: Add two overflow preventions
  - ftplistparser: Split up into more functions
  - generate.bat: Exclude curlinfo.c from legacy VS projects
  - genserv.pl: Fail with a message if 'openssl' is missing or failing
  - headers: Enforce a max number of response header to accept
  - headers: Set an error message on illegal response headers
  - hostip: Fix build without threaded-resolver and without DoH
  - hostip: Show the correct name on proxy resolve error
  - http2: Fix stream window size after unpausing
  - HTTP3.md: Fix incorrect variable placeholders
  - http: Fix a build error when all auths are disabled
  - http: Fix HTTP/2 handling of TE request header using "trailers"
  - http: In alt-svc negotiation only allow supported HTTP versions
  - http_aws_sigv4: Add additional verbose log statements
  - http_aws_sigv4: Improve sigv4 url encoding and canonicalization
  - http_chunks: Narrow variable scope for 'trlen'
  - http_negotiate: Fix non-SSL build with GSSAPI
  - https-connect: Fix httpsrr target check
  - HTTPSRR.md: Clarify somewhat
  - if2ip: Build the function also if FTP is present
  - imap: Remove redundant condition
  - INSTALL-CMAKE.md: Fix typo
  - INSTALL.md: Update the minimal libcurl size example
  - KNOWN_BUGS: Fix link in sivg4 issue 16.3
  - lib/src/docs/test: Improve curl_easy_setopt() calls
  - lib1560: Use hex notation, drop non-ASCII exception
  - lib3026: Drop DLL pre-load perf mitigation for old mingw
  - lib: Add const to clientwriter tables
  - lib: Drop curlx_getpid, use fake pid in SMB
  - lib: Include files using known path
  - lib: Make Curl_easyopts const
  - lib: Unify conversions to/from hex
  - libcurl-tutorial.md: Fix read callback explanation
  - libssh: Add NULL check for Curl_meta_get()
  - libssh: Fix memory leak
  - libssh: Remove a condition that always equals false
  - libtest/first: Stop defining MEMDEBUG_NODEFINES
  - libtests: Define CURL_DISABLE_DEPRECATION first
  - make: Clean tests better
  - mbedtls: TLS 1.3 is max when mbedtls has 1.3 support
  - metahash: Add asserts to help analyzers
  - mk-ca-bundle.pl: Follow redirects
  - mk-ca-bundle: Switch URLs to GitHub versions
  - mkhelp: Fix to not generate a line-ending space in some cases
  - mqtt: Use conn/easy meta hash
  - multi: Do transfer book keeping using mid
  - multi: init_do(): Check result
  - netrc: Avoid NULL deref on weird input
  - netrc: Avoid strdup NULL
  - netrc: Deal with null token better
  - ngtcp2: Clarify ignoring of result
  - openssl-quic: Avoid potential '-Wnull-dereference', add assert
  - openssl-quic: Fix printf mask
  - openssl-quic: Fix shutdown when stream not open
  - openssl: Enable builds for *both* engines and providers
  - openssl: Set the cipher string before doing private cert
  - parsedate: Provide Curl_wkday also for GnuTLS builds
  - processhelp.pm: Always call 'taskkill' with '-f' (force)
  - processhelp.pm: Avoid potential endless loop, log more (Windows)
  - progress: Avoid integer overflow when gathering total transfer size
  - pytest tls: Extend coverage (fixes WolfSSL cert validation, CVE-2025-4947)
  - pytest-xdist: pytest in parallel
  - pytest: Add pinnedpubkey test cases (fixes WolfSSL pinning, CVE-2025-5025)
  - pytest: Give parameterised tests better ids for read- and parsability
  - pytest: Make test_07_22 more lenient to exit codes
  - quic: No local idle connection timeout, ngtcp2 keep-alive
  - rand: Update comment on Curl_rand_bytes weak random
  - RELEASE-PROCEDURE.md: Release candidate git tagging explained
  - rtsp: Remove redundant condition
  - runtests: Add retry option to reduce flakiness
  - runtests: Fix indentation
  - runtests: Recognize lowercase 'windows' in 'curl -V'
  - runtests: Remove server verification after start
  - runtests: Split 'SSH_PWD' into 'SCP_PWD' and 'SFTP_PWD', and more
  - rustls: Make max size of cert and key reasonable
  - sasl: Give help when unable to select AUTH
  - scripts: completion.pl: Sort the completion file for all shells
  - scripts: Drop unused import, formatting
  - scripts: Fix --opts-dir help in completion.pl
  - scripts: Fix perl indentation, whitespace, semicolons
  - sectransp: Fix building for macOS Sierra and older
  - setopt: Provide info for CURLE_BAD_FUNCTION_ARGUMENT
  - smb: Avoid integer overflow on weird input date
  - socket: Use accept4 when available
  - socketpair: Support pipe2 where available
  - spacecheck.pl: Check for non-ASCII chars, fix fallouts
  - spacecheck.pl: Verify 'tests/data/test*' for non-ASCII chars
  - src: Drop strcase.[ch] from tool builds
  - src: Include memdebug.h consistently with angle brackets &lt;&gt;
  - src: Rename curlx_safefree to tool_safefree
  - test1173.pl: Whitelist some option-looking names that aren't options
  - test1658: Add unit test for the HTTPS RR decoder
  - test: Make unittest 1308 into a libtest
  - tests/ech_tests.sh: Sync shebang with rest of bash scripts
  - tests/FILEFORMAT.md: Clarify %hex[] formatting
  - tests/FILEFORMAT.md: Document the aws feature
  - tests/README.md: Document --test-duphandle
  - tests/README.md: List the openssl tool among the prerequisites
  - tests/server/dnsd: Basic DNS server for test suite
  - tests/server: Check for 'stream != NULL' in mqttd
  - tests/server: Fix typo in comment
  - tests/server: Stop using libcurl string comparisons
  - tests/server: Stop using libcurl's printf functions
  - tests/serverhelp: Remove last remnants of http-pipe server
  - tests/tunit: Make a separate directory for tool-based unit tests
  - tests: Add aws feature to the related tests
  - tests: Add https-mtls server to force client auth
  - tests: Fix some test tag mismatches
  - tests: Mark ipfs tests to require ipfs
  - tests: Move a boolean variable out of the path section
  - tests: Prefer '--insecure' over '-k'
  - tests: Provide all non-ascii data hex encoded
  - tests: Remove some unused test case sections
  - tests: Require IPv6 for 1265, 1324, 2086
  - tests: Separate tunit tests from unit tests more
  - tests: Stop using libcurl's strdup
  - tests: Unify test case keywords
  - tests: Use a more portable null device path
  - TODO: Remove "nicer lacking perl message"
  - tool_cb_write.c: Handle EINTR on flush
  - tool_getparam: Clear argument only when needed
  - tool_operate: Make retrycheck() a separate function
  - tool_operate: When retrying, only truncate regular files
  - tool_paramhlp: Avoid integer overflow in secs2ms()
  - tool_parsecfg: Make get_line handle lines ending on the buffer boundary
  - typecheck-gcc.h: Fix the typechecks
  - urlapi: Redirecting to "" is considered fine
  - urlapi: Remove unneeded guards around PUNY2IDN
  - urldata: Remove the unused struct field 'hide_progress'
  - VERSIONS: List all past releases
  - vquic: Consistent name for the stream struct across backends
  - vquic: Init for every call to recvmsg
  - vtls: Avoid NULL deref on bad PEM input
  - vtls: Fix build with ssl but without http
  - VULN-DISCLOSURE-POLICY: Use of weak algos
  - winbuild: Add the deprecation warning to the README
  - winbuild: curl_get_line is not used for tool builds
  - windows: Fix builds targeting WinXP, test it in CI
  - wolfssl: Fix to enable ALPN when available
  - ws: Fix the header replace check
  - ws: Store protocol context as connection meta data</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.1.cf" date="1748520000">- Fix regression: curl_multi_add_handle() returning OOM when using more than
  400 handles (GH#17475)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.1-1.0.cf" date="1749038400">- Update to 8.14.1
  - asyn-thrdd: Fix clean-up when RR fails due to OOM
  - autotools: Recognize more Linux targets when setting '-D_GNU_SOURCE'
  - BUG-BOUNTY.md: Mention the medium bounty amount in 2025
  - cmake: Fix missed version number for multi-pkg-config detections
  - cmdline-docs: Mention HTTP resumed uploads to be shaky
  - curl: make -N handled correctly
  - curl: Upload from '.' fix
  - dllmain: Exclude from Cygwin builds
  - docs/tests: Remove mention of hyper
  - docs: Fix typos
  - ftp: Fix teardown of DATA connection in done
  - http: Fail early when rewind of input failed when following redirects
  - license: Update some copyright links to curl.se
  - memanalyze.pl: Fix getaddrinfo/freeaddrinfo checks
  - misc: Fix spelling
  - misc: We write *an* IPv6 address
  - multi: Fix add_handle resizing
  - spelling: 'a' vs. 'an'
  - spelling: Call it null-terminate consistently
  - test1510: Fix expectation
  - tests: Await portfile to be complete
  - tests: Fix checks for https-mtls proto
  - tests: Improve server start reliability
  - tests: Move test docs into /docs
  - tests: Re-enable 1510, document heimdal memleak
  - tests: Test mtls also w/ clientAuth EKU only
  - tests: Test mtls with --insecure
  - tls BIOs: Handle BIO_CTRL_EOF correctly
  - tool_getparam: Make --no-anyauth not be accepted
  - tool_getparam: Refactored, simplified
  - tool_getparam: Remove two nextarg NULL checks
  - VULN-DISCLOSURE-POLICY.md: The distros list wants ≤ 7 days embargo
  - wolfssl: Fix sending of early data
  - ws: Handle blocked sends better (CVE-2025-5399)
  - ws: Tests and fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-1.0.cf" date="1752667200">- Update to 8.15.0
  - TLS: Remove support for Secure Transport and BearSSL
  - altsvc: Accept 'clear' without semicolon as well
  - asyn-ares: Remove redundant NULL check
  - asyn-thrdd: Free the previous name before strdup'ing the new
  - autotools: Detect and link 'brotlicommon' library for brotli
  - autotools: Drop '$top_builddir/src' from src header path
  - autotools: Drop headers from src mk-unity rules (fixup)
  - autotools: Drop no longer necessary '--srcdir' unity options
  - autotools: Drop redundant 'Makefile.inc' from 'EXTRA_DIST' in src
  - autotools: Simplify configuration in tests, examples
  - bufq: Change read/write signatures
  - bufq: Remove the unused Curl_bufq_unwrite function
  - build: Assume 'sys/socket.h', 'sys/time.h' on non-Windows (as in 'curl/curl.h')
  - build: Drop 'HAVE_SYS_SOCKET_H' and 'HAVE_SYS_TIME_H' macros
  - build: Drop explicit curlx from hdr paths, refer headers with 'curlx/' prefix
  - build: Drop unused variables in tests
  - build: Fix libcurltool with cmake and tunits, related tidy-ups
  - build: Split '.c' and '.h' file lists in tests
  - build: Stop checking for 'sys/stat.h'
  - build: stubgss tidy-ups (in tests)
  - build: Sync build scripts between client/libtest
  - build: Tidy up 'Makefile.inc' use in lib and src
  - build: Tidy up header paths, use srcdir where possible
  - cf-socket: Make socket data_pending a no-op
  - checksrc-all: Rewrite in Perl, remove 'checksrc.bat'
  - checksrc: Reduce exceptions, apply again to curlx
  - cmake/FindGSS: Fix processing C header path options
  - cmake/FindGSS: Initialize result variables
  - cmake: 'curl_add_clang_tidy_test_target' tidy-ups
  - cmake: Build 'stubgss' library for libtests to match autotools
  - cmake: Check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
  - cmake: Configure c-ares header directory in project root (was: lib)
  - cmake: Document OpenSSL and ngtcp2 crypto lib custom variables
  - cmake: Drop never-propagated C macros
  - cmake: Drop passing redundant 'CURL_STATICLIB' in examples and clients
  - cmake: Drop redundant macro from test clients
  - cmake: Drop reference to future variable
  - cmake: Enable soversion by default for OpenHarmony OS
  - cmake: Fix 'curl_add_clang_tidy_test_target' when no '-D' option
  - cmake: Fix generator expression in docs/examples
  - cmake: Gather options recursively in 'curl_add_clang_tidy_test_target'
  - cmake: Make docs depend on support files
  - cmake: Move 'OUTPUT' argument in the 'add_custom_command()' line
  - cmake: Omit clang-tidy on internal libs curlu and curltool
  - cmake: Replace 'cmakelint' with 'cmake-lint' from 'cmakelang', fix issues
  - cmake: Replace the way clang-tidy verifies tests, fix issues found
  - cmake: Simplify handling generated 'lib1521.c' in libtests
  - cmake: Sync 'target_link_libraries()' order in tests more
  - cmake: Sync tests scripts by using the variable 'BUNDLE'
  - cmake: Sync tests scripts with each other and autotools (more)
  - cmake: Use 'target_link_options()' when available
  - config-win32: Fix default targets, shorten macro logic
  - configure: Order LDAP after the SSL libraries
  - connect: Drop unused struct member
  - connection: Clarify 'transport'
  - connection: Eliminate member 'remote_addr'
  - curl-config: Fix whitespace in usage text
  - curl.h: Make CURL_IPRESOLVE_* symbols defined as longs
  - curl.h: Make CURLSSLOPT_* symbols defined as longs
  - curl.h: Remove the "RESERVED" error codes
  - curl: Implement non-blocking STDIN read on Windows
  - curl: Improve non-blocking STDIN performance
  - curl: Remove the global argument from many functions
  - curl: Unify pointer names to global config
  - curl_get_line: Make sure lines end with newline
  - curl_memory.h: Fix to undefine 'accept4'
  - curl_path: Make SFTP handle a path like /~ properly
  - curlinfo: Provide the 'digest' feature
  - CURLSHOPT_SHARE.md: Mention multi-threading requires callbacks
  - DEPRECATE.md: Add VS2005 removal to the list
  - digest: Fix build with disabled digest auth
  - DISTROS: Update NixOS link
  - docs,tests: Fix english grammar "allow to" -&gt; "allow &lt;something&gt; to"
  - docs/CONTRIBUTE: Fix broken link
  - docs/examples: Add ftp-delete.c
  - docs: Beef up examples/websocket.c
  - docs: Fix broken link in CODE_REVIEW.md
  - docs: Fix broken link in INSTALL.md
  - docs: Fix docs for CURLOPT_PREQUOTE after #17616
  - docs: Fix documentation of connect_only 2
  - docs: Fix two typos
  - docs: Mention that the netrc file works without port numbers
  - docs: Mention the as-is concept generically
  - docs: Note SSLS-EXPORT feature in -ssl-sessions doc
  - docs: Reflect that delimiter-separated capath is only OpenSSL
  - docs: Sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
  - docs: Warn about lifetime in CURLOPT_CLOSESOCKET*
  - easy: Fix comment-documentation
  - easygetopt: Fix curl logo in header comment
  - firefox-db2pem: Avoid use of eval in script
  - ftp: Fix prequotes for a directory in URL
  - ftplistparser: Split parse_unix into sub-functions
  - h2_serverpush: Fix file handle leaks reported by clang-tidy
  - h3: Fix query of concurrent streams
  - http/3: Report handshake with version and cipher as for TCP connections
  - http2: Do not delay RST send on aborted transfer
  - http2: Fix var types in is_alive() implementations
  - http: Explicitly ignore parsing errors for Retry-After
  - http: Fix build with cookies and HSTS disabled
  - http_ntlm: Protect against null deref
  - http_ntlm: Remove unreachable code
  - INSTALL.md: Cygwin details and add source code link
  - ldap: Avoid automake caching issues with LDAP library names
  - ldap: If ldap-lib is sufficient, add it to LIBS
  - ldap: Initial support for --with-ldap option
  - lib2082: Drop 'typedef struct'
  - lib: Address singleuse issues
  - lib: Avoid reusing unclean connection
  - lib: Drop two interim macros in favor of native libcurl API calls
  - lib: Fix unused parameter/function compiler warnings
  - lib: Make 'CURLX_SET_BINMODE()' and use it
  - lib: Make 'curlx_wait_ms()' and use it
  - lib: Replace scache no-op macros with '#ifdef'
  - lib: Stop 'time()' debug overrides at the end of source in altsvc, hsts
  - lib: Unify recv/send function signatures
  - libcurl-env.md: Drop LOGNAME, USER and NTLMUSER
  - libcurl.m4: Fix indentation
  - libssh2: Remove use of 'initialised' for clean-up
  - libssh: De-complex myssh_statemach_act()
  - libssh: Fix readdir issues
  - libtests: Make tests 1503, 1504, 1505 use the 1502 binary
  - libtests: More header tidy-ups
  - libtests: Stop building the same source multiple times
  - memdebug.h: #undef 'fclose' before defining it
  - memdebug.h: Eliminate global macro 'CURL_MT_LOGFNAME_BUFSIZE'
  - memdebug: Include in unity batch
  - memory: Stop overriding unused 'wcsdup()'/'_wcsdup()' system functions
  - memory: Tidy up '_tcsdup()' override
  - misc: Fix typos
  - mk-lib1521: Replace 'printf' with 'curl_mprintf'
  - multi: Add dirty bitset
  - multi: Do not expire a blocked transfer
  - multi: Fix polling with pending input
  - multi: Remove careful bounds check as coverity says it is not needed
  - multi: xfer table/bitset, handle limits
  - ngtcp2: Fix coverity warning about result handling
  - openssl: Enable readahead
  - openssl: Error on SSL_ERROR_SYSCALL
  - openssl: Fix handling of buffered data
  - openssl: Fix openssl engine use
  - openssl: Fix pkcs11 provider available check
  - os400: Upgrade ILE/RPG bindings with latest definitions
  - pingpong: On disconnect, check for unflushed pingpong state
  - projects/build-openssl.bat: Remove
  - pytest: test_07_70, weaken early data check
  - pytest: Adapt for runs with openssl-1.1.1
  - pytest: Disable test_07_37 and test_07_36 with openssl's quic
  - quic: Implement CURLINFO_TLS_SSL_PTR
  - RELEASE-PROCEDURE.md: Update docs/VERSIONS
  - runtests.pl: Fix sprintf() using one too many %s
  - runtests: Fix 'LD_PRELOAD' detection for cmake-built curl binaries
  - runtests: Support memory-limits per test
  - rustls: Apply memory function overrides, fixing an ECH buffer free
  - rustls: Don't try printing the not provided file
  - schannel: Allow partial chains for manual peer verification
  - schannel: Drop Windows 2000 compatibility logic
  - scorecard: Flame graphs and documentation
  - SCP/SFTP: Avoid busy loop after EAGAIN
  - scripts: Fix to quote the copyright email address
  - socks: Fix query when filter context is null
  - system.h: Remove some macros
  - test1117: Reduce write delays
  - test1175: Fix to run, and fix documentation issues detected
  - test1222: Fix for out-of-tree and no-libcurl-manual builds
  - test1499, 1599: use '%LOGDIR'
  - test1499: Verify two chunked responses on reused connection
  - test1596: Let test pass after year 2036
  - test1706: Pass include directory to 'managen' for out-of-tree builds
  - tests/client: Drop autotools logic no longer necessary
  - tests/client: Use 'curl_mfprintf()'
  - tests/dnsd: Read config from file
  - tests/http/clients: Drop hack and use 'curl_setup.h' again
  - tests/http/clients: Move to tests/client
  - tests/http/requirements: Remove multipart
  - tests/libtest: Call 'curlx_now_init()' for unit 1399, 2600 (Windows)
  - tests/libtest: Drop 'TEST_HANG_TIMEOUT' redefinition hack
  - tests/libtest: Drop a checksrc exception
  - tests/libtest: Use 'curltime' from curlx
  - tests/server/util.c: Include netinet/in6.h
  - tests/server: De-dupe/merge three 'sockdaemon()' clones into one
  - tests/server: Drop 'memdebug.h'
  - tests/server: Make all global vars/funcs static
  - tests/server: Move memory init to 'memptr.c'
  - tests/servers.pm: Add more ways to figure out current user
  - tests: Always make bundles, adapt build and tests
  - tests: Bundle http clients, de-dupe, enable for MSVC
  - tests: Constify, make consts static
  - tests: Drop 'BUNDLE_SRC' variable
  - tests: Drop mk-bundle exceptions
  - tests: Drop unused or redundant includes
  - tests: Drop useless "nodist_SOURCES" assignments
  - tests: Fail torture if !valgrind&amp;threaded resolver
  - tests: Fix 1301, 1308 to fail on error
  - tests: Fix 'BUNDLE' variable references in 'Makefile.am'
  - tests: Make all names &lt; 75 characters long
  - tests: Make individual test sources compile cleanly
  - tests: Make sshserver less verbose
  - tests: Move 'curlcheck.h' to libtest as 'unitcheck.h'
  - tests: Move GSS-API dynamic stub into debug-mode libcurl
  - tests: torture: Don't duplicate valgrind command
  - tests: Use %b64[] to base64 data
  - tests: Use %b64[] to base64 data in 2056, 2057
  - tftpd: Use 'CURLMIN()' macro
  - tidy-up: Replace '&lt;memdebug.h&gt;' with '"memdebug.h"' (src, units)
  - tls: Remove Curl_ssl false_start
  - tool1621: Drop unused internal libcurl headers
  - tool_getparam: Fix --ftp-pasv
  - tool_operate: Fix return code when --retry is used but not triggered
  - tool_paramhelp: Fix language in comments
  - top-complexity: Lower max allowed complexity threshold to 90
  - unit tests: Extract "private" prototypes at build time
  - unit1302: Expand the base64 encode/decode tests
  - url: Fix connection lifetime checks
  - url: Fix NULL deref with bad password when no user is provided
  - urlapi: Simplify and split into sub functions
  - urlapi: Use uppercase hex encoding
  - vauth: Move auth structs to conn meta data
  - vtls: Change send/recv signatures of tls backends
  - vtls: Fix a copy-pasted early data comment typo
  - vtls: Log rustls negotiated KEX group name
  - vtls: Prefer ciphersuite to cipher in msgs
  - vtls: Prefer rustls-ffi ciphersuite name API
  - VULN-DISCLOSURE-POLICY.md: Fix typos
  - VULN-DISCLOSURE-POLICY: All reports should be disclosed
  - VULN-DISCLOSURE-POLICY: Exclude not installed software
  - VULN-DISCLOSURE-POLICY: Minor language polish
  - warnless: Drop parts of the 'read'/'write' preprocessor hack (Windows)
  - warnless: Replace 'read()'/'write()' wrapper functions with macros (Windows)
  - windows: Drop redundant 'curl_wcsdup_callback' callback
  - windows: Fixup 'fopen()' in 'CURLDEBUG' builds
  - windows: Reduce/stop loading DLLs at runtime
  - wolfssl: Add support for ML_KEM hybrids
  - ws: Drop redundant 'CURL_EXTERN' from function definitions
  - xfer: Manage pause bits</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.0.cf" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.1.cf" date="1753617600">- Fix dependency on CA bundle when we don't use the old one at
  /etc/pki/tls/certs/ca-bundle.crt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
</package>
<package pkgid="f88e1f49f738faf2d3ab94125f8f6d06ff2d6c567e2e1d1d8a1dec2efeedbd2e" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12.1-1.0.cf" date="1739448000">- Update to 8.12.1
  - All: Remove FIXME and TODO comments
  - asyn-thread: Fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: Fix HTTPS RR crash
  - asyn-thread: Fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: Survive a c-ares channel set to NULL
  - build: Add tool_hugehelp.c into IBMi build
  - checksrc.pl: Warn on FIXME/TODO comments
  - cmake/Find: Set '&lt;Modulename&gt;_FOUND' for compatibility when found via 'pkg-config'
  - cmake: Add integration tests, run them in CI
  - cmake: Always reference OpenSSL and ZLIB via imported targets
  - cmake: Avoid unnecessary '-L' for implicit link dirs
  - cmake: Drop 'LDAP_DEPRECATED=1' macro, to sync with autotools
  - cmake: Fix 'HAVE_GETHOSTBYNAME_R_*' detections with 'CURL_WERROR=ON'
  - cmake: Fix to detect 'HAVE_OPENSSL_SRP' in MSVC UWP builds
  - cmake: Fix/add missing feature detections for Windows/MS-DOS
  - cmake: Initialize variables where missing
  - cmake: Library order fixes for picky linkers (e.g. binutils 'ld')
  - cmake: Normalize before matching paths with syspaths
  - cmake: Respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: Respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - cmake: Save a line with 'CMAKE_C_IMPLICIT_LINK_DIRECTORIES' exclusion
  - cmake: Tidy up string append and list prepend syntax
  - configure/cmake: Check for realpath
  - configure/cmake: Set asyn-rr as feature only if httpsrr is enabled
  - content_encoding: #error on too old zlib
  - curl_global_sslset.md: Add SSL backend names
  - CURLOPT_SSH_KNOWNHOSTS.md: Strongly recommend using this
  - CURLSHOPT_SHARE.md: Adjust for the new SSL session cache
  - docs: Better explain multi-part byte range behaviour
  - docs: Use valid example domain names
  - generate.bat: Remove curl_get_line.c from the curlx file list
  - header.md: Mention 'Authorization:' and 'Cookie:' special treatment
  - imap: TLS upgrade fix
  - INTERNALS: Fix c-ares, as we actually support 1.6.0 or later
  - ldap: Drop support for legacy Novell LDAP SDK
  - lib: include necessary headers for 'inet_ntop'/'inet_pton'
  - lib: Silence LibreSSL collision warning on non-MSVC Windows
  - libssh2: Comparison is always true because rc &lt;= -1
  - libssh2: Raise lowest supported version to 1.2.8
  - libssh: Drop support for libssh older than 0.9.0
  - libssh: Silence '-Wconversion' with a cast (Windows 32-bit)
  - netrc: return code clean-up, fix missing file error
  - openssl-quic: Ignore ciphers for h3
  - openssl: Fix out of scope variables in goto
  - pop3: TLS upgrade fix
  - runtests: Fix the disabling of the memory tracking
  - runtests: Quote commands to support paths with spaces
  - scache: Add magic checks
  - smb: Silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - SPONSORS.md: Clarify that we don't promise goods or services
  - test1516: Avoid failure due to spaces in path
  - test2080: Simplify, avoid the null byte
  - tests: Fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
  - tidy-up: Make per-file 'ARRAYSIZE' macros global as 'CURL_ARRAYSIZE'
  - tool_cfgable: Sort struct fields by size, use bitfields for booleans
  - tool_getparam: Add "TLS required" flag for each such option
  - tool_progress: Fix percent output of large parallel transfers
  - tool_ssls: Switch to tool-specific get_line function
  - verbose.md: Mention how carriage-return might occur in headers
  - vquic: Make the "disable GSO" use infof, not failf
  - vtls: Fix multissl-init
  - vtsl: Eliminate 'data-&gt;state.ssl_scache'
  - wakeup_write: Make sure the eventfd write sends eight bytes
  - wolfssl: Silence compiler warning (MSVC 2019), simplify existing
- Use libssh2 rather than libssh for Fedora 28 and 29 builds since their
  versions of libssh are too old for curl now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.13.0-1.0.cf" date="1743595200">- Update to 8.13.0
  - curl: Add write-out variable 'tls_earlydata'
  - curl: Make --url support a file with URLs
  - gnutls: Set priority via --ciphers
  - IMAP: Add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: Add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: Add support for TLSv1.3 early data
  - rustls: Add support for CERTINFO
  - rustls: Add support for SSLKEYLOGFILE
  - rustls: Support ECH with DoH lookup for config
  - rustls: Support native platform verifier
  - var: Add a '64dec' function that can base64 decode a string
  - wolfssl: TLS early data support
  - addrinfo: Add curl macro to avoid redefining foreign symbols
  - asyn-thread: Avoid the separate 'struct resdata' alloc
  - asyn-thread: Avoid the separate curl_mutex_t alloc
  - asyn-thread: Do not allocate thread_data separately
  - asyn-thread: Remove 'status' from struct Curl_async
  - autotools: Fix 'dllmain.c' in unity builds
  - autotools: Fix 'libtest' bundle to depend on 'FIRSTFILES'
  - autotools: Use 'CURLDEBUG' to exclude TrackMemory code from unity
  - aws_sigv4: Cannot be used for proxy
  - aws_sigv4: Merge repeated headers in canonical request
  - aws_sigv4: Use strparse more for parsing
  - base64: Drop 'BUILDING_CURL' macro, always include in tests/server
  - build: Add Windows CE / CeGCC support, with CI jobs
  - build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls)
  - build: Do not apply curl debug macros to 'tests/server' by default
  - build: Drop unused 'getpart' tool
  - build: Enable -Wjump-misses-init for GCC 4.5+
  - build: Enable '-Wcast-qual', fix or silence compiler warnings
  - build: Fix compiler warnings in feature detections
  - build: Replace Curl_ prefix with curlx_ for functions used in servers
  - build: Set '-O3' and tune WinCE in CI, fix 'getpart', 'vtls_scache' fallouts
  - build: Set 'HAVE_STDINT_H' if 'stdint.h' is available
  - build: Set 'HAVE_WRITABLE_ARGV' for Apple cross-builds
  - build: Silence bogus '-Wconversion' warnings with gcc 5.1-5.4
  - build: Silence mingw32ce C99 format warnings, simplify CI
  - build: Tidy-ups around 'inet_pton'
  - c-ares httpsrr: Fix ifdef
  - c-ares: Error out for unsupported versions, drop unused macros
  - ca-native.md: Sync with CURLSSLOPT_NATIVE_CA
  - cf-socket: Deduplicate Windows Vista detection
  - cf-socket: Remove empty switch
  - client writer: Handle pause before decoding
  - cmake: 'CURL_LIBDIRS' improvements (upstreamed from vcpkg)
  - cmake: 'SHARE_LIB_OBJECT=ON' requires CMake 3.12 or newer
  - cmake: Add custom command scripts as dependencies where missing
  - cmake: Add pre-fill for Unix, enable in GHA/macos, verify pre-fills
  - cmake: Add shell completion support
  - cmake: Allow 'CURL_STATIC_CRT' with shared libcurl and no curl exe
  - cmake: Allow 'CURL_STATIC_CRT' with UCRT VS2015+ builds
  - cmake: Allow empty 'IMPORT_LIB_SUFFIX', add suffix collision detection
  - cmake: Avoid '-Wnonnull' warning in 'HAVE_FSETXATTR_5' detection
  - cmake: Disable HTTPS-proxy as a feature if proxy is disabled
  - cmake: Drop 'CURL_DISABLE_TESTS' option
  - cmake: Drop 'HAVE_C_FLAG_Wno_long_double' logic for ancient Apple gcc
  - cmake: Drop 'HAVE_IN_ADDR_T' from pre-fill too
  - cmake: Drop two stray TLS feature checks for wolfSSL
  - cmake: Exclude '-MP' for 'clang-cl' again
  - cmake: Fix 'HAVE_ATOMIC'/'HAVE_STDATOMIC' pre-fill for clang-cl
  - cmake: Fix clang-tidy builds to verify tests, fix fallouts
  - cmake: Fix detection pre-fills for iOS
  - cmake: Fix ECH detection in custom-patched OpenSSL
  - cmake: Fix typo in ECH config error msg
  - cmake: Hide empty 'MINGW64_VERSION' output for mingw32ce
  - cmake: Improve httpd detection for pytest
  - cmake: Mention 'insecure' in the debug build warning
  - cmake: Misc tidy-ups
  - cmake: Pre-fill known type sizes for Windows OSes
  - cmake: Replace CMAKE_COMPILER_IS_GNUCC with CMAKE_C_COMPILER_ID
  - cmake: Replace exec_program() with execute_process()
  - cmake: Restrict static CRT builds to static curl exe, test in CI
  - cmake: Sync cutoff version with autotools for picky option '-ftree-vrp'
  - cmake: Sync OpenSSL(-fork) feature checks with './configure'
  - cmake: Unity mode optimization for non-'CURLDEBUG' 'testdeps' targets
  - CODE_STYLE: Readability and banned functions
  - config-win32: Set 'HAVE_STDINT_H' where available
  - configure: Call the blocking resolver "blocking", not "default"
  - configure: Fix ECH detection with MultiSSL
  - configure: Silence compiler warnings in feature checks, drop duplicates
  - configure: Tidy up shell completion rules
  - configure: Use 'curl_cv_apple' variable
  - conn: Eliminate 'conn-&gt;now'
  - conn: Fix connection reuse when SSL is optional
  - conncache: Eliminate 'conn-&gt;destination_len' as premature optimization
  - contributors.sh: Lowercase 'github' for consistency
  - contrithanks.sh: Update docs/THANKS in place
  - cookie: Do prefix matching case-sensitively
  - cookie: Minor parser simplification
  - cookie: Simplify invalid_octets()
  - core: Stop redefining 'E*' macros on Windows, map 'EACCES', related fixes
  - curl.h: Change some enums to defines with L suffix
  - curl.h: Convert CURLUSESSL* names to defines
  - curl.h: Stop defining non-curl '__has_declspec_attribute'
  - curl.h: Switch 'CURL_HTTP_VERSION*' enums to long constants
  - curl/system.h: Drop leftover comment about 32 bit curl_off_t
  - curl: Add my_setopt_long() and _offt()
  - curl_msh3: Remove verify bypass from DEBUGBUILDs
  - curl_setup: Drop 'ERANGE' (for WinCE), no longer used
  - curl_setup_once: Drop 'E*' macro redefines unused (with winsock2)
  - curl_setup_once: Stop redefining 'ENAMETOOLONG' to winsock2 error code
  - curl_trc: Fix build with CURL_DISABLE_VERBOSE_STRINGS
  - curl_ws_recv.md: Expand a little on the fragments the API delivers
  - CURLMOPT_SOCKETFUNCTION.md: Add advice for socket callback invocation
  - CURLOPT_HTTPHEADER.md: Add comments to the example
  - CURLOPT_HTTPHEADER.md: Rephrases
  - curltime: Use libcurl time functions in src and tests/server
  - DISABLED: Add 313 for sectransp (move from GHA/macos)
  - docs/cmdline-opts: Use imperative form
  - docs: Adapt to removed --with-random
  - docs: Add FD_ZERO to curl_multi_fdset example
  - docs: Bump 'rustls' to 0.14.1
  - docs: Correct argument names and URL redirection
  - docs: Minor edits to please the new spellchecker regime
  - docs: Rework RUSTLS install instructions
  - docs: Unify HTTP version style in --help output
  - docs: Vulnerabilities in debug code are not eligible for a bounty
  - doh: Improve HTTPS RR svcparams parsing
  - doh: Remove wrong but unreachable exit path from doh_decode_rdata_name
  - dynbuf: Assert init on free
  - easy: Drop 'break' after 'return'
  - easy: Fix warning about possible comma misuse
  - eventfd: Allow use on all CPUs
  - examples: Prefer 'return' over 'exit()' (cont.)
  - ftp/sftp: strdup data info memory
  - ftp: Fix comment
  - gnutls: Fix connection state check on handshake
  - gnutls: Fix use of pkcs11 urls for keys/certs
  - gtls: Fix uninitialized variable
  - hash: Use single linked list for entries
  - hostip: Don't use alarm() for DoH resolves
  - hostip: Make CURLOPT_RESOLVE support replacing IPv6 addresses
  - http2: Add on_invalid_frame callback for error detection
  - http2: Detect session being closed on ingress handling
  - http2: Enhance error messages on Curl_dyn* upon receiving headers
  - http2: Fix stream assignemnt for pushes
  - http2: Reset stream on response header error
  - HTTP3.md: Only speak about minimal versions
  - http: Convert parsers to strparse
  - http: Fix NTLM info message typo
  - http: Fix the auth check
  - http: Make the RTSP version check stricter
  - http: Negotiation and room for alt-svc/https RR to navigate
  - http: Remove a HTTP method size restriction
  - http: Version negotiation
  - http_chunks: Replace a strofft call with curl_str_hex
  - https-rr: Implementation improvements
  - httpsrr: Fix port detection
  - httpsrr: Fix the HTTPS-RR threaded-resolver build combo
  - INFRASTRUCTURE.md: Add IRC and Matrix details
  - INSTALL-CMAKE.md: CMake usage updates
  - INSTALL-CMAKE.md: mention 'ZLIB_USE_STATIC_LIBS'
  - lib1156: Pass longs to 'curl_easy_setopt()'
  - lib1560: Test set path containing LR or CR
  - lib2302: Fix crash due to stack overflow on MSVC and clang Windows
  - lib696: Fix building on Windows in non-bundle mode
  - lib: Better optimized casecompare() and ncasecompare()
  - lib: Clear up CURLRES_ASYNCH vs. USE_CURL_ASYNC use
  - lib: Fix two curlx_strtoofft invokes
  - lib: Rename curlx_strtoofft to Curl_str_numblanks()
  - lib: Replace while(ISBLANK()) loops with Curl_str_passblanks()
  - lib: Simplify more white space loops
  - lib: strtoofft.h header cleanup
  - lib: Use Curl_str_* instead of strtok_r()
  - lib: Use Curl_str_number() for parsing decimal numbers
  - libssh2: Fix freeing of resources in disconnect
  - libssh2: Fix memory leak in 'SSH_SFTP_REALPATH' state
  - libssh2: Fix to ignore 'known_hosts' if SHA256 host public key is set
  - libssh2: Print user with verbose flag
  - libssh2: Show crypto backend in the verbose connect log
  - libssh: Fix freeing of resources in disconnect
  - libssh: Fix scp large file upload for 32-bit size_t systems
  - libtest/first.c: Remove the Test: stderr output for unity builds
  - libtest/libprereq.c: Set CURLOPT_FOLLOWLOCATION with a long
  - managen: Accept more markdown-quote-markers
  - managen: Correct the warning for un-escaped '&lt;' and '&gt;'
  - mbedtls: Re-enable an error check
  - memdebug.h: Avoid '-Wredundant-decls' with an extra guard
  - memdebug: Drop dynamic allocation from 'curl_dbg_log()'
  - mprintf: Switch three number parsers to use strparse
  - mqtt: Convert sendleftovers to dynbuf
  - msvc: Drop support for VS2005 and older
  - multi: Call protocol handler done() if PROTOCONNECT or later
  - multi: Event based rework
  - multi: Kill off remaining internal handles in curl_multi_cleanup
  - multi: Start the loop over when handles are removed
  - multi_ev: Fixes regarding connection shutdowns
  - ngtcp2: Do not iterate over multi handles
  - ntlm: Merge ntlm.h into ntlm.c
  - openssl-quic: Do not iterate over multi handles
  - openssl: Check return value of X509_get0_pubkey
  - openssl: Drop support for old OpenSSL/LibreSSL versions
  - openssl: Fix crash on missing cert password
  - openssl: Fix pkcs11 URI checking for key files
  - openssl: Remove bad 'goto's into other scope
  - prox/preproxy.md: Document argument within &lt;brackets&gt;
  - pytest: Test negotiate with http proxy
  - quiche: Do not iterate over multi handles
  - RELEASE-PROCEDURE.md: Explain release candidates
  - request: Clear sendbuf_hds_len when resetting request bufq
  - resolve: Fix building without Unix sockets and 'CURLDEBUG'
  - runtests: Accept 'CURL_DIRSUFFIX' without ending slash
  - runtests: Add feature-based filtering
  - runtests: Check and report if 'diff' tool is missing
  - runtests: Drop logic calling the 'handle' tool (Windows)
  - runtests: Drop recognizing 'winssl' as Schannel
  - runtests: Drop ref to unused external function
  - runtests: Fix bundled test invocation with '-g' option
  - runtests: Fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs
  - runtests: Fix test key format for libssh2 WinCNG (and others)
  - runtests: Generate certs dynamically, bump to EC-256, tidy up
  - runtests: Recognize AWS-LC as OpenSSL
  - runtests: Rewrite 'genserv.sh' in Perl
  - runtests: Support multi-target cmake, drop workarounds from CI
  - runtests: Support running tests under wine or qemu (cont.)
  - runtests: Support running tests under wine or qemu
  - runtests: Use 'setfacl' on Cygwin/MSYS, if present
  - rustls: Add ECH support with string ECH config
  - rustls: Cap maximum allowed CRL file size to 8MB
  - rustls: Support ECH GREASE
  - rustls: Use client cert and key if available
  - schannel: Deduplicate Windows Vista detection
  - schannel: Enable ALPN support under WINE 6.0+
  - schannel: Enable ALPN with MinGW, fix ALPN for UWP builds
  - schannel: Guard ALPN init code to ALPN builds
  - scripts/managen: Fix option 'single'
  - scripts/managen: Fix parsing of markdown code sections
  - scripts: Update completion.pl to parse options from docs
  - sectransp: Add support for HTTP/2 in gcc builds
  - sendf: Client reader line conversion: do not change data-&gt;state.infilesize
  - setopt: Illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: Remove unnecessary void pointer typecasts
  - setopt: Setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - shutdowns: Split shutdown handling from connection pool
  - socks: Remove bad assert from do_SOCKS5()
  - src: Avoid strdup on platforms not doing UTF-8 conversions
  - src: Clean-up ISBLANK vs. ISSPACE
  - src: Remove Curl_ prefix from tool-specific function
  - src: Remove final uses of Curl_ symbol prefixes in tool code
  - src: Replace strto[u][ld] with curlx_str_ parsers
  - ssh: Consider sftp quote commands case sensitive
  - sshserver.pl: Adjust 'AuthorizedKeysFile2' cutoff version
  - sshserver.pl: Use Perl 'chmod'
  - sshserver: Fix excluding obsolete client config lines
  - ssl session cache: Add exportable flag
  - SSLCERTS: List support for SSL_CERT_FILE and SSL_CERT_DIR
  - strparse: Make Curl_str_number() return error for no digits
  - strparse: Switch the API to work on 'const char *'
  - strparse: Switch to curl_off_t as base data type
  - test1022: Add support for rc releases
  - test1167: Catch #defines with extra whitespace
  - test313: Disable CRL test for Schannel due to lack of support and flakiness
  - test313: Disable via '&lt;features&gt;' for backends without CRL support
  - test489: Set output dir
  - test612: SCP 'rm' the uploaded remote file (not the local source), unignore in CI
  - test613: Make it pass on Windows, fix postprocess, unignore in CI
  - test615: Fix for Cygwin, unignore in CI
  - tests/certs: Clean up
  - tests/server: Drop unused 'base64.pl'
  - tests/server: Fix to check against winsock2 error codes on Windows
  - tests/server: Give global 'path' variable a more descriptive name
  - tests/server: Make the signal handler signal-safe
  - tests/server: Replace 'errno' with 'SOCKERRNO' in sockfilt, socksd, sws
  - tests/server: Replace 'strerror' with 'sstrerror' in socksd
  - tests/server: Support bundle binary
  - tests/server: Sync 'wait_ms()' with the libcurl implementation
  - tests/server: Use 'curlx_str_numblanks()' to avoid 'errno'
  - tests/servers.pm: Remove unused variable 'portrange'
  - tests: Build non-debug unit tests with autotools, run them
  - tests: Fix comment in lib533
  - tests: Fix enum/int confusion, fix autotools 'CFLAGS' for 'servers'
  - tests: Make sure 'commands.log' is generated in the correct logdir
  - tests: Mark tests 1631, 1632 flaky
  - tests: Reformat error messages to avoid tripping MSBuild
  - tests: Remove base64 encoded sections
  - tests: Remove unused variables
  - tests: Replace remaining non-ASCII bytes with hex markup
  - tftpd: Prefix TFTP protocol error 'E*' constants with 'TFTP_'
  - tidy-up: Align MSYS2/Cygwin codepaths, follow Cygwin 'MAX_PID' bump
  - tidy-up: Delete, comment or scope C macros reported unused
  - tidy-up: Drop unused 'CURL_INADDR_NONE' macro and 'in_addr_t' type
  - tidy-up: Use 'CURL_ARRAYSIZE()'
  - timediff: Fix comment for curlx_mstotv()
  - timediff: Remove unnecessary double typecast
  - tool_dirhie: Create dir hierarchy without strtok
  - tool_getparam: Clear sensitive arguments better
  - tool_getparam: Do parse_upload_flags without the alloc/free
  - tool_getparam: Parse --trace-config without strdup()/free()
  - tool_getparam: parse_header() without strtok
  - tool_operate: Change "1 retries" to "1 retry"
  - tool_operate: Fail SSH transfers without server auth
  - tool_operate: Fix pluralization of seconds
  - tool_operate: Remove unnecessary (long) typecasts
  - tool_paramhlp: Do --proto parsing without strtok
  - tool_parsecfg: Make my_get_line skip comments and newlines
  - tool_setopt: Reduce use of "code hiding" macros
  - url: Call protocol handler's disconnect in Curl_conn_free
  - urlapi: Fix redirect from file:// with query, and simplify
  - urlapi: Remove percent encoded dot sequences from the URL path
  - urlapi: Simplify junkscan
  - urldata: Remove 'hostname' from struct Curl_async
  - variable.md: Clarify 'trim' example
  - vquic: Obey IOV_MAX
  - vtls: Fix compiler warnings seen with gcc 7.3.0 and mbedTLS
  - winbuild: Reduce command-line length by dropping whitespace
  - windows: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - windows: Drop code and curl manifest targeting W2K and older
  - windows: Fix issues detected by clang-tidy, and some more
  - wolfssh: Fix freeing of resources in disconnect
  - wolfssh: Retrieve the error using wolfSSH_get_error
  - wolfssl: Fix CA certificate multiple location import
  - wolfssl: Fix unused variable warning
  - wolfssl: Warn if CA native import option is ignored
  - wolfssl: When using PQ KEM, use ML-KEM, not Kyber
  - ws: Corrected curlws_cont to reflect its documented purpose
  - ws: Fix and extend CURLWS_CONT handling
  - zlib: Bump minimum to 1.2.5.2 (was: 1.2.0.4)
- BR: openssl, needed for cert generation in test suite
- Drop "compat" build support in spec
- Drop legacy ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.0.cf" date="1748433600">- Update to 8.14.0
  - mqtt: Send ping at upkeep interval
  - schannel: Handle pkcs12 client certificates containing CA certificates
  - TLS: Add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: Import v2025.04.20 script and documentation
  - websocket: Add option to disable auto-pong reply
  - _SEEALSO.md: Remove spaces around command and man page section
  - asny-thrdd: Fix detach from running thread
  - asnyc-thrdd: Explain how this is okay with a comment
  - async resolver code improvements
  - async-threaded resolver: Use ref counter
  - async: DoH improvements
  - autotools: Detect 'wolfSSL_set_quic_use_legacy_code' like cmake does
  - autotools: Install shell completion files on cross build
  - aws-sigv4: Allow a blank string
  - build: Check required rustls-ffi version
  - build: Enable gcc-12/13+, clang-10+ picky warnings
  - build: Enable gcc-15 picky warnings
  - certs: Drop unused 'default_bits' from '.prm' files
  - cf-https-connect: Use the passed-in dns struct pointer
  - cf-socket: Fix FTP accept connect
  - cfilters: Remove assert
  - cmake/FindNGTCP2: Simplify multi-pkg-config detection
  - cmake: Append picky warnings to 'CMAKE_REQUIRED_FLAGS' as string
  - cmake: Avoid 'target is imported but not globally visible' when consuming
    libcurl with old cmake
  - cmake: Do not install 'mk-ca-bundle' script and manpage
  - cmake: Enable '-Wall' for MSVC when 'PICKY_COMPILER=ON'
  - cmake: Extend integration tests
  - cmake: Fix 'fish' install directory detection via 'pkg-config'
  - cmake: Fix nghttp3 static linking with 'USE_OPENSSL_QUIC=ON'
  - cmake: Fix option() and mark_as_advanced() mixed order
  - cmake: Fix shell completion install when just one flavour is enabled
  - cmake: Honour individual picky option overrides found in 'CMAKE_C_FLAGS'
  - cmake: Install shell completions for cross-builds
  - cmake: Link 'crypt32' for OpenSSL feature detection
  - cmake: Merge 'CURL_WERROR' logic into 'PickyWarnings.cmake'
  - cmake: Prefer 'COMPILE_OPTIONS' over 'CMAKE_C_FLAGS' for custom C options
  - cmake: Quotes, whitespace, use 'VERSION_GREATER_EQUAL'
  - cmake: Revert 'CURL_LTO' behaviour for multi-config generators
  - cmake: Set 'BUILDING_LIBCURL' directly for unit test targets
  - cmake: Stop deleting '-W&lt;n&gt;' from 'CMAKE_C_FLAGS' (MSVC)
  - cmake: Tidy up and document feature detections in dependencies
  - cmake: Use 'CMAKE_COMPILE_WARNING_AS_ERROR' if available
  - cmake: Use 'INCLUDE_DIRECTORIES' prop to specify local header dirs
  - cmake: Use 'LIB_NAME' in 'curl-config.cmake.in'
  - cmake: Use absolute paths for completion targets
  - cmake: Use the 'LINK_OPTIONS' property with CMake 3.13+
  - configure: Catch asking for double resolver without https-rr
  - configure: Fix --disable-rt
  - configure: Restore link checks
  - configure: Suppress command not found for brew
  - conncache: Make Curl_cpool_init return void
  - connect: Shutdown timer fix
  - content_encoding: Transfer-Encoding parser improvements
  - CONTRIBUTE: Add project guidelines for AI use
  - contrithanks.sh: Drop set -e
  - cpool/cshutdown: Force close connections under pressure
  - curl: Fix memory leak when -h is used in config file
  - curl: Only warn once for --manual in manual-disabled build
  - curl_get_line: Handle lines ending on the buffer boundary
  - curl_krb5: Only use functions if FTP is still enabled
  - curl_multibyte: Fix up low-level calls, include in unity builds
  - curl_osslq: Remove a leftover debug fprintf() call
  - curl_url_get.md: Don't call it normalized
  - curl_version_info.md: Clarify ssl_version for MultiSSL
  - CURLMOPT_TIMERFUNCTION.md: Correct the example
  - CURLOPT_ERRORBUFFER.md: Buffer is read only after curl takes ownership
  - CURLOPT_FOLLOWLOCATION.md: Switch to GET =&gt; no body
  - CURLOPT_READFUNCTION.md: Mention the seek callback
  - CURLOPT_XFERINFOFUNCTION.md: Fix the callback return type in example
  - curlx: Move the docs to docs/internals/
  - DEPRECATE.md: Drop support for VS2008
  - DEPRECATE.md: Drop Windows CE support
  - dist: Drop duplicate entry from 'CMAKE_DIST'
  - dns_entry: Move from conn to data-&gt;state
  - Dockerfile: Update debian:bookworm-slim Docker digest to 90522ee
  - docs/INSTALL.md: Drop reference to removed configure option
  - docs/libcurl: Fix type and prototype problems in examples
  - docs/libcurl: Make examples build with picky compiler options
  - docs/libcurl: Mention sensitive data/headers
  - docs: Add missing return statement in examples
  - docs: Fix incorrect shell substitution in docker run example command
  - docs: Fix typo in retry.md
  - docs: Update distros links
  - doh: httpsrr fix
  - doh: Make sure CURLOPT_PROTOCOLS is set with a "long" arg
  - doh: Reduce the DNS request buffer size
  - easy_reset: Fix dohfor_mid member
  - ECH: Reference the OpenSSL ECH feature branch
  - etag-save.md: Mention how using both options is a good idea
  - eventfd: Fix feature guards
  - formdata: Clean-ups
  - ftp: Fix bug in failed init
  - ftp: Fix race in upload handling
  - ftplistparser: Add two overflow preventions
  - ftplistparser: Split up into more functions
  - generate.bat: Exclude curlinfo.c from legacy VS projects
  - genserv.pl: Fail with a message if 'openssl' is missing or failing
  - headers: Enforce a max number of response header to accept
  - headers: Set an error message on illegal response headers
  - hostip: Fix build without threaded-resolver and without DoH
  - hostip: Show the correct name on proxy resolve error
  - http2: Fix stream window size after unpausing
  - HTTP3.md: Fix incorrect variable placeholders
  - http: Fix a build error when all auths are disabled
  - http: Fix HTTP/2 handling of TE request header using "trailers"
  - http: In alt-svc negotiation only allow supported HTTP versions
  - http_aws_sigv4: Add additional verbose log statements
  - http_aws_sigv4: Improve sigv4 url encoding and canonicalization
  - http_chunks: Narrow variable scope for 'trlen'
  - http_negotiate: Fix non-SSL build with GSSAPI
  - https-connect: Fix httpsrr target check
  - HTTPSRR.md: Clarify somewhat
  - if2ip: Build the function also if FTP is present
  - imap: Remove redundant condition
  - INSTALL-CMAKE.md: Fix typo
  - INSTALL.md: Update the minimal libcurl size example
  - KNOWN_BUGS: Fix link in sivg4 issue 16.3
  - lib/src/docs/test: Improve curl_easy_setopt() calls
  - lib1560: Use hex notation, drop non-ASCII exception
  - lib3026: Drop DLL pre-load perf mitigation for old mingw
  - lib: Add const to clientwriter tables
  - lib: Drop curlx_getpid, use fake pid in SMB
  - lib: Include files using known path
  - lib: Make Curl_easyopts const
  - lib: Unify conversions to/from hex
  - libcurl-tutorial.md: Fix read callback explanation
  - libssh: Add NULL check for Curl_meta_get()
  - libssh: Fix memory leak
  - libssh: Remove a condition that always equals false
  - libtest/first: Stop defining MEMDEBUG_NODEFINES
  - libtests: Define CURL_DISABLE_DEPRECATION first
  - make: Clean tests better
  - mbedtls: TLS 1.3 is max when mbedtls has 1.3 support
  - metahash: Add asserts to help analyzers
  - mk-ca-bundle.pl: Follow redirects
  - mk-ca-bundle: Switch URLs to GitHub versions
  - mkhelp: Fix to not generate a line-ending space in some cases
  - mqtt: Use conn/easy meta hash
  - multi: Do transfer book keeping using mid
  - multi: init_do(): Check result
  - netrc: Avoid NULL deref on weird input
  - netrc: Avoid strdup NULL
  - netrc: Deal with null token better
  - ngtcp2: Clarify ignoring of result
  - openssl-quic: Avoid potential '-Wnull-dereference', add assert
  - openssl-quic: Fix printf mask
  - openssl-quic: Fix shutdown when stream not open
  - openssl: Enable builds for *both* engines and providers
  - openssl: Set the cipher string before doing private cert
  - parsedate: Provide Curl_wkday also for GnuTLS builds
  - processhelp.pm: Always call 'taskkill' with '-f' (force)
  - processhelp.pm: Avoid potential endless loop, log more (Windows)
  - progress: Avoid integer overflow when gathering total transfer size
  - pytest tls: Extend coverage (fixes WolfSSL cert validation, CVE-2025-4947)
  - pytest-xdist: pytest in parallel
  - pytest: Add pinnedpubkey test cases (fixes WolfSSL pinning, CVE-2025-5025)
  - pytest: Give parameterised tests better ids for read- and parsability
  - pytest: Make test_07_22 more lenient to exit codes
  - quic: No local idle connection timeout, ngtcp2 keep-alive
  - rand: Update comment on Curl_rand_bytes weak random
  - RELEASE-PROCEDURE.md: Release candidate git tagging explained
  - rtsp: Remove redundant condition
  - runtests: Add retry option to reduce flakiness
  - runtests: Fix indentation
  - runtests: Recognize lowercase 'windows' in 'curl -V'
  - runtests: Remove server verification after start
  - runtests: Split 'SSH_PWD' into 'SCP_PWD' and 'SFTP_PWD', and more
  - rustls: Make max size of cert and key reasonable
  - sasl: Give help when unable to select AUTH
  - scripts: completion.pl: Sort the completion file for all shells
  - scripts: Drop unused import, formatting
  - scripts: Fix --opts-dir help in completion.pl
  - scripts: Fix perl indentation, whitespace, semicolons
  - sectransp: Fix building for macOS Sierra and older
  - setopt: Provide info for CURLE_BAD_FUNCTION_ARGUMENT
  - smb: Avoid integer overflow on weird input date
  - socket: Use accept4 when available
  - socketpair: Support pipe2 where available
  - spacecheck.pl: Check for non-ASCII chars, fix fallouts
  - spacecheck.pl: Verify 'tests/data/test*' for non-ASCII chars
  - src: Drop strcase.[ch] from tool builds
  - src: Include memdebug.h consistently with angle brackets &lt;&gt;
  - src: Rename curlx_safefree to tool_safefree
  - test1173.pl: Whitelist some option-looking names that aren't options
  - test1658: Add unit test for the HTTPS RR decoder
  - test: Make unittest 1308 into a libtest
  - tests/ech_tests.sh: Sync shebang with rest of bash scripts
  - tests/FILEFORMAT.md: Clarify %hex[] formatting
  - tests/FILEFORMAT.md: Document the aws feature
  - tests/README.md: Document --test-duphandle
  - tests/README.md: List the openssl tool among the prerequisites
  - tests/server/dnsd: Basic DNS server for test suite
  - tests/server: Check for 'stream != NULL' in mqttd
  - tests/server: Fix typo in comment
  - tests/server: Stop using libcurl string comparisons
  - tests/server: Stop using libcurl's printf functions
  - tests/serverhelp: Remove last remnants of http-pipe server
  - tests/tunit: Make a separate directory for tool-based unit tests
  - tests: Add aws feature to the related tests
  - tests: Add https-mtls server to force client auth
  - tests: Fix some test tag mismatches
  - tests: Mark ipfs tests to require ipfs
  - tests: Move a boolean variable out of the path section
  - tests: Prefer '--insecure' over '-k'
  - tests: Provide all non-ascii data hex encoded
  - tests: Remove some unused test case sections
  - tests: Require IPv6 for 1265, 1324, 2086
  - tests: Separate tunit tests from unit tests more
  - tests: Stop using libcurl's strdup
  - tests: Unify test case keywords
  - tests: Use a more portable null device path
  - TODO: Remove "nicer lacking perl message"
  - tool_cb_write.c: Handle EINTR on flush
  - tool_getparam: Clear argument only when needed
  - tool_operate: Make retrycheck() a separate function
  - tool_operate: When retrying, only truncate regular files
  - tool_paramhlp: Avoid integer overflow in secs2ms()
  - tool_parsecfg: Make get_line handle lines ending on the buffer boundary
  - typecheck-gcc.h: Fix the typechecks
  - urlapi: Redirecting to "" is considered fine
  - urlapi: Remove unneeded guards around PUNY2IDN
  - urldata: Remove the unused struct field 'hide_progress'
  - VERSIONS: List all past releases
  - vquic: Consistent name for the stream struct across backends
  - vquic: Init for every call to recvmsg
  - vtls: Avoid NULL deref on bad PEM input
  - vtls: Fix build with ssl but without http
  - VULN-DISCLOSURE-POLICY: Use of weak algos
  - winbuild: Add the deprecation warning to the README
  - winbuild: curl_get_line is not used for tool builds
  - windows: Fix builds targeting WinXP, test it in CI
  - wolfssl: Fix to enable ALPN when available
  - ws: Fix the header replace check
  - ws: Store protocol context as connection meta data</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.1.cf" date="1748520000">- Fix regression: curl_multi_add_handle() returning OOM when using more than
  400 handles (GH#17475)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.1-1.0.cf" date="1749038400">- Update to 8.14.1
  - asyn-thrdd: Fix clean-up when RR fails due to OOM
  - autotools: Recognize more Linux targets when setting '-D_GNU_SOURCE'
  - BUG-BOUNTY.md: Mention the medium bounty amount in 2025
  - cmake: Fix missed version number for multi-pkg-config detections
  - cmdline-docs: Mention HTTP resumed uploads to be shaky
  - curl: make -N handled correctly
  - curl: Upload from '.' fix
  - dllmain: Exclude from Cygwin builds
  - docs/tests: Remove mention of hyper
  - docs: Fix typos
  - ftp: Fix teardown of DATA connection in done
  - http: Fail early when rewind of input failed when following redirects
  - license: Update some copyright links to curl.se
  - memanalyze.pl: Fix getaddrinfo/freeaddrinfo checks
  - misc: Fix spelling
  - misc: We write *an* IPv6 address
  - multi: Fix add_handle resizing
  - spelling: 'a' vs. 'an'
  - spelling: Call it null-terminate consistently
  - test1510: Fix expectation
  - tests: Await portfile to be complete
  - tests: Fix checks for https-mtls proto
  - tests: Improve server start reliability
  - tests: Move test docs into /docs
  - tests: Re-enable 1510, document heimdal memleak
  - tests: Test mtls also w/ clientAuth EKU only
  - tests: Test mtls with --insecure
  - tls BIOs: Handle BIO_CTRL_EOF correctly
  - tool_getparam: Make --no-anyauth not be accepted
  - tool_getparam: Refactored, simplified
  - tool_getparam: Remove two nextarg NULL checks
  - VULN-DISCLOSURE-POLICY.md: The distros list wants ≤ 7 days embargo
  - wolfssl: Fix sending of early data
  - ws: Handle blocked sends better (CVE-2025-5399)
  - ws: Tests and fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-1.0.cf" date="1752667200">- Update to 8.15.0
  - TLS: Remove support for Secure Transport and BearSSL
  - altsvc: Accept 'clear' without semicolon as well
  - asyn-ares: Remove redundant NULL check
  - asyn-thrdd: Free the previous name before strdup'ing the new
  - autotools: Detect and link 'brotlicommon' library for brotli
  - autotools: Drop '$top_builddir/src' from src header path
  - autotools: Drop headers from src mk-unity rules (fixup)
  - autotools: Drop no longer necessary '--srcdir' unity options
  - autotools: Drop redundant 'Makefile.inc' from 'EXTRA_DIST' in src
  - autotools: Simplify configuration in tests, examples
  - bufq: Change read/write signatures
  - bufq: Remove the unused Curl_bufq_unwrite function
  - build: Assume 'sys/socket.h', 'sys/time.h' on non-Windows (as in 'curl/curl.h')
  - build: Drop 'HAVE_SYS_SOCKET_H' and 'HAVE_SYS_TIME_H' macros
  - build: Drop explicit curlx from hdr paths, refer headers with 'curlx/' prefix
  - build: Drop unused variables in tests
  - build: Fix libcurltool with cmake and tunits, related tidy-ups
  - build: Split '.c' and '.h' file lists in tests
  - build: Stop checking for 'sys/stat.h'
  - build: stubgss tidy-ups (in tests)
  - build: Sync build scripts between client/libtest
  - build: Tidy up 'Makefile.inc' use in lib and src
  - build: Tidy up header paths, use srcdir where possible
  - cf-socket: Make socket data_pending a no-op
  - checksrc-all: Rewrite in Perl, remove 'checksrc.bat'
  - checksrc: Reduce exceptions, apply again to curlx
  - cmake/FindGSS: Fix processing C header path options
  - cmake/FindGSS: Initialize result variables
  - cmake: 'curl_add_clang_tidy_test_target' tidy-ups
  - cmake: Build 'stubgss' library for libtests to match autotools
  - cmake: Check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
  - cmake: Configure c-ares header directory in project root (was: lib)
  - cmake: Document OpenSSL and ngtcp2 crypto lib custom variables
  - cmake: Drop never-propagated C macros
  - cmake: Drop passing redundant 'CURL_STATICLIB' in examples and clients
  - cmake: Drop redundant macro from test clients
  - cmake: Drop reference to future variable
  - cmake: Enable soversion by default for OpenHarmony OS
  - cmake: Fix 'curl_add_clang_tidy_test_target' when no '-D' option
  - cmake: Fix generator expression in docs/examples
  - cmake: Gather options recursively in 'curl_add_clang_tidy_test_target'
  - cmake: Make docs depend on support files
  - cmake: Move 'OUTPUT' argument in the 'add_custom_command()' line
  - cmake: Omit clang-tidy on internal libs curlu and curltool
  - cmake: Replace 'cmakelint' with 'cmake-lint' from 'cmakelang', fix issues
  - cmake: Replace the way clang-tidy verifies tests, fix issues found
  - cmake: Simplify handling generated 'lib1521.c' in libtests
  - cmake: Sync 'target_link_libraries()' order in tests more
  - cmake: Sync tests scripts by using the variable 'BUNDLE'
  - cmake: Sync tests scripts with each other and autotools (more)
  - cmake: Use 'target_link_options()' when available
  - config-win32: Fix default targets, shorten macro logic
  - configure: Order LDAP after the SSL libraries
  - connect: Drop unused struct member
  - connection: Clarify 'transport'
  - connection: Eliminate member 'remote_addr'
  - curl-config: Fix whitespace in usage text
  - curl.h: Make CURL_IPRESOLVE_* symbols defined as longs
  - curl.h: Make CURLSSLOPT_* symbols defined as longs
  - curl.h: Remove the "RESERVED" error codes
  - curl: Implement non-blocking STDIN read on Windows
  - curl: Improve non-blocking STDIN performance
  - curl: Remove the global argument from many functions
  - curl: Unify pointer names to global config
  - curl_get_line: Make sure lines end with newline
  - curl_memory.h: Fix to undefine 'accept4'
  - curl_path: Make SFTP handle a path like /~ properly
  - curlinfo: Provide the 'digest' feature
  - CURLSHOPT_SHARE.md: Mention multi-threading requires callbacks
  - DEPRECATE.md: Add VS2005 removal to the list
  - digest: Fix build with disabled digest auth
  - DISTROS: Update NixOS link
  - docs,tests: Fix english grammar "allow to" -&gt; "allow &lt;something&gt; to"
  - docs/CONTRIBUTE: Fix broken link
  - docs/examples: Add ftp-delete.c
  - docs: Beef up examples/websocket.c
  - docs: Fix broken link in CODE_REVIEW.md
  - docs: Fix broken link in INSTALL.md
  - docs: Fix docs for CURLOPT_PREQUOTE after #17616
  - docs: Fix documentation of connect_only 2
  - docs: Fix two typos
  - docs: Mention that the netrc file works without port numbers
  - docs: Mention the as-is concept generically
  - docs: Note SSLS-EXPORT feature in -ssl-sessions doc
  - docs: Reflect that delimiter-separated capath is only OpenSSL
  - docs: Sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
  - docs: Warn about lifetime in CURLOPT_CLOSESOCKET*
  - easy: Fix comment-documentation
  - easygetopt: Fix curl logo in header comment
  - firefox-db2pem: Avoid use of eval in script
  - ftp: Fix prequotes for a directory in URL
  - ftplistparser: Split parse_unix into sub-functions
  - h2_serverpush: Fix file handle leaks reported by clang-tidy
  - h3: Fix query of concurrent streams
  - http/3: Report handshake with version and cipher as for TCP connections
  - http2: Do not delay RST send on aborted transfer
  - http2: Fix var types in is_alive() implementations
  - http: Explicitly ignore parsing errors for Retry-After
  - http: Fix build with cookies and HSTS disabled
  - http_ntlm: Protect against null deref
  - http_ntlm: Remove unreachable code
  - INSTALL.md: Cygwin details and add source code link
  - ldap: Avoid automake caching issues with LDAP library names
  - ldap: If ldap-lib is sufficient, add it to LIBS
  - ldap: Initial support for --with-ldap option
  - lib2082: Drop 'typedef struct'
  - lib: Address singleuse issues
  - lib: Avoid reusing unclean connection
  - lib: Drop two interim macros in favor of native libcurl API calls
  - lib: Fix unused parameter/function compiler warnings
  - lib: Make 'CURLX_SET_BINMODE()' and use it
  - lib: Make 'curlx_wait_ms()' and use it
  - lib: Replace scache no-op macros with '#ifdef'
  - lib: Stop 'time()' debug overrides at the end of source in altsvc, hsts
  - lib: Unify recv/send function signatures
  - libcurl-env.md: Drop LOGNAME, USER and NTLMUSER
  - libcurl.m4: Fix indentation
  - libssh2: Remove use of 'initialised' for clean-up
  - libssh: De-complex myssh_statemach_act()
  - libssh: Fix readdir issues
  - libtests: Make tests 1503, 1504, 1505 use the 1502 binary
  - libtests: More header tidy-ups
  - libtests: Stop building the same source multiple times
  - memdebug.h: #undef 'fclose' before defining it
  - memdebug.h: Eliminate global macro 'CURL_MT_LOGFNAME_BUFSIZE'
  - memdebug: Include in unity batch
  - memory: Stop overriding unused 'wcsdup()'/'_wcsdup()' system functions
  - memory: Tidy up '_tcsdup()' override
  - misc: Fix typos
  - mk-lib1521: Replace 'printf' with 'curl_mprintf'
  - multi: Add dirty bitset
  - multi: Do not expire a blocked transfer
  - multi: Fix polling with pending input
  - multi: Remove careful bounds check as coverity says it is not needed
  - multi: xfer table/bitset, handle limits
  - ngtcp2: Fix coverity warning about result handling
  - openssl: Enable readahead
  - openssl: Error on SSL_ERROR_SYSCALL
  - openssl: Fix handling of buffered data
  - openssl: Fix openssl engine use
  - openssl: Fix pkcs11 provider available check
  - os400: Upgrade ILE/RPG bindings with latest definitions
  - pingpong: On disconnect, check for unflushed pingpong state
  - projects/build-openssl.bat: Remove
  - pytest: test_07_70, weaken early data check
  - pytest: Adapt for runs with openssl-1.1.1
  - pytest: Disable test_07_37 and test_07_36 with openssl's quic
  - quic: Implement CURLINFO_TLS_SSL_PTR
  - RELEASE-PROCEDURE.md: Update docs/VERSIONS
  - runtests.pl: Fix sprintf() using one too many %s
  - runtests: Fix 'LD_PRELOAD' detection for cmake-built curl binaries
  - runtests: Support memory-limits per test
  - rustls: Apply memory function overrides, fixing an ECH buffer free
  - rustls: Don't try printing the not provided file
  - schannel: Allow partial chains for manual peer verification
  - schannel: Drop Windows 2000 compatibility logic
  - scorecard: Flame graphs and documentation
  - SCP/SFTP: Avoid busy loop after EAGAIN
  - scripts: Fix to quote the copyright email address
  - socks: Fix query when filter context is null
  - system.h: Remove some macros
  - test1117: Reduce write delays
  - test1175: Fix to run, and fix documentation issues detected
  - test1222: Fix for out-of-tree and no-libcurl-manual builds
  - test1499, 1599: use '%LOGDIR'
  - test1499: Verify two chunked responses on reused connection
  - test1596: Let test pass after year 2036
  - test1706: Pass include directory to 'managen' for out-of-tree builds
  - tests/client: Drop autotools logic no longer necessary
  - tests/client: Use 'curl_mfprintf()'
  - tests/dnsd: Read config from file
  - tests/http/clients: Drop hack and use 'curl_setup.h' again
  - tests/http/clients: Move to tests/client
  - tests/http/requirements: Remove multipart
  - tests/libtest: Call 'curlx_now_init()' for unit 1399, 2600 (Windows)
  - tests/libtest: Drop 'TEST_HANG_TIMEOUT' redefinition hack
  - tests/libtest: Drop a checksrc exception
  - tests/libtest: Use 'curltime' from curlx
  - tests/server/util.c: Include netinet/in6.h
  - tests/server: De-dupe/merge three 'sockdaemon()' clones into one
  - tests/server: Drop 'memdebug.h'
  - tests/server: Make all global vars/funcs static
  - tests/server: Move memory init to 'memptr.c'
  - tests/servers.pm: Add more ways to figure out current user
  - tests: Always make bundles, adapt build and tests
  - tests: Bundle http clients, de-dupe, enable for MSVC
  - tests: Constify, make consts static
  - tests: Drop 'BUNDLE_SRC' variable
  - tests: Drop mk-bundle exceptions
  - tests: Drop unused or redundant includes
  - tests: Drop useless "nodist_SOURCES" assignments
  - tests: Fail torture if !valgrind&amp;threaded resolver
  - tests: Fix 1301, 1308 to fail on error
  - tests: Fix 'BUNDLE' variable references in 'Makefile.am'
  - tests: Make all names &lt; 75 characters long
  - tests: Make individual test sources compile cleanly
  - tests: Make sshserver less verbose
  - tests: Move 'curlcheck.h' to libtest as 'unitcheck.h'
  - tests: Move GSS-API dynamic stub into debug-mode libcurl
  - tests: torture: Don't duplicate valgrind command
  - tests: Use %b64[] to base64 data
  - tests: Use %b64[] to base64 data in 2056, 2057
  - tftpd: Use 'CURLMIN()' macro
  - tidy-up: Replace '&lt;memdebug.h&gt;' with '"memdebug.h"' (src, units)
  - tls: Remove Curl_ssl false_start
  - tool1621: Drop unused internal libcurl headers
  - tool_getparam: Fix --ftp-pasv
  - tool_operate: Fix return code when --retry is used but not triggered
  - tool_paramhelp: Fix language in comments
  - top-complexity: Lower max allowed complexity threshold to 90
  - unit tests: Extract "private" prototypes at build time
  - unit1302: Expand the base64 encode/decode tests
  - url: Fix connection lifetime checks
  - url: Fix NULL deref with bad password when no user is provided
  - urlapi: Simplify and split into sub functions
  - urlapi: Use uppercase hex encoding
  - vauth: Move auth structs to conn meta data
  - vtls: Change send/recv signatures of tls backends
  - vtls: Fix a copy-pasted early data comment typo
  - vtls: Log rustls negotiated KEX group name
  - vtls: Prefer ciphersuite to cipher in msgs
  - vtls: Prefer rustls-ffi ciphersuite name API
  - VULN-DISCLOSURE-POLICY.md: Fix typos
  - VULN-DISCLOSURE-POLICY: All reports should be disclosed
  - VULN-DISCLOSURE-POLICY: Exclude not installed software
  - VULN-DISCLOSURE-POLICY: Minor language polish
  - warnless: Drop parts of the 'read'/'write' preprocessor hack (Windows)
  - warnless: Replace 'read()'/'write()' wrapper functions with macros (Windows)
  - windows: Drop redundant 'curl_wcsdup_callback' callback
  - windows: Fixup 'fopen()' in 'CURLDEBUG' builds
  - windows: Reduce/stop loading DLLs at runtime
  - wolfssl: Add support for ML_KEM hybrids
  - ws: Drop redundant 'CURL_EXTERN' from function definitions
  - xfer: Manage pause bits</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.0.cf" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.1.cf" date="1753617600">- Fix dependency on CA bundle when we don't use the old one at
  /etc/pki/tls/certs/ca-bundle.crt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
</package>
<package pkgid="7bf493bac6a33c86170f330adec6ef37399b996001257b849734b01c9f179b1c" name="libcurl-minimal" arch="i686">
  <version epoch="0" ver="8.17.0" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12.1-1.0.cf" date="1739448000">- Update to 8.12.1
  - All: Remove FIXME and TODO comments
  - asyn-thread: Fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: Fix HTTPS RR crash
  - asyn-thread: Fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: Survive a c-ares channel set to NULL
  - build: Add tool_hugehelp.c into IBMi build
  - checksrc.pl: Warn on FIXME/TODO comments
  - cmake/Find: Set '&lt;Modulename&gt;_FOUND' for compatibility when found via 'pkg-config'
  - cmake: Add integration tests, run them in CI
  - cmake: Always reference OpenSSL and ZLIB via imported targets
  - cmake: Avoid unnecessary '-L' for implicit link dirs
  - cmake: Drop 'LDAP_DEPRECATED=1' macro, to sync with autotools
  - cmake: Fix 'HAVE_GETHOSTBYNAME_R_*' detections with 'CURL_WERROR=ON'
  - cmake: Fix to detect 'HAVE_OPENSSL_SRP' in MSVC UWP builds
  - cmake: Fix/add missing feature detections for Windows/MS-DOS
  - cmake: Initialize variables where missing
  - cmake: Library order fixes for picky linkers (e.g. binutils 'ld')
  - cmake: Normalize before matching paths with syspaths
  - cmake: Respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: Respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - cmake: Save a line with 'CMAKE_C_IMPLICIT_LINK_DIRECTORIES' exclusion
  - cmake: Tidy up string append and list prepend syntax
  - configure/cmake: Check for realpath
  - configure/cmake: Set asyn-rr as feature only if httpsrr is enabled
  - content_encoding: #error on too old zlib
  - curl_global_sslset.md: Add SSL backend names
  - CURLOPT_SSH_KNOWNHOSTS.md: Strongly recommend using this
  - CURLSHOPT_SHARE.md: Adjust for the new SSL session cache
  - docs: Better explain multi-part byte range behaviour
  - docs: Use valid example domain names
  - generate.bat: Remove curl_get_line.c from the curlx file list
  - header.md: Mention 'Authorization:' and 'Cookie:' special treatment
  - imap: TLS upgrade fix
  - INTERNALS: Fix c-ares, as we actually support 1.6.0 or later
  - ldap: Drop support for legacy Novell LDAP SDK
  - lib: include necessary headers for 'inet_ntop'/'inet_pton'
  - lib: Silence LibreSSL collision warning on non-MSVC Windows
  - libssh2: Comparison is always true because rc &lt;= -1
  - libssh2: Raise lowest supported version to 1.2.8
  - libssh: Drop support for libssh older than 0.9.0
  - libssh: Silence '-Wconversion' with a cast (Windows 32-bit)
  - netrc: return code clean-up, fix missing file error
  - openssl-quic: Ignore ciphers for h3
  - openssl: Fix out of scope variables in goto
  - pop3: TLS upgrade fix
  - runtests: Fix the disabling of the memory tracking
  - runtests: Quote commands to support paths with spaces
  - scache: Add magic checks
  - smb: Silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - SPONSORS.md: Clarify that we don't promise goods or services
  - test1516: Avoid failure due to spaces in path
  - test2080: Simplify, avoid the null byte
  - tests: Fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
  - tidy-up: Make per-file 'ARRAYSIZE' macros global as 'CURL_ARRAYSIZE'
  - tool_cfgable: Sort struct fields by size, use bitfields for booleans
  - tool_getparam: Add "TLS required" flag for each such option
  - tool_progress: Fix percent output of large parallel transfers
  - tool_ssls: Switch to tool-specific get_line function
  - verbose.md: Mention how carriage-return might occur in headers
  - vquic: Make the "disable GSO" use infof, not failf
  - vtls: Fix multissl-init
  - vtsl: Eliminate 'data-&gt;state.ssl_scache'
  - wakeup_write: Make sure the eventfd write sends eight bytes
  - wolfssl: Silence compiler warning (MSVC 2019), simplify existing
- Use libssh2 rather than libssh for Fedora 28 and 29 builds since their
  versions of libssh are too old for curl now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.13.0-1.0.cf" date="1743595200">- Update to 8.13.0
  - curl: Add write-out variable 'tls_earlydata'
  - curl: Make --url support a file with URLs
  - gnutls: Set priority via --ciphers
  - IMAP: Add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: Add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: Add support for TLSv1.3 early data
  - rustls: Add support for CERTINFO
  - rustls: Add support for SSLKEYLOGFILE
  - rustls: Support ECH with DoH lookup for config
  - rustls: Support native platform verifier
  - var: Add a '64dec' function that can base64 decode a string
  - wolfssl: TLS early data support
  - addrinfo: Add curl macro to avoid redefining foreign symbols
  - asyn-thread: Avoid the separate 'struct resdata' alloc
  - asyn-thread: Avoid the separate curl_mutex_t alloc
  - asyn-thread: Do not allocate thread_data separately
  - asyn-thread: Remove 'status' from struct Curl_async
  - autotools: Fix 'dllmain.c' in unity builds
  - autotools: Fix 'libtest' bundle to depend on 'FIRSTFILES'
  - autotools: Use 'CURLDEBUG' to exclude TrackMemory code from unity
  - aws_sigv4: Cannot be used for proxy
  - aws_sigv4: Merge repeated headers in canonical request
  - aws_sigv4: Use strparse more for parsing
  - base64: Drop 'BUILDING_CURL' macro, always include in tests/server
  - build: Add Windows CE / CeGCC support, with CI jobs
  - build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls)
  - build: Do not apply curl debug macros to 'tests/server' by default
  - build: Drop unused 'getpart' tool
  - build: Enable -Wjump-misses-init for GCC 4.5+
  - build: Enable '-Wcast-qual', fix or silence compiler warnings
  - build: Fix compiler warnings in feature detections
  - build: Replace Curl_ prefix with curlx_ for functions used in servers
  - build: Set '-O3' and tune WinCE in CI, fix 'getpart', 'vtls_scache' fallouts
  - build: Set 'HAVE_STDINT_H' if 'stdint.h' is available
  - build: Set 'HAVE_WRITABLE_ARGV' for Apple cross-builds
  - build: Silence bogus '-Wconversion' warnings with gcc 5.1-5.4
  - build: Silence mingw32ce C99 format warnings, simplify CI
  - build: Tidy-ups around 'inet_pton'
  - c-ares httpsrr: Fix ifdef
  - c-ares: Error out for unsupported versions, drop unused macros
  - ca-native.md: Sync with CURLSSLOPT_NATIVE_CA
  - cf-socket: Deduplicate Windows Vista detection
  - cf-socket: Remove empty switch
  - client writer: Handle pause before decoding
  - cmake: 'CURL_LIBDIRS' improvements (upstreamed from vcpkg)
  - cmake: 'SHARE_LIB_OBJECT=ON' requires CMake 3.12 or newer
  - cmake: Add custom command scripts as dependencies where missing
  - cmake: Add pre-fill for Unix, enable in GHA/macos, verify pre-fills
  - cmake: Add shell completion support
  - cmake: Allow 'CURL_STATIC_CRT' with shared libcurl and no curl exe
  - cmake: Allow 'CURL_STATIC_CRT' with UCRT VS2015+ builds
  - cmake: Allow empty 'IMPORT_LIB_SUFFIX', add suffix collision detection
  - cmake: Avoid '-Wnonnull' warning in 'HAVE_FSETXATTR_5' detection
  - cmake: Disable HTTPS-proxy as a feature if proxy is disabled
  - cmake: Drop 'CURL_DISABLE_TESTS' option
  - cmake: Drop 'HAVE_C_FLAG_Wno_long_double' logic for ancient Apple gcc
  - cmake: Drop 'HAVE_IN_ADDR_T' from pre-fill too
  - cmake: Drop two stray TLS feature checks for wolfSSL
  - cmake: Exclude '-MP' for 'clang-cl' again
  - cmake: Fix 'HAVE_ATOMIC'/'HAVE_STDATOMIC' pre-fill for clang-cl
  - cmake: Fix clang-tidy builds to verify tests, fix fallouts
  - cmake: Fix detection pre-fills for iOS
  - cmake: Fix ECH detection in custom-patched OpenSSL
  - cmake: Fix typo in ECH config error msg
  - cmake: Hide empty 'MINGW64_VERSION' output for mingw32ce
  - cmake: Improve httpd detection for pytest
  - cmake: Mention 'insecure' in the debug build warning
  - cmake: Misc tidy-ups
  - cmake: Pre-fill known type sizes for Windows OSes
  - cmake: Replace CMAKE_COMPILER_IS_GNUCC with CMAKE_C_COMPILER_ID
  - cmake: Replace exec_program() with execute_process()
  - cmake: Restrict static CRT builds to static curl exe, test in CI
  - cmake: Sync cutoff version with autotools for picky option '-ftree-vrp'
  - cmake: Sync OpenSSL(-fork) feature checks with './configure'
  - cmake: Unity mode optimization for non-'CURLDEBUG' 'testdeps' targets
  - CODE_STYLE: Readability and banned functions
  - config-win32: Set 'HAVE_STDINT_H' where available
  - configure: Call the blocking resolver "blocking", not "default"
  - configure: Fix ECH detection with MultiSSL
  - configure: Silence compiler warnings in feature checks, drop duplicates
  - configure: Tidy up shell completion rules
  - configure: Use 'curl_cv_apple' variable
  - conn: Eliminate 'conn-&gt;now'
  - conn: Fix connection reuse when SSL is optional
  - conncache: Eliminate 'conn-&gt;destination_len' as premature optimization
  - contributors.sh: Lowercase 'github' for consistency
  - contrithanks.sh: Update docs/THANKS in place
  - cookie: Do prefix matching case-sensitively
  - cookie: Minor parser simplification
  - cookie: Simplify invalid_octets()
  - core: Stop redefining 'E*' macros on Windows, map 'EACCES', related fixes
  - curl.h: Change some enums to defines with L suffix
  - curl.h: Convert CURLUSESSL* names to defines
  - curl.h: Stop defining non-curl '__has_declspec_attribute'
  - curl.h: Switch 'CURL_HTTP_VERSION*' enums to long constants
  - curl/system.h: Drop leftover comment about 32 bit curl_off_t
  - curl: Add my_setopt_long() and _offt()
  - curl_msh3: Remove verify bypass from DEBUGBUILDs
  - curl_setup: Drop 'ERANGE' (for WinCE), no longer used
  - curl_setup_once: Drop 'E*' macro redefines unused (with winsock2)
  - curl_setup_once: Stop redefining 'ENAMETOOLONG' to winsock2 error code
  - curl_trc: Fix build with CURL_DISABLE_VERBOSE_STRINGS
  - curl_ws_recv.md: Expand a little on the fragments the API delivers
  - CURLMOPT_SOCKETFUNCTION.md: Add advice for socket callback invocation
  - CURLOPT_HTTPHEADER.md: Add comments to the example
  - CURLOPT_HTTPHEADER.md: Rephrases
  - curltime: Use libcurl time functions in src and tests/server
  - DISABLED: Add 313 for sectransp (move from GHA/macos)
  - docs/cmdline-opts: Use imperative form
  - docs: Adapt to removed --with-random
  - docs: Add FD_ZERO to curl_multi_fdset example
  - docs: Bump 'rustls' to 0.14.1
  - docs: Correct argument names and URL redirection
  - docs: Minor edits to please the new spellchecker regime
  - docs: Rework RUSTLS install instructions
  - docs: Unify HTTP version style in --help output
  - docs: Vulnerabilities in debug code are not eligible for a bounty
  - doh: Improve HTTPS RR svcparams parsing
  - doh: Remove wrong but unreachable exit path from doh_decode_rdata_name
  - dynbuf: Assert init on free
  - easy: Drop 'break' after 'return'
  - easy: Fix warning about possible comma misuse
  - eventfd: Allow use on all CPUs
  - examples: Prefer 'return' over 'exit()' (cont.)
  - ftp/sftp: strdup data info memory
  - ftp: Fix comment
  - gnutls: Fix connection state check on handshake
  - gnutls: Fix use of pkcs11 urls for keys/certs
  - gtls: Fix uninitialized variable
  - hash: Use single linked list for entries
  - hostip: Don't use alarm() for DoH resolves
  - hostip: Make CURLOPT_RESOLVE support replacing IPv6 addresses
  - http2: Add on_invalid_frame callback for error detection
  - http2: Detect session being closed on ingress handling
  - http2: Enhance error messages on Curl_dyn* upon receiving headers
  - http2: Fix stream assignemnt for pushes
  - http2: Reset stream on response header error
  - HTTP3.md: Only speak about minimal versions
  - http: Convert parsers to strparse
  - http: Fix NTLM info message typo
  - http: Fix the auth check
  - http: Make the RTSP version check stricter
  - http: Negotiation and room for alt-svc/https RR to navigate
  - http: Remove a HTTP method size restriction
  - http: Version negotiation
  - http_chunks: Replace a strofft call with curl_str_hex
  - https-rr: Implementation improvements
  - httpsrr: Fix port detection
  - httpsrr: Fix the HTTPS-RR threaded-resolver build combo
  - INFRASTRUCTURE.md: Add IRC and Matrix details
  - INSTALL-CMAKE.md: CMake usage updates
  - INSTALL-CMAKE.md: mention 'ZLIB_USE_STATIC_LIBS'
  - lib1156: Pass longs to 'curl_easy_setopt()'
  - lib1560: Test set path containing LR or CR
  - lib2302: Fix crash due to stack overflow on MSVC and clang Windows
  - lib696: Fix building on Windows in non-bundle mode
  - lib: Better optimized casecompare() and ncasecompare()
  - lib: Clear up CURLRES_ASYNCH vs. USE_CURL_ASYNC use
  - lib: Fix two curlx_strtoofft invokes
  - lib: Rename curlx_strtoofft to Curl_str_numblanks()
  - lib: Replace while(ISBLANK()) loops with Curl_str_passblanks()
  - lib: Simplify more white space loops
  - lib: strtoofft.h header cleanup
  - lib: Use Curl_str_* instead of strtok_r()
  - lib: Use Curl_str_number() for parsing decimal numbers
  - libssh2: Fix freeing of resources in disconnect
  - libssh2: Fix memory leak in 'SSH_SFTP_REALPATH' state
  - libssh2: Fix to ignore 'known_hosts' if SHA256 host public key is set
  - libssh2: Print user with verbose flag
  - libssh2: Show crypto backend in the verbose connect log
  - libssh: Fix freeing of resources in disconnect
  - libssh: Fix scp large file upload for 32-bit size_t systems
  - libtest/first.c: Remove the Test: stderr output for unity builds
  - libtest/libprereq.c: Set CURLOPT_FOLLOWLOCATION with a long
  - managen: Accept more markdown-quote-markers
  - managen: Correct the warning for un-escaped '&lt;' and '&gt;'
  - mbedtls: Re-enable an error check
  - memdebug.h: Avoid '-Wredundant-decls' with an extra guard
  - memdebug: Drop dynamic allocation from 'curl_dbg_log()'
  - mprintf: Switch three number parsers to use strparse
  - mqtt: Convert sendleftovers to dynbuf
  - msvc: Drop support for VS2005 and older
  - multi: Call protocol handler done() if PROTOCONNECT or later
  - multi: Event based rework
  - multi: Kill off remaining internal handles in curl_multi_cleanup
  - multi: Start the loop over when handles are removed
  - multi_ev: Fixes regarding connection shutdowns
  - ngtcp2: Do not iterate over multi handles
  - ntlm: Merge ntlm.h into ntlm.c
  - openssl-quic: Do not iterate over multi handles
  - openssl: Check return value of X509_get0_pubkey
  - openssl: Drop support for old OpenSSL/LibreSSL versions
  - openssl: Fix crash on missing cert password
  - openssl: Fix pkcs11 URI checking for key files
  - openssl: Remove bad 'goto's into other scope
  - prox/preproxy.md: Document argument within &lt;brackets&gt;
  - pytest: Test negotiate with http proxy
  - quiche: Do not iterate over multi handles
  - RELEASE-PROCEDURE.md: Explain release candidates
  - request: Clear sendbuf_hds_len when resetting request bufq
  - resolve: Fix building without Unix sockets and 'CURLDEBUG'
  - runtests: Accept 'CURL_DIRSUFFIX' without ending slash
  - runtests: Add feature-based filtering
  - runtests: Check and report if 'diff' tool is missing
  - runtests: Drop logic calling the 'handle' tool (Windows)
  - runtests: Drop recognizing 'winssl' as Schannel
  - runtests: Drop ref to unused external function
  - runtests: Fix bundled test invocation with '-g' option
  - runtests: Fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs
  - runtests: Fix test key format for libssh2 WinCNG (and others)
  - runtests: Generate certs dynamically, bump to EC-256, tidy up
  - runtests: Recognize AWS-LC as OpenSSL
  - runtests: Rewrite 'genserv.sh' in Perl
  - runtests: Support multi-target cmake, drop workarounds from CI
  - runtests: Support running tests under wine or qemu (cont.)
  - runtests: Support running tests under wine or qemu
  - runtests: Use 'setfacl' on Cygwin/MSYS, if present
  - rustls: Add ECH support with string ECH config
  - rustls: Cap maximum allowed CRL file size to 8MB
  - rustls: Support ECH GREASE
  - rustls: Use client cert and key if available
  - schannel: Deduplicate Windows Vista detection
  - schannel: Enable ALPN support under WINE 6.0+
  - schannel: Enable ALPN with MinGW, fix ALPN for UWP builds
  - schannel: Guard ALPN init code to ALPN builds
  - scripts/managen: Fix option 'single'
  - scripts/managen: Fix parsing of markdown code sections
  - scripts: Update completion.pl to parse options from docs
  - sectransp: Add support for HTTP/2 in gcc builds
  - sendf: Client reader line conversion: do not change data-&gt;state.infilesize
  - setopt: Illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: Remove unnecessary void pointer typecasts
  - setopt: Setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - shutdowns: Split shutdown handling from connection pool
  - socks: Remove bad assert from do_SOCKS5()
  - src: Avoid strdup on platforms not doing UTF-8 conversions
  - src: Clean-up ISBLANK vs. ISSPACE
  - src: Remove Curl_ prefix from tool-specific function
  - src: Remove final uses of Curl_ symbol prefixes in tool code
  - src: Replace strto[u][ld] with curlx_str_ parsers
  - ssh: Consider sftp quote commands case sensitive
  - sshserver.pl: Adjust 'AuthorizedKeysFile2' cutoff version
  - sshserver.pl: Use Perl 'chmod'
  - sshserver: Fix excluding obsolete client config lines
  - ssl session cache: Add exportable flag
  - SSLCERTS: List support for SSL_CERT_FILE and SSL_CERT_DIR
  - strparse: Make Curl_str_number() return error for no digits
  - strparse: Switch the API to work on 'const char *'
  - strparse: Switch to curl_off_t as base data type
  - test1022: Add support for rc releases
  - test1167: Catch #defines with extra whitespace
  - test313: Disable CRL test for Schannel due to lack of support and flakiness
  - test313: Disable via '&lt;features&gt;' for backends without CRL support
  - test489: Set output dir
  - test612: SCP 'rm' the uploaded remote file (not the local source), unignore in CI
  - test613: Make it pass on Windows, fix postprocess, unignore in CI
  - test615: Fix for Cygwin, unignore in CI
  - tests/certs: Clean up
  - tests/server: Drop unused 'base64.pl'
  - tests/server: Fix to check against winsock2 error codes on Windows
  - tests/server: Give global 'path' variable a more descriptive name
  - tests/server: Make the signal handler signal-safe
  - tests/server: Replace 'errno' with 'SOCKERRNO' in sockfilt, socksd, sws
  - tests/server: Replace 'strerror' with 'sstrerror' in socksd
  - tests/server: Support bundle binary
  - tests/server: Sync 'wait_ms()' with the libcurl implementation
  - tests/server: Use 'curlx_str_numblanks()' to avoid 'errno'
  - tests/servers.pm: Remove unused variable 'portrange'
  - tests: Build non-debug unit tests with autotools, run them
  - tests: Fix comment in lib533
  - tests: Fix enum/int confusion, fix autotools 'CFLAGS' for 'servers'
  - tests: Make sure 'commands.log' is generated in the correct logdir
  - tests: Mark tests 1631, 1632 flaky
  - tests: Reformat error messages to avoid tripping MSBuild
  - tests: Remove base64 encoded sections
  - tests: Remove unused variables
  - tests: Replace remaining non-ASCII bytes with hex markup
  - tftpd: Prefix TFTP protocol error 'E*' constants with 'TFTP_'
  - tidy-up: Align MSYS2/Cygwin codepaths, follow Cygwin 'MAX_PID' bump
  - tidy-up: Delete, comment or scope C macros reported unused
  - tidy-up: Drop unused 'CURL_INADDR_NONE' macro and 'in_addr_t' type
  - tidy-up: Use 'CURL_ARRAYSIZE()'
  - timediff: Fix comment for curlx_mstotv()
  - timediff: Remove unnecessary double typecast
  - tool_dirhie: Create dir hierarchy without strtok
  - tool_getparam: Clear sensitive arguments better
  - tool_getparam: Do parse_upload_flags without the alloc/free
  - tool_getparam: Parse --trace-config without strdup()/free()
  - tool_getparam: parse_header() without strtok
  - tool_operate: Change "1 retries" to "1 retry"
  - tool_operate: Fail SSH transfers without server auth
  - tool_operate: Fix pluralization of seconds
  - tool_operate: Remove unnecessary (long) typecasts
  - tool_paramhlp: Do --proto parsing without strtok
  - tool_parsecfg: Make my_get_line skip comments and newlines
  - tool_setopt: Reduce use of "code hiding" macros
  - url: Call protocol handler's disconnect in Curl_conn_free
  - urlapi: Fix redirect from file:// with query, and simplify
  - urlapi: Remove percent encoded dot sequences from the URL path
  - urlapi: Simplify junkscan
  - urldata: Remove 'hostname' from struct Curl_async
  - variable.md: Clarify 'trim' example
  - vquic: Obey IOV_MAX
  - vtls: Fix compiler warnings seen with gcc 7.3.0 and mbedTLS
  - winbuild: Reduce command-line length by dropping whitespace
  - windows: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - windows: Drop code and curl manifest targeting W2K and older
  - windows: Fix issues detected by clang-tidy, and some more
  - wolfssh: Fix freeing of resources in disconnect
  - wolfssh: Retrieve the error using wolfSSH_get_error
  - wolfssl: Fix CA certificate multiple location import
  - wolfssl: Fix unused variable warning
  - wolfssl: Warn if CA native import option is ignored
  - wolfssl: When using PQ KEM, use ML-KEM, not Kyber
  - ws: Corrected curlws_cont to reflect its documented purpose
  - ws: Fix and extend CURLWS_CONT handling
  - zlib: Bump minimum to 1.2.5.2 (was: 1.2.0.4)
- BR: openssl, needed for cert generation in test suite
- Drop "compat" build support in spec
- Drop legacy ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.0.cf" date="1748433600">- Update to 8.14.0
  - mqtt: Send ping at upkeep interval
  - schannel: Handle pkcs12 client certificates containing CA certificates
  - TLS: Add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: Import v2025.04.20 script and documentation
  - websocket: Add option to disable auto-pong reply
  - _SEEALSO.md: Remove spaces around command and man page section
  - asny-thrdd: Fix detach from running thread
  - asnyc-thrdd: Explain how this is okay with a comment
  - async resolver code improvements
  - async-threaded resolver: Use ref counter
  - async: DoH improvements
  - autotools: Detect 'wolfSSL_set_quic_use_legacy_code' like cmake does
  - autotools: Install shell completion files on cross build
  - aws-sigv4: Allow a blank string
  - build: Check required rustls-ffi version
  - build: Enable gcc-12/13+, clang-10+ picky warnings
  - build: Enable gcc-15 picky warnings
  - certs: Drop unused 'default_bits' from '.prm' files
  - cf-https-connect: Use the passed-in dns struct pointer
  - cf-socket: Fix FTP accept connect
  - cfilters: Remove assert
  - cmake/FindNGTCP2: Simplify multi-pkg-config detection
  - cmake: Append picky warnings to 'CMAKE_REQUIRED_FLAGS' as string
  - cmake: Avoid 'target is imported but not globally visible' when consuming
    libcurl with old cmake
  - cmake: Do not install 'mk-ca-bundle' script and manpage
  - cmake: Enable '-Wall' for MSVC when 'PICKY_COMPILER=ON'
  - cmake: Extend integration tests
  - cmake: Fix 'fish' install directory detection via 'pkg-config'
  - cmake: Fix nghttp3 static linking with 'USE_OPENSSL_QUIC=ON'
  - cmake: Fix option() and mark_as_advanced() mixed order
  - cmake: Fix shell completion install when just one flavour is enabled
  - cmake: Honour individual picky option overrides found in 'CMAKE_C_FLAGS'
  - cmake: Install shell completions for cross-builds
  - cmake: Link 'crypt32' for OpenSSL feature detection
  - cmake: Merge 'CURL_WERROR' logic into 'PickyWarnings.cmake'
  - cmake: Prefer 'COMPILE_OPTIONS' over 'CMAKE_C_FLAGS' for custom C options
  - cmake: Quotes, whitespace, use 'VERSION_GREATER_EQUAL'
  - cmake: Revert 'CURL_LTO' behaviour for multi-config generators
  - cmake: Set 'BUILDING_LIBCURL' directly for unit test targets
  - cmake: Stop deleting '-W&lt;n&gt;' from 'CMAKE_C_FLAGS' (MSVC)
  - cmake: Tidy up and document feature detections in dependencies
  - cmake: Use 'CMAKE_COMPILE_WARNING_AS_ERROR' if available
  - cmake: Use 'INCLUDE_DIRECTORIES' prop to specify local header dirs
  - cmake: Use 'LIB_NAME' in 'curl-config.cmake.in'
  - cmake: Use absolute paths for completion targets
  - cmake: Use the 'LINK_OPTIONS' property with CMake 3.13+
  - configure: Catch asking for double resolver without https-rr
  - configure: Fix --disable-rt
  - configure: Restore link checks
  - configure: Suppress command not found for brew
  - conncache: Make Curl_cpool_init return void
  - connect: Shutdown timer fix
  - content_encoding: Transfer-Encoding parser improvements
  - CONTRIBUTE: Add project guidelines for AI use
  - contrithanks.sh: Drop set -e
  - cpool/cshutdown: Force close connections under pressure
  - curl: Fix memory leak when -h is used in config file
  - curl: Only warn once for --manual in manual-disabled build
  - curl_get_line: Handle lines ending on the buffer boundary
  - curl_krb5: Only use functions if FTP is still enabled
  - curl_multibyte: Fix up low-level calls, include in unity builds
  - curl_osslq: Remove a leftover debug fprintf() call
  - curl_url_get.md: Don't call it normalized
  - curl_version_info.md: Clarify ssl_version for MultiSSL
  - CURLMOPT_TIMERFUNCTION.md: Correct the example
  - CURLOPT_ERRORBUFFER.md: Buffer is read only after curl takes ownership
  - CURLOPT_FOLLOWLOCATION.md: Switch to GET =&gt; no body
  - CURLOPT_READFUNCTION.md: Mention the seek callback
  - CURLOPT_XFERINFOFUNCTION.md: Fix the callback return type in example
  - curlx: Move the docs to docs/internals/
  - DEPRECATE.md: Drop support for VS2008
  - DEPRECATE.md: Drop Windows CE support
  - dist: Drop duplicate entry from 'CMAKE_DIST'
  - dns_entry: Move from conn to data-&gt;state
  - Dockerfile: Update debian:bookworm-slim Docker digest to 90522ee
  - docs/INSTALL.md: Drop reference to removed configure option
  - docs/libcurl: Fix type and prototype problems in examples
  - docs/libcurl: Make examples build with picky compiler options
  - docs/libcurl: Mention sensitive data/headers
  - docs: Add missing return statement in examples
  - docs: Fix incorrect shell substitution in docker run example command
  - docs: Fix typo in retry.md
  - docs: Update distros links
  - doh: httpsrr fix
  - doh: Make sure CURLOPT_PROTOCOLS is set with a "long" arg
  - doh: Reduce the DNS request buffer size
  - easy_reset: Fix dohfor_mid member
  - ECH: Reference the OpenSSL ECH feature branch
  - etag-save.md: Mention how using both options is a good idea
  - eventfd: Fix feature guards
  - formdata: Clean-ups
  - ftp: Fix bug in failed init
  - ftp: Fix race in upload handling
  - ftplistparser: Add two overflow preventions
  - ftplistparser: Split up into more functions
  - generate.bat: Exclude curlinfo.c from legacy VS projects
  - genserv.pl: Fail with a message if 'openssl' is missing or failing
  - headers: Enforce a max number of response header to accept
  - headers: Set an error message on illegal response headers
  - hostip: Fix build without threaded-resolver and without DoH
  - hostip: Show the correct name on proxy resolve error
  - http2: Fix stream window size after unpausing
  - HTTP3.md: Fix incorrect variable placeholders
  - http: Fix a build error when all auths are disabled
  - http: Fix HTTP/2 handling of TE request header using "trailers"
  - http: In alt-svc negotiation only allow supported HTTP versions
  - http_aws_sigv4: Add additional verbose log statements
  - http_aws_sigv4: Improve sigv4 url encoding and canonicalization
  - http_chunks: Narrow variable scope for 'trlen'
  - http_negotiate: Fix non-SSL build with GSSAPI
  - https-connect: Fix httpsrr target check
  - HTTPSRR.md: Clarify somewhat
  - if2ip: Build the function also if FTP is present
  - imap: Remove redundant condition
  - INSTALL-CMAKE.md: Fix typo
  - INSTALL.md: Update the minimal libcurl size example
  - KNOWN_BUGS: Fix link in sivg4 issue 16.3
  - lib/src/docs/test: Improve curl_easy_setopt() calls
  - lib1560: Use hex notation, drop non-ASCII exception
  - lib3026: Drop DLL pre-load perf mitigation for old mingw
  - lib: Add const to clientwriter tables
  - lib: Drop curlx_getpid, use fake pid in SMB
  - lib: Include files using known path
  - lib: Make Curl_easyopts const
  - lib: Unify conversions to/from hex
  - libcurl-tutorial.md: Fix read callback explanation
  - libssh: Add NULL check for Curl_meta_get()
  - libssh: Fix memory leak
  - libssh: Remove a condition that always equals false
  - libtest/first: Stop defining MEMDEBUG_NODEFINES
  - libtests: Define CURL_DISABLE_DEPRECATION first
  - make: Clean tests better
  - mbedtls: TLS 1.3 is max when mbedtls has 1.3 support
  - metahash: Add asserts to help analyzers
  - mk-ca-bundle.pl: Follow redirects
  - mk-ca-bundle: Switch URLs to GitHub versions
  - mkhelp: Fix to not generate a line-ending space in some cases
  - mqtt: Use conn/easy meta hash
  - multi: Do transfer book keeping using mid
  - multi: init_do(): Check result
  - netrc: Avoid NULL deref on weird input
  - netrc: Avoid strdup NULL
  - netrc: Deal with null token better
  - ngtcp2: Clarify ignoring of result
  - openssl-quic: Avoid potential '-Wnull-dereference', add assert
  - openssl-quic: Fix printf mask
  - openssl-quic: Fix shutdown when stream not open
  - openssl: Enable builds for *both* engines and providers
  - openssl: Set the cipher string before doing private cert
  - parsedate: Provide Curl_wkday also for GnuTLS builds
  - processhelp.pm: Always call 'taskkill' with '-f' (force)
  - processhelp.pm: Avoid potential endless loop, log more (Windows)
  - progress: Avoid integer overflow when gathering total transfer size
  - pytest tls: Extend coverage (fixes WolfSSL cert validation, CVE-2025-4947)
  - pytest-xdist: pytest in parallel
  - pytest: Add pinnedpubkey test cases (fixes WolfSSL pinning, CVE-2025-5025)
  - pytest: Give parameterised tests better ids for read- and parsability
  - pytest: Make test_07_22 more lenient to exit codes
  - quic: No local idle connection timeout, ngtcp2 keep-alive
  - rand: Update comment on Curl_rand_bytes weak random
  - RELEASE-PROCEDURE.md: Release candidate git tagging explained
  - rtsp: Remove redundant condition
  - runtests: Add retry option to reduce flakiness
  - runtests: Fix indentation
  - runtests: Recognize lowercase 'windows' in 'curl -V'
  - runtests: Remove server verification after start
  - runtests: Split 'SSH_PWD' into 'SCP_PWD' and 'SFTP_PWD', and more
  - rustls: Make max size of cert and key reasonable
  - sasl: Give help when unable to select AUTH
  - scripts: completion.pl: Sort the completion file for all shells
  - scripts: Drop unused import, formatting
  - scripts: Fix --opts-dir help in completion.pl
  - scripts: Fix perl indentation, whitespace, semicolons
  - sectransp: Fix building for macOS Sierra and older
  - setopt: Provide info for CURLE_BAD_FUNCTION_ARGUMENT
  - smb: Avoid integer overflow on weird input date
  - socket: Use accept4 when available
  - socketpair: Support pipe2 where available
  - spacecheck.pl: Check for non-ASCII chars, fix fallouts
  - spacecheck.pl: Verify 'tests/data/test*' for non-ASCII chars
  - src: Drop strcase.[ch] from tool builds
  - src: Include memdebug.h consistently with angle brackets &lt;&gt;
  - src: Rename curlx_safefree to tool_safefree
  - test1173.pl: Whitelist some option-looking names that aren't options
  - test1658: Add unit test for the HTTPS RR decoder
  - test: Make unittest 1308 into a libtest
  - tests/ech_tests.sh: Sync shebang with rest of bash scripts
  - tests/FILEFORMAT.md: Clarify %hex[] formatting
  - tests/FILEFORMAT.md: Document the aws feature
  - tests/README.md: Document --test-duphandle
  - tests/README.md: List the openssl tool among the prerequisites
  - tests/server/dnsd: Basic DNS server for test suite
  - tests/server: Check for 'stream != NULL' in mqttd
  - tests/server: Fix typo in comment
  - tests/server: Stop using libcurl string comparisons
  - tests/server: Stop using libcurl's printf functions
  - tests/serverhelp: Remove last remnants of http-pipe server
  - tests/tunit: Make a separate directory for tool-based unit tests
  - tests: Add aws feature to the related tests
  - tests: Add https-mtls server to force client auth
  - tests: Fix some test tag mismatches
  - tests: Mark ipfs tests to require ipfs
  - tests: Move a boolean variable out of the path section
  - tests: Prefer '--insecure' over '-k'
  - tests: Provide all non-ascii data hex encoded
  - tests: Remove some unused test case sections
  - tests: Require IPv6 for 1265, 1324, 2086
  - tests: Separate tunit tests from unit tests more
  - tests: Stop using libcurl's strdup
  - tests: Unify test case keywords
  - tests: Use a more portable null device path
  - TODO: Remove "nicer lacking perl message"
  - tool_cb_write.c: Handle EINTR on flush
  - tool_getparam: Clear argument only when needed
  - tool_operate: Make retrycheck() a separate function
  - tool_operate: When retrying, only truncate regular files
  - tool_paramhlp: Avoid integer overflow in secs2ms()
  - tool_parsecfg: Make get_line handle lines ending on the buffer boundary
  - typecheck-gcc.h: Fix the typechecks
  - urlapi: Redirecting to "" is considered fine
  - urlapi: Remove unneeded guards around PUNY2IDN
  - urldata: Remove the unused struct field 'hide_progress'
  - VERSIONS: List all past releases
  - vquic: Consistent name for the stream struct across backends
  - vquic: Init for every call to recvmsg
  - vtls: Avoid NULL deref on bad PEM input
  - vtls: Fix build with ssl but without http
  - VULN-DISCLOSURE-POLICY: Use of weak algos
  - winbuild: Add the deprecation warning to the README
  - winbuild: curl_get_line is not used for tool builds
  - windows: Fix builds targeting WinXP, test it in CI
  - wolfssl: Fix to enable ALPN when available
  - ws: Fix the header replace check
  - ws: Store protocol context as connection meta data</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.1.cf" date="1748520000">- Fix regression: curl_multi_add_handle() returning OOM when using more than
  400 handles (GH#17475)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.1-1.0.cf" date="1749038400">- Update to 8.14.1
  - asyn-thrdd: Fix clean-up when RR fails due to OOM
  - autotools: Recognize more Linux targets when setting '-D_GNU_SOURCE'
  - BUG-BOUNTY.md: Mention the medium bounty amount in 2025
  - cmake: Fix missed version number for multi-pkg-config detections
  - cmdline-docs: Mention HTTP resumed uploads to be shaky
  - curl: make -N handled correctly
  - curl: Upload from '.' fix
  - dllmain: Exclude from Cygwin builds
  - docs/tests: Remove mention of hyper
  - docs: Fix typos
  - ftp: Fix teardown of DATA connection in done
  - http: Fail early when rewind of input failed when following redirects
  - license: Update some copyright links to curl.se
  - memanalyze.pl: Fix getaddrinfo/freeaddrinfo checks
  - misc: Fix spelling
  - misc: We write *an* IPv6 address
  - multi: Fix add_handle resizing
  - spelling: 'a' vs. 'an'
  - spelling: Call it null-terminate consistently
  - test1510: Fix expectation
  - tests: Await portfile to be complete
  - tests: Fix checks for https-mtls proto
  - tests: Improve server start reliability
  - tests: Move test docs into /docs
  - tests: Re-enable 1510, document heimdal memleak
  - tests: Test mtls also w/ clientAuth EKU only
  - tests: Test mtls with --insecure
  - tls BIOs: Handle BIO_CTRL_EOF correctly
  - tool_getparam: Make --no-anyauth not be accepted
  - tool_getparam: Refactored, simplified
  - tool_getparam: Remove two nextarg NULL checks
  - VULN-DISCLOSURE-POLICY.md: The distros list wants ≤ 7 days embargo
  - wolfssl: Fix sending of early data
  - ws: Handle blocked sends better (CVE-2025-5399)
  - ws: Tests and fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-1.0.cf" date="1752667200">- Update to 8.15.0
  - TLS: Remove support for Secure Transport and BearSSL
  - altsvc: Accept 'clear' without semicolon as well
  - asyn-ares: Remove redundant NULL check
  - asyn-thrdd: Free the previous name before strdup'ing the new
  - autotools: Detect and link 'brotlicommon' library for brotli
  - autotools: Drop '$top_builddir/src' from src header path
  - autotools: Drop headers from src mk-unity rules (fixup)
  - autotools: Drop no longer necessary '--srcdir' unity options
  - autotools: Drop redundant 'Makefile.inc' from 'EXTRA_DIST' in src
  - autotools: Simplify configuration in tests, examples
  - bufq: Change read/write signatures
  - bufq: Remove the unused Curl_bufq_unwrite function
  - build: Assume 'sys/socket.h', 'sys/time.h' on non-Windows (as in 'curl/curl.h')
  - build: Drop 'HAVE_SYS_SOCKET_H' and 'HAVE_SYS_TIME_H' macros
  - build: Drop explicit curlx from hdr paths, refer headers with 'curlx/' prefix
  - build: Drop unused variables in tests
  - build: Fix libcurltool with cmake and tunits, related tidy-ups
  - build: Split '.c' and '.h' file lists in tests
  - build: Stop checking for 'sys/stat.h'
  - build: stubgss tidy-ups (in tests)
  - build: Sync build scripts between client/libtest
  - build: Tidy up 'Makefile.inc' use in lib and src
  - build: Tidy up header paths, use srcdir where possible
  - cf-socket: Make socket data_pending a no-op
  - checksrc-all: Rewrite in Perl, remove 'checksrc.bat'
  - checksrc: Reduce exceptions, apply again to curlx
  - cmake/FindGSS: Fix processing C header path options
  - cmake/FindGSS: Initialize result variables
  - cmake: 'curl_add_clang_tidy_test_target' tidy-ups
  - cmake: Build 'stubgss' library for libtests to match autotools
  - cmake: Check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
  - cmake: Configure c-ares header directory in project root (was: lib)
  - cmake: Document OpenSSL and ngtcp2 crypto lib custom variables
  - cmake: Drop never-propagated C macros
  - cmake: Drop passing redundant 'CURL_STATICLIB' in examples and clients
  - cmake: Drop redundant macro from test clients
  - cmake: Drop reference to future variable
  - cmake: Enable soversion by default for OpenHarmony OS
  - cmake: Fix 'curl_add_clang_tidy_test_target' when no '-D' option
  - cmake: Fix generator expression in docs/examples
  - cmake: Gather options recursively in 'curl_add_clang_tidy_test_target'
  - cmake: Make docs depend on support files
  - cmake: Move 'OUTPUT' argument in the 'add_custom_command()' line
  - cmake: Omit clang-tidy on internal libs curlu and curltool
  - cmake: Replace 'cmakelint' with 'cmake-lint' from 'cmakelang', fix issues
  - cmake: Replace the way clang-tidy verifies tests, fix issues found
  - cmake: Simplify handling generated 'lib1521.c' in libtests
  - cmake: Sync 'target_link_libraries()' order in tests more
  - cmake: Sync tests scripts by using the variable 'BUNDLE'
  - cmake: Sync tests scripts with each other and autotools (more)
  - cmake: Use 'target_link_options()' when available
  - config-win32: Fix default targets, shorten macro logic
  - configure: Order LDAP after the SSL libraries
  - connect: Drop unused struct member
  - connection: Clarify 'transport'
  - connection: Eliminate member 'remote_addr'
  - curl-config: Fix whitespace in usage text
  - curl.h: Make CURL_IPRESOLVE_* symbols defined as longs
  - curl.h: Make CURLSSLOPT_* symbols defined as longs
  - curl.h: Remove the "RESERVED" error codes
  - curl: Implement non-blocking STDIN read on Windows
  - curl: Improve non-blocking STDIN performance
  - curl: Remove the global argument from many functions
  - curl: Unify pointer names to global config
  - curl_get_line: Make sure lines end with newline
  - curl_memory.h: Fix to undefine 'accept4'
  - curl_path: Make SFTP handle a path like /~ properly
  - curlinfo: Provide the 'digest' feature
  - CURLSHOPT_SHARE.md: Mention multi-threading requires callbacks
  - DEPRECATE.md: Add VS2005 removal to the list
  - digest: Fix build with disabled digest auth
  - DISTROS: Update NixOS link
  - docs,tests: Fix english grammar "allow to" -&gt; "allow &lt;something&gt; to"
  - docs/CONTRIBUTE: Fix broken link
  - docs/examples: Add ftp-delete.c
  - docs: Beef up examples/websocket.c
  - docs: Fix broken link in CODE_REVIEW.md
  - docs: Fix broken link in INSTALL.md
  - docs: Fix docs for CURLOPT_PREQUOTE after #17616
  - docs: Fix documentation of connect_only 2
  - docs: Fix two typos
  - docs: Mention that the netrc file works without port numbers
  - docs: Mention the as-is concept generically
  - docs: Note SSLS-EXPORT feature in -ssl-sessions doc
  - docs: Reflect that delimiter-separated capath is only OpenSSL
  - docs: Sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
  - docs: Warn about lifetime in CURLOPT_CLOSESOCKET*
  - easy: Fix comment-documentation
  - easygetopt: Fix curl logo in header comment
  - firefox-db2pem: Avoid use of eval in script
  - ftp: Fix prequotes for a directory in URL
  - ftplistparser: Split parse_unix into sub-functions
  - h2_serverpush: Fix file handle leaks reported by clang-tidy
  - h3: Fix query of concurrent streams
  - http/3: Report handshake with version and cipher as for TCP connections
  - http2: Do not delay RST send on aborted transfer
  - http2: Fix var types in is_alive() implementations
  - http: Explicitly ignore parsing errors for Retry-After
  - http: Fix build with cookies and HSTS disabled
  - http_ntlm: Protect against null deref
  - http_ntlm: Remove unreachable code
  - INSTALL.md: Cygwin details and add source code link
  - ldap: Avoid automake caching issues with LDAP library names
  - ldap: If ldap-lib is sufficient, add it to LIBS
  - ldap: Initial support for --with-ldap option
  - lib2082: Drop 'typedef struct'
  - lib: Address singleuse issues
  - lib: Avoid reusing unclean connection
  - lib: Drop two interim macros in favor of native libcurl API calls
  - lib: Fix unused parameter/function compiler warnings
  - lib: Make 'CURLX_SET_BINMODE()' and use it
  - lib: Make 'curlx_wait_ms()' and use it
  - lib: Replace scache no-op macros with '#ifdef'
  - lib: Stop 'time()' debug overrides at the end of source in altsvc, hsts
  - lib: Unify recv/send function signatures
  - libcurl-env.md: Drop LOGNAME, USER and NTLMUSER
  - libcurl.m4: Fix indentation
  - libssh2: Remove use of 'initialised' for clean-up
  - libssh: De-complex myssh_statemach_act()
  - libssh: Fix readdir issues
  - libtests: Make tests 1503, 1504, 1505 use the 1502 binary
  - libtests: More header tidy-ups
  - libtests: Stop building the same source multiple times
  - memdebug.h: #undef 'fclose' before defining it
  - memdebug.h: Eliminate global macro 'CURL_MT_LOGFNAME_BUFSIZE'
  - memdebug: Include in unity batch
  - memory: Stop overriding unused 'wcsdup()'/'_wcsdup()' system functions
  - memory: Tidy up '_tcsdup()' override
  - misc: Fix typos
  - mk-lib1521: Replace 'printf' with 'curl_mprintf'
  - multi: Add dirty bitset
  - multi: Do not expire a blocked transfer
  - multi: Fix polling with pending input
  - multi: Remove careful bounds check as coverity says it is not needed
  - multi: xfer table/bitset, handle limits
  - ngtcp2: Fix coverity warning about result handling
  - openssl: Enable readahead
  - openssl: Error on SSL_ERROR_SYSCALL
  - openssl: Fix handling of buffered data
  - openssl: Fix openssl engine use
  - openssl: Fix pkcs11 provider available check
  - os400: Upgrade ILE/RPG bindings with latest definitions
  - pingpong: On disconnect, check for unflushed pingpong state
  - projects/build-openssl.bat: Remove
  - pytest: test_07_70, weaken early data check
  - pytest: Adapt for runs with openssl-1.1.1
  - pytest: Disable test_07_37 and test_07_36 with openssl's quic
  - quic: Implement CURLINFO_TLS_SSL_PTR
  - RELEASE-PROCEDURE.md: Update docs/VERSIONS
  - runtests.pl: Fix sprintf() using one too many %s
  - runtests: Fix 'LD_PRELOAD' detection for cmake-built curl binaries
  - runtests: Support memory-limits per test
  - rustls: Apply memory function overrides, fixing an ECH buffer free
  - rustls: Don't try printing the not provided file
  - schannel: Allow partial chains for manual peer verification
  - schannel: Drop Windows 2000 compatibility logic
  - scorecard: Flame graphs and documentation
  - SCP/SFTP: Avoid busy loop after EAGAIN
  - scripts: Fix to quote the copyright email address
  - socks: Fix query when filter context is null
  - system.h: Remove some macros
  - test1117: Reduce write delays
  - test1175: Fix to run, and fix documentation issues detected
  - test1222: Fix for out-of-tree and no-libcurl-manual builds
  - test1499, 1599: use '%LOGDIR'
  - test1499: Verify two chunked responses on reused connection
  - test1596: Let test pass after year 2036
  - test1706: Pass include directory to 'managen' for out-of-tree builds
  - tests/client: Drop autotools logic no longer necessary
  - tests/client: Use 'curl_mfprintf()'
  - tests/dnsd: Read config from file
  - tests/http/clients: Drop hack and use 'curl_setup.h' again
  - tests/http/clients: Move to tests/client
  - tests/http/requirements: Remove multipart
  - tests/libtest: Call 'curlx_now_init()' for unit 1399, 2600 (Windows)
  - tests/libtest: Drop 'TEST_HANG_TIMEOUT' redefinition hack
  - tests/libtest: Drop a checksrc exception
  - tests/libtest: Use 'curltime' from curlx
  - tests/server/util.c: Include netinet/in6.h
  - tests/server: De-dupe/merge three 'sockdaemon()' clones into one
  - tests/server: Drop 'memdebug.h'
  - tests/server: Make all global vars/funcs static
  - tests/server: Move memory init to 'memptr.c'
  - tests/servers.pm: Add more ways to figure out current user
  - tests: Always make bundles, adapt build and tests
  - tests: Bundle http clients, de-dupe, enable for MSVC
  - tests: Constify, make consts static
  - tests: Drop 'BUNDLE_SRC' variable
  - tests: Drop mk-bundle exceptions
  - tests: Drop unused or redundant includes
  - tests: Drop useless "nodist_SOURCES" assignments
  - tests: Fail torture if !valgrind&amp;threaded resolver
  - tests: Fix 1301, 1308 to fail on error
  - tests: Fix 'BUNDLE' variable references in 'Makefile.am'
  - tests: Make all names &lt; 75 characters long
  - tests: Make individual test sources compile cleanly
  - tests: Make sshserver less verbose
  - tests: Move 'curlcheck.h' to libtest as 'unitcheck.h'
  - tests: Move GSS-API dynamic stub into debug-mode libcurl
  - tests: torture: Don't duplicate valgrind command
  - tests: Use %b64[] to base64 data
  - tests: Use %b64[] to base64 data in 2056, 2057
  - tftpd: Use 'CURLMIN()' macro
  - tidy-up: Replace '&lt;memdebug.h&gt;' with '"memdebug.h"' (src, units)
  - tls: Remove Curl_ssl false_start
  - tool1621: Drop unused internal libcurl headers
  - tool_getparam: Fix --ftp-pasv
  - tool_operate: Fix return code when --retry is used but not triggered
  - tool_paramhelp: Fix language in comments
  - top-complexity: Lower max allowed complexity threshold to 90
  - unit tests: Extract "private" prototypes at build time
  - unit1302: Expand the base64 encode/decode tests
  - url: Fix connection lifetime checks
  - url: Fix NULL deref with bad password when no user is provided
  - urlapi: Simplify and split into sub functions
  - urlapi: Use uppercase hex encoding
  - vauth: Move auth structs to conn meta data
  - vtls: Change send/recv signatures of tls backends
  - vtls: Fix a copy-pasted early data comment typo
  - vtls: Log rustls negotiated KEX group name
  - vtls: Prefer ciphersuite to cipher in msgs
  - vtls: Prefer rustls-ffi ciphersuite name API
  - VULN-DISCLOSURE-POLICY.md: Fix typos
  - VULN-DISCLOSURE-POLICY: All reports should be disclosed
  - VULN-DISCLOSURE-POLICY: Exclude not installed software
  - VULN-DISCLOSURE-POLICY: Minor language polish
  - warnless: Drop parts of the 'read'/'write' preprocessor hack (Windows)
  - warnless: Replace 'read()'/'write()' wrapper functions with macros (Windows)
  - windows: Drop redundant 'curl_wcsdup_callback' callback
  - windows: Fixup 'fopen()' in 'CURLDEBUG' builds
  - windows: Reduce/stop loading DLLs at runtime
  - wolfssl: Add support for ML_KEM hybrids
  - ws: Drop redundant 'CURL_EXTERN' from function definitions
  - xfer: Manage pause bits</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.0.cf" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.1.cf" date="1753617600">- Fix dependency on CA bundle when we don't use the old one at
  /etc/pki/tls/certs/ca-bundle.crt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
</package>
<package pkgid="819a760879420dcb3a063af8afe187deb0310e504132edf06f22d87126775033" name="libcurl-minimal" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12.1-1.0.cf" date="1739448000">- Update to 8.12.1
  - All: Remove FIXME and TODO comments
  - asyn-thread: Fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: Fix HTTPS RR crash
  - asyn-thread: Fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: Survive a c-ares channel set to NULL
  - build: Add tool_hugehelp.c into IBMi build
  - checksrc.pl: Warn on FIXME/TODO comments
  - cmake/Find: Set '&lt;Modulename&gt;_FOUND' for compatibility when found via 'pkg-config'
  - cmake: Add integration tests, run them in CI
  - cmake: Always reference OpenSSL and ZLIB via imported targets
  - cmake: Avoid unnecessary '-L' for implicit link dirs
  - cmake: Drop 'LDAP_DEPRECATED=1' macro, to sync with autotools
  - cmake: Fix 'HAVE_GETHOSTBYNAME_R_*' detections with 'CURL_WERROR=ON'
  - cmake: Fix to detect 'HAVE_OPENSSL_SRP' in MSVC UWP builds
  - cmake: Fix/add missing feature detections for Windows/MS-DOS
  - cmake: Initialize variables where missing
  - cmake: Library order fixes for picky linkers (e.g. binutils 'ld')
  - cmake: Normalize before matching paths with syspaths
  - cmake: Respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: Respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - cmake: Save a line with 'CMAKE_C_IMPLICIT_LINK_DIRECTORIES' exclusion
  - cmake: Tidy up string append and list prepend syntax
  - configure/cmake: Check for realpath
  - configure/cmake: Set asyn-rr as feature only if httpsrr is enabled
  - content_encoding: #error on too old zlib
  - curl_global_sslset.md: Add SSL backend names
  - CURLOPT_SSH_KNOWNHOSTS.md: Strongly recommend using this
  - CURLSHOPT_SHARE.md: Adjust for the new SSL session cache
  - docs: Better explain multi-part byte range behaviour
  - docs: Use valid example domain names
  - generate.bat: Remove curl_get_line.c from the curlx file list
  - header.md: Mention 'Authorization:' and 'Cookie:' special treatment
  - imap: TLS upgrade fix
  - INTERNALS: Fix c-ares, as we actually support 1.6.0 or later
  - ldap: Drop support for legacy Novell LDAP SDK
  - lib: include necessary headers for 'inet_ntop'/'inet_pton'
  - lib: Silence LibreSSL collision warning on non-MSVC Windows
  - libssh2: Comparison is always true because rc &lt;= -1
  - libssh2: Raise lowest supported version to 1.2.8
  - libssh: Drop support for libssh older than 0.9.0
  - libssh: Silence '-Wconversion' with a cast (Windows 32-bit)
  - netrc: return code clean-up, fix missing file error
  - openssl-quic: Ignore ciphers for h3
  - openssl: Fix out of scope variables in goto
  - pop3: TLS upgrade fix
  - runtests: Fix the disabling of the memory tracking
  - runtests: Quote commands to support paths with spaces
  - scache: Add magic checks
  - smb: Silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - SPONSORS.md: Clarify that we don't promise goods or services
  - test1516: Avoid failure due to spaces in path
  - test2080: Simplify, avoid the null byte
  - tests: Fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake
  - tidy-up: Make per-file 'ARRAYSIZE' macros global as 'CURL_ARRAYSIZE'
  - tool_cfgable: Sort struct fields by size, use bitfields for booleans
  - tool_getparam: Add "TLS required" flag for each such option
  - tool_progress: Fix percent output of large parallel transfers
  - tool_ssls: Switch to tool-specific get_line function
  - verbose.md: Mention how carriage-return might occur in headers
  - vquic: Make the "disable GSO" use infof, not failf
  - vtls: Fix multissl-init
  - vtsl: Eliminate 'data-&gt;state.ssl_scache'
  - wakeup_write: Make sure the eventfd write sends eight bytes
  - wolfssl: Silence compiler warning (MSVC 2019), simplify existing
- Use libssh2 rather than libssh for Fedora 28 and 29 builds since their
  versions of libssh are too old for curl now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.13.0-1.0.cf" date="1743595200">- Update to 8.13.0
  - curl: Add write-out variable 'tls_earlydata'
  - curl: Make --url support a file with URLs
  - gnutls: Set priority via --ciphers
  - IMAP: Add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: Add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: Add support for TLSv1.3 early data
  - rustls: Add support for CERTINFO
  - rustls: Add support for SSLKEYLOGFILE
  - rustls: Support ECH with DoH lookup for config
  - rustls: Support native platform verifier
  - var: Add a '64dec' function that can base64 decode a string
  - wolfssl: TLS early data support
  - addrinfo: Add curl macro to avoid redefining foreign symbols
  - asyn-thread: Avoid the separate 'struct resdata' alloc
  - asyn-thread: Avoid the separate curl_mutex_t alloc
  - asyn-thread: Do not allocate thread_data separately
  - asyn-thread: Remove 'status' from struct Curl_async
  - autotools: Fix 'dllmain.c' in unity builds
  - autotools: Fix 'libtest' bundle to depend on 'FIRSTFILES'
  - autotools: Use 'CURLDEBUG' to exclude TrackMemory code from unity
  - aws_sigv4: Cannot be used for proxy
  - aws_sigv4: Merge repeated headers in canonical request
  - aws_sigv4: Use strparse more for parsing
  - base64: Drop 'BUILDING_CURL' macro, always include in tests/server
  - build: Add Windows CE / CeGCC support, with CI jobs
  - build: cmake multi-pkg-config detection improvements (brotli, ldap, mbedtls)
  - build: Do not apply curl debug macros to 'tests/server' by default
  - build: Drop unused 'getpart' tool
  - build: Enable -Wjump-misses-init for GCC 4.5+
  - build: Enable '-Wcast-qual', fix or silence compiler warnings
  - build: Fix compiler warnings in feature detections
  - build: Replace Curl_ prefix with curlx_ for functions used in servers
  - build: Set '-O3' and tune WinCE in CI, fix 'getpart', 'vtls_scache' fallouts
  - build: Set 'HAVE_STDINT_H' if 'stdint.h' is available
  - build: Set 'HAVE_WRITABLE_ARGV' for Apple cross-builds
  - build: Silence bogus '-Wconversion' warnings with gcc 5.1-5.4
  - build: Silence mingw32ce C99 format warnings, simplify CI
  - build: Tidy-ups around 'inet_pton'
  - c-ares httpsrr: Fix ifdef
  - c-ares: Error out for unsupported versions, drop unused macros
  - ca-native.md: Sync with CURLSSLOPT_NATIVE_CA
  - cf-socket: Deduplicate Windows Vista detection
  - cf-socket: Remove empty switch
  - client writer: Handle pause before decoding
  - cmake: 'CURL_LIBDIRS' improvements (upstreamed from vcpkg)
  - cmake: 'SHARE_LIB_OBJECT=ON' requires CMake 3.12 or newer
  - cmake: Add custom command scripts as dependencies where missing
  - cmake: Add pre-fill for Unix, enable in GHA/macos, verify pre-fills
  - cmake: Add shell completion support
  - cmake: Allow 'CURL_STATIC_CRT' with shared libcurl and no curl exe
  - cmake: Allow 'CURL_STATIC_CRT' with UCRT VS2015+ builds
  - cmake: Allow empty 'IMPORT_LIB_SUFFIX', add suffix collision detection
  - cmake: Avoid '-Wnonnull' warning in 'HAVE_FSETXATTR_5' detection
  - cmake: Disable HTTPS-proxy as a feature if proxy is disabled
  - cmake: Drop 'CURL_DISABLE_TESTS' option
  - cmake: Drop 'HAVE_C_FLAG_Wno_long_double' logic for ancient Apple gcc
  - cmake: Drop 'HAVE_IN_ADDR_T' from pre-fill too
  - cmake: Drop two stray TLS feature checks for wolfSSL
  - cmake: Exclude '-MP' for 'clang-cl' again
  - cmake: Fix 'HAVE_ATOMIC'/'HAVE_STDATOMIC' pre-fill for clang-cl
  - cmake: Fix clang-tidy builds to verify tests, fix fallouts
  - cmake: Fix detection pre-fills for iOS
  - cmake: Fix ECH detection in custom-patched OpenSSL
  - cmake: Fix typo in ECH config error msg
  - cmake: Hide empty 'MINGW64_VERSION' output for mingw32ce
  - cmake: Improve httpd detection for pytest
  - cmake: Mention 'insecure' in the debug build warning
  - cmake: Misc tidy-ups
  - cmake: Pre-fill known type sizes for Windows OSes
  - cmake: Replace CMAKE_COMPILER_IS_GNUCC with CMAKE_C_COMPILER_ID
  - cmake: Replace exec_program() with execute_process()
  - cmake: Restrict static CRT builds to static curl exe, test in CI
  - cmake: Sync cutoff version with autotools for picky option '-ftree-vrp'
  - cmake: Sync OpenSSL(-fork) feature checks with './configure'
  - cmake: Unity mode optimization for non-'CURLDEBUG' 'testdeps' targets
  - CODE_STYLE: Readability and banned functions
  - config-win32: Set 'HAVE_STDINT_H' where available
  - configure: Call the blocking resolver "blocking", not "default"
  - configure: Fix ECH detection with MultiSSL
  - configure: Silence compiler warnings in feature checks, drop duplicates
  - configure: Tidy up shell completion rules
  - configure: Use 'curl_cv_apple' variable
  - conn: Eliminate 'conn-&gt;now'
  - conn: Fix connection reuse when SSL is optional
  - conncache: Eliminate 'conn-&gt;destination_len' as premature optimization
  - contributors.sh: Lowercase 'github' for consistency
  - contrithanks.sh: Update docs/THANKS in place
  - cookie: Do prefix matching case-sensitively
  - cookie: Minor parser simplification
  - cookie: Simplify invalid_octets()
  - core: Stop redefining 'E*' macros on Windows, map 'EACCES', related fixes
  - curl.h: Change some enums to defines with L suffix
  - curl.h: Convert CURLUSESSL* names to defines
  - curl.h: Stop defining non-curl '__has_declspec_attribute'
  - curl.h: Switch 'CURL_HTTP_VERSION*' enums to long constants
  - curl/system.h: Drop leftover comment about 32 bit curl_off_t
  - curl: Add my_setopt_long() and _offt()
  - curl_msh3: Remove verify bypass from DEBUGBUILDs
  - curl_setup: Drop 'ERANGE' (for WinCE), no longer used
  - curl_setup_once: Drop 'E*' macro redefines unused (with winsock2)
  - curl_setup_once: Stop redefining 'ENAMETOOLONG' to winsock2 error code
  - curl_trc: Fix build with CURL_DISABLE_VERBOSE_STRINGS
  - curl_ws_recv.md: Expand a little on the fragments the API delivers
  - CURLMOPT_SOCKETFUNCTION.md: Add advice for socket callback invocation
  - CURLOPT_HTTPHEADER.md: Add comments to the example
  - CURLOPT_HTTPHEADER.md: Rephrases
  - curltime: Use libcurl time functions in src and tests/server
  - DISABLED: Add 313 for sectransp (move from GHA/macos)
  - docs/cmdline-opts: Use imperative form
  - docs: Adapt to removed --with-random
  - docs: Add FD_ZERO to curl_multi_fdset example
  - docs: Bump 'rustls' to 0.14.1
  - docs: Correct argument names and URL redirection
  - docs: Minor edits to please the new spellchecker regime
  - docs: Rework RUSTLS install instructions
  - docs: Unify HTTP version style in --help output
  - docs: Vulnerabilities in debug code are not eligible for a bounty
  - doh: Improve HTTPS RR svcparams parsing
  - doh: Remove wrong but unreachable exit path from doh_decode_rdata_name
  - dynbuf: Assert init on free
  - easy: Drop 'break' after 'return'
  - easy: Fix warning about possible comma misuse
  - eventfd: Allow use on all CPUs
  - examples: Prefer 'return' over 'exit()' (cont.)
  - ftp/sftp: strdup data info memory
  - ftp: Fix comment
  - gnutls: Fix connection state check on handshake
  - gnutls: Fix use of pkcs11 urls for keys/certs
  - gtls: Fix uninitialized variable
  - hash: Use single linked list for entries
  - hostip: Don't use alarm() for DoH resolves
  - hostip: Make CURLOPT_RESOLVE support replacing IPv6 addresses
  - http2: Add on_invalid_frame callback for error detection
  - http2: Detect session being closed on ingress handling
  - http2: Enhance error messages on Curl_dyn* upon receiving headers
  - http2: Fix stream assignemnt for pushes
  - http2: Reset stream on response header error
  - HTTP3.md: Only speak about minimal versions
  - http: Convert parsers to strparse
  - http: Fix NTLM info message typo
  - http: Fix the auth check
  - http: Make the RTSP version check stricter
  - http: Negotiation and room for alt-svc/https RR to navigate
  - http: Remove a HTTP method size restriction
  - http: Version negotiation
  - http_chunks: Replace a strofft call with curl_str_hex
  - https-rr: Implementation improvements
  - httpsrr: Fix port detection
  - httpsrr: Fix the HTTPS-RR threaded-resolver build combo
  - INFRASTRUCTURE.md: Add IRC and Matrix details
  - INSTALL-CMAKE.md: CMake usage updates
  - INSTALL-CMAKE.md: mention 'ZLIB_USE_STATIC_LIBS'
  - lib1156: Pass longs to 'curl_easy_setopt()'
  - lib1560: Test set path containing LR or CR
  - lib2302: Fix crash due to stack overflow on MSVC and clang Windows
  - lib696: Fix building on Windows in non-bundle mode
  - lib: Better optimized casecompare() and ncasecompare()
  - lib: Clear up CURLRES_ASYNCH vs. USE_CURL_ASYNC use
  - lib: Fix two curlx_strtoofft invokes
  - lib: Rename curlx_strtoofft to Curl_str_numblanks()
  - lib: Replace while(ISBLANK()) loops with Curl_str_passblanks()
  - lib: Simplify more white space loops
  - lib: strtoofft.h header cleanup
  - lib: Use Curl_str_* instead of strtok_r()
  - lib: Use Curl_str_number() for parsing decimal numbers
  - libssh2: Fix freeing of resources in disconnect
  - libssh2: Fix memory leak in 'SSH_SFTP_REALPATH' state
  - libssh2: Fix to ignore 'known_hosts' if SHA256 host public key is set
  - libssh2: Print user with verbose flag
  - libssh2: Show crypto backend in the verbose connect log
  - libssh: Fix freeing of resources in disconnect
  - libssh: Fix scp large file upload for 32-bit size_t systems
  - libtest/first.c: Remove the Test: stderr output for unity builds
  - libtest/libprereq.c: Set CURLOPT_FOLLOWLOCATION with a long
  - managen: Accept more markdown-quote-markers
  - managen: Correct the warning for un-escaped '&lt;' and '&gt;'
  - mbedtls: Re-enable an error check
  - memdebug.h: Avoid '-Wredundant-decls' with an extra guard
  - memdebug: Drop dynamic allocation from 'curl_dbg_log()'
  - mprintf: Switch three number parsers to use strparse
  - mqtt: Convert sendleftovers to dynbuf
  - msvc: Drop support for VS2005 and older
  - multi: Call protocol handler done() if PROTOCONNECT or later
  - multi: Event based rework
  - multi: Kill off remaining internal handles in curl_multi_cleanup
  - multi: Start the loop over when handles are removed
  - multi_ev: Fixes regarding connection shutdowns
  - ngtcp2: Do not iterate over multi handles
  - ntlm: Merge ntlm.h into ntlm.c
  - openssl-quic: Do not iterate over multi handles
  - openssl: Check return value of X509_get0_pubkey
  - openssl: Drop support for old OpenSSL/LibreSSL versions
  - openssl: Fix crash on missing cert password
  - openssl: Fix pkcs11 URI checking for key files
  - openssl: Remove bad 'goto's into other scope
  - prox/preproxy.md: Document argument within &lt;brackets&gt;
  - pytest: Test negotiate with http proxy
  - quiche: Do not iterate over multi handles
  - RELEASE-PROCEDURE.md: Explain release candidates
  - request: Clear sendbuf_hds_len when resetting request bufq
  - resolve: Fix building without Unix sockets and 'CURLDEBUG'
  - runtests: Accept 'CURL_DIRSUFFIX' without ending slash
  - runtests: Add feature-based filtering
  - runtests: Check and report if 'diff' tool is missing
  - runtests: Drop logic calling the 'handle' tool (Windows)
  - runtests: Drop recognizing 'winssl' as Schannel
  - runtests: Drop ref to unused external function
  - runtests: Fix bundled test invocation with '-g' option
  - runtests: Fix SSH server not starting in cases, re-ignore failing vcpkg CI jobs
  - runtests: Fix test key format for libssh2 WinCNG (and others)
  - runtests: Generate certs dynamically, bump to EC-256, tidy up
  - runtests: Recognize AWS-LC as OpenSSL
  - runtests: Rewrite 'genserv.sh' in Perl
  - runtests: Support multi-target cmake, drop workarounds from CI
  - runtests: Support running tests under wine or qemu (cont.)
  - runtests: Support running tests under wine or qemu
  - runtests: Use 'setfacl' on Cygwin/MSYS, if present
  - rustls: Add ECH support with string ECH config
  - rustls: Cap maximum allowed CRL file size to 8MB
  - rustls: Support ECH GREASE
  - rustls: Use client cert and key if available
  - schannel: Deduplicate Windows Vista detection
  - schannel: Enable ALPN support under WINE 6.0+
  - schannel: Enable ALPN with MinGW, fix ALPN for UWP builds
  - schannel: Guard ALPN init code to ALPN builds
  - scripts/managen: Fix option 'single'
  - scripts/managen: Fix parsing of markdown code sections
  - scripts: Update completion.pl to parse options from docs
  - sectransp: Add support for HTTP/2 in gcc builds
  - sendf: Client reader line conversion: do not change data-&gt;state.infilesize
  - setopt: Illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: Remove unnecessary void pointer typecasts
  - setopt: Setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - shutdowns: Split shutdown handling from connection pool
  - socks: Remove bad assert from do_SOCKS5()
  - src: Avoid strdup on platforms not doing UTF-8 conversions
  - src: Clean-up ISBLANK vs. ISSPACE
  - src: Remove Curl_ prefix from tool-specific function
  - src: Remove final uses of Curl_ symbol prefixes in tool code
  - src: Replace strto[u][ld] with curlx_str_ parsers
  - ssh: Consider sftp quote commands case sensitive
  - sshserver.pl: Adjust 'AuthorizedKeysFile2' cutoff version
  - sshserver.pl: Use Perl 'chmod'
  - sshserver: Fix excluding obsolete client config lines
  - ssl session cache: Add exportable flag
  - SSLCERTS: List support for SSL_CERT_FILE and SSL_CERT_DIR
  - strparse: Make Curl_str_number() return error for no digits
  - strparse: Switch the API to work on 'const char *'
  - strparse: Switch to curl_off_t as base data type
  - test1022: Add support for rc releases
  - test1167: Catch #defines with extra whitespace
  - test313: Disable CRL test for Schannel due to lack of support and flakiness
  - test313: Disable via '&lt;features&gt;' for backends without CRL support
  - test489: Set output dir
  - test612: SCP 'rm' the uploaded remote file (not the local source), unignore in CI
  - test613: Make it pass on Windows, fix postprocess, unignore in CI
  - test615: Fix for Cygwin, unignore in CI
  - tests/certs: Clean up
  - tests/server: Drop unused 'base64.pl'
  - tests/server: Fix to check against winsock2 error codes on Windows
  - tests/server: Give global 'path' variable a more descriptive name
  - tests/server: Make the signal handler signal-safe
  - tests/server: Replace 'errno' with 'SOCKERRNO' in sockfilt, socksd, sws
  - tests/server: Replace 'strerror' with 'sstrerror' in socksd
  - tests/server: Support bundle binary
  - tests/server: Sync 'wait_ms()' with the libcurl implementation
  - tests/server: Use 'curlx_str_numblanks()' to avoid 'errno'
  - tests/servers.pm: Remove unused variable 'portrange'
  - tests: Build non-debug unit tests with autotools, run them
  - tests: Fix comment in lib533
  - tests: Fix enum/int confusion, fix autotools 'CFLAGS' for 'servers'
  - tests: Make sure 'commands.log' is generated in the correct logdir
  - tests: Mark tests 1631, 1632 flaky
  - tests: Reformat error messages to avoid tripping MSBuild
  - tests: Remove base64 encoded sections
  - tests: Remove unused variables
  - tests: Replace remaining non-ASCII bytes with hex markup
  - tftpd: Prefix TFTP protocol error 'E*' constants with 'TFTP_'
  - tidy-up: Align MSYS2/Cygwin codepaths, follow Cygwin 'MAX_PID' bump
  - tidy-up: Delete, comment or scope C macros reported unused
  - tidy-up: Drop unused 'CURL_INADDR_NONE' macro and 'in_addr_t' type
  - tidy-up: Use 'CURL_ARRAYSIZE()'
  - timediff: Fix comment for curlx_mstotv()
  - timediff: Remove unnecessary double typecast
  - tool_dirhie: Create dir hierarchy without strtok
  - tool_getparam: Clear sensitive arguments better
  - tool_getparam: Do parse_upload_flags without the alloc/free
  - tool_getparam: Parse --trace-config without strdup()/free()
  - tool_getparam: parse_header() without strtok
  - tool_operate: Change "1 retries" to "1 retry"
  - tool_operate: Fail SSH transfers without server auth
  - tool_operate: Fix pluralization of seconds
  - tool_operate: Remove unnecessary (long) typecasts
  - tool_paramhlp: Do --proto parsing without strtok
  - tool_parsecfg: Make my_get_line skip comments and newlines
  - tool_setopt: Reduce use of "code hiding" macros
  - url: Call protocol handler's disconnect in Curl_conn_free
  - urlapi: Fix redirect from file:// with query, and simplify
  - urlapi: Remove percent encoded dot sequences from the URL path
  - urlapi: Simplify junkscan
  - urldata: Remove 'hostname' from struct Curl_async
  - variable.md: Clarify 'trim' example
  - vquic: Obey IOV_MAX
  - vtls: Fix compiler warnings seen with gcc 7.3.0 and mbedTLS
  - winbuild: Reduce command-line length by dropping whitespace
  - windows: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - windows: Drop code and curl manifest targeting W2K and older
  - windows: Fix issues detected by clang-tidy, and some more
  - wolfssh: Fix freeing of resources in disconnect
  - wolfssh: Retrieve the error using wolfSSH_get_error
  - wolfssl: Fix CA certificate multiple location import
  - wolfssl: Fix unused variable warning
  - wolfssl: Warn if CA native import option is ignored
  - wolfssl: When using PQ KEM, use ML-KEM, not Kyber
  - ws: Corrected curlws_cont to reflect its documented purpose
  - ws: Fix and extend CURLWS_CONT handling
  - zlib: Bump minimum to 1.2.5.2 (was: 1.2.0.4)
- BR: openssl, needed for cert generation in test suite
- Drop "compat" build support in spec
- Drop legacy ldconfig scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.0.cf" date="1748433600">- Update to 8.14.0
  - mqtt: Send ping at upkeep interval
  - schannel: Handle pkcs12 client certificates containing CA certificates
  - TLS: Add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: Import v2025.04.20 script and documentation
  - websocket: Add option to disable auto-pong reply
  - _SEEALSO.md: Remove spaces around command and man page section
  - asny-thrdd: Fix detach from running thread
  - asnyc-thrdd: Explain how this is okay with a comment
  - async resolver code improvements
  - async-threaded resolver: Use ref counter
  - async: DoH improvements
  - autotools: Detect 'wolfSSL_set_quic_use_legacy_code' like cmake does
  - autotools: Install shell completion files on cross build
  - aws-sigv4: Allow a blank string
  - build: Check required rustls-ffi version
  - build: Enable gcc-12/13+, clang-10+ picky warnings
  - build: Enable gcc-15 picky warnings
  - certs: Drop unused 'default_bits' from '.prm' files
  - cf-https-connect: Use the passed-in dns struct pointer
  - cf-socket: Fix FTP accept connect
  - cfilters: Remove assert
  - cmake/FindNGTCP2: Simplify multi-pkg-config detection
  - cmake: Append picky warnings to 'CMAKE_REQUIRED_FLAGS' as string
  - cmake: Avoid 'target is imported but not globally visible' when consuming
    libcurl with old cmake
  - cmake: Do not install 'mk-ca-bundle' script and manpage
  - cmake: Enable '-Wall' for MSVC when 'PICKY_COMPILER=ON'
  - cmake: Extend integration tests
  - cmake: Fix 'fish' install directory detection via 'pkg-config'
  - cmake: Fix nghttp3 static linking with 'USE_OPENSSL_QUIC=ON'
  - cmake: Fix option() and mark_as_advanced() mixed order
  - cmake: Fix shell completion install when just one flavour is enabled
  - cmake: Honour individual picky option overrides found in 'CMAKE_C_FLAGS'
  - cmake: Install shell completions for cross-builds
  - cmake: Link 'crypt32' for OpenSSL feature detection
  - cmake: Merge 'CURL_WERROR' logic into 'PickyWarnings.cmake'
  - cmake: Prefer 'COMPILE_OPTIONS' over 'CMAKE_C_FLAGS' for custom C options
  - cmake: Quotes, whitespace, use 'VERSION_GREATER_EQUAL'
  - cmake: Revert 'CURL_LTO' behaviour for multi-config generators
  - cmake: Set 'BUILDING_LIBCURL' directly for unit test targets
  - cmake: Stop deleting '-W&lt;n&gt;' from 'CMAKE_C_FLAGS' (MSVC)
  - cmake: Tidy up and document feature detections in dependencies
  - cmake: Use 'CMAKE_COMPILE_WARNING_AS_ERROR' if available
  - cmake: Use 'INCLUDE_DIRECTORIES' prop to specify local header dirs
  - cmake: Use 'LIB_NAME' in 'curl-config.cmake.in'
  - cmake: Use absolute paths for completion targets
  - cmake: Use the 'LINK_OPTIONS' property with CMake 3.13+
  - configure: Catch asking for double resolver without https-rr
  - configure: Fix --disable-rt
  - configure: Restore link checks
  - configure: Suppress command not found for brew
  - conncache: Make Curl_cpool_init return void
  - connect: Shutdown timer fix
  - content_encoding: Transfer-Encoding parser improvements
  - CONTRIBUTE: Add project guidelines for AI use
  - contrithanks.sh: Drop set -e
  - cpool/cshutdown: Force close connections under pressure
  - curl: Fix memory leak when -h is used in config file
  - curl: Only warn once for --manual in manual-disabled build
  - curl_get_line: Handle lines ending on the buffer boundary
  - curl_krb5: Only use functions if FTP is still enabled
  - curl_multibyte: Fix up low-level calls, include in unity builds
  - curl_osslq: Remove a leftover debug fprintf() call
  - curl_url_get.md: Don't call it normalized
  - curl_version_info.md: Clarify ssl_version for MultiSSL
  - CURLMOPT_TIMERFUNCTION.md: Correct the example
  - CURLOPT_ERRORBUFFER.md: Buffer is read only after curl takes ownership
  - CURLOPT_FOLLOWLOCATION.md: Switch to GET =&gt; no body
  - CURLOPT_READFUNCTION.md: Mention the seek callback
  - CURLOPT_XFERINFOFUNCTION.md: Fix the callback return type in example
  - curlx: Move the docs to docs/internals/
  - DEPRECATE.md: Drop support for VS2008
  - DEPRECATE.md: Drop Windows CE support
  - dist: Drop duplicate entry from 'CMAKE_DIST'
  - dns_entry: Move from conn to data-&gt;state
  - Dockerfile: Update debian:bookworm-slim Docker digest to 90522ee
  - docs/INSTALL.md: Drop reference to removed configure option
  - docs/libcurl: Fix type and prototype problems in examples
  - docs/libcurl: Make examples build with picky compiler options
  - docs/libcurl: Mention sensitive data/headers
  - docs: Add missing return statement in examples
  - docs: Fix incorrect shell substitution in docker run example command
  - docs: Fix typo in retry.md
  - docs: Update distros links
  - doh: httpsrr fix
  - doh: Make sure CURLOPT_PROTOCOLS is set with a "long" arg
  - doh: Reduce the DNS request buffer size
  - easy_reset: Fix dohfor_mid member
  - ECH: Reference the OpenSSL ECH feature branch
  - etag-save.md: Mention how using both options is a good idea
  - eventfd: Fix feature guards
  - formdata: Clean-ups
  - ftp: Fix bug in failed init
  - ftp: Fix race in upload handling
  - ftplistparser: Add two overflow preventions
  - ftplistparser: Split up into more functions
  - generate.bat: Exclude curlinfo.c from legacy VS projects
  - genserv.pl: Fail with a message if 'openssl' is missing or failing
  - headers: Enforce a max number of response header to accept
  - headers: Set an error message on illegal response headers
  - hostip: Fix build without threaded-resolver and without DoH
  - hostip: Show the correct name on proxy resolve error
  - http2: Fix stream window size after unpausing
  - HTTP3.md: Fix incorrect variable placeholders
  - http: Fix a build error when all auths are disabled
  - http: Fix HTTP/2 handling of TE request header using "trailers"
  - http: In alt-svc negotiation only allow supported HTTP versions
  - http_aws_sigv4: Add additional verbose log statements
  - http_aws_sigv4: Improve sigv4 url encoding and canonicalization
  - http_chunks: Narrow variable scope for 'trlen'
  - http_negotiate: Fix non-SSL build with GSSAPI
  - https-connect: Fix httpsrr target check
  - HTTPSRR.md: Clarify somewhat
  - if2ip: Build the function also if FTP is present
  - imap: Remove redundant condition
  - INSTALL-CMAKE.md: Fix typo
  - INSTALL.md: Update the minimal libcurl size example
  - KNOWN_BUGS: Fix link in sivg4 issue 16.3
  - lib/src/docs/test: Improve curl_easy_setopt() calls
  - lib1560: Use hex notation, drop non-ASCII exception
  - lib3026: Drop DLL pre-load perf mitigation for old mingw
  - lib: Add const to clientwriter tables
  - lib: Drop curlx_getpid, use fake pid in SMB
  - lib: Include files using known path
  - lib: Make Curl_easyopts const
  - lib: Unify conversions to/from hex
  - libcurl-tutorial.md: Fix read callback explanation
  - libssh: Add NULL check for Curl_meta_get()
  - libssh: Fix memory leak
  - libssh: Remove a condition that always equals false
  - libtest/first: Stop defining MEMDEBUG_NODEFINES
  - libtests: Define CURL_DISABLE_DEPRECATION first
  - make: Clean tests better
  - mbedtls: TLS 1.3 is max when mbedtls has 1.3 support
  - metahash: Add asserts to help analyzers
  - mk-ca-bundle.pl: Follow redirects
  - mk-ca-bundle: Switch URLs to GitHub versions
  - mkhelp: Fix to not generate a line-ending space in some cases
  - mqtt: Use conn/easy meta hash
  - multi: Do transfer book keeping using mid
  - multi: init_do(): Check result
  - netrc: Avoid NULL deref on weird input
  - netrc: Avoid strdup NULL
  - netrc: Deal with null token better
  - ngtcp2: Clarify ignoring of result
  - openssl-quic: Avoid potential '-Wnull-dereference', add assert
  - openssl-quic: Fix printf mask
  - openssl-quic: Fix shutdown when stream not open
  - openssl: Enable builds for *both* engines and providers
  - openssl: Set the cipher string before doing private cert
  - parsedate: Provide Curl_wkday also for GnuTLS builds
  - processhelp.pm: Always call 'taskkill' with '-f' (force)
  - processhelp.pm: Avoid potential endless loop, log more (Windows)
  - progress: Avoid integer overflow when gathering total transfer size
  - pytest tls: Extend coverage (fixes WolfSSL cert validation, CVE-2025-4947)
  - pytest-xdist: pytest in parallel
  - pytest: Add pinnedpubkey test cases (fixes WolfSSL pinning, CVE-2025-5025)
  - pytest: Give parameterised tests better ids for read- and parsability
  - pytest: Make test_07_22 more lenient to exit codes
  - quic: No local idle connection timeout, ngtcp2 keep-alive
  - rand: Update comment on Curl_rand_bytes weak random
  - RELEASE-PROCEDURE.md: Release candidate git tagging explained
  - rtsp: Remove redundant condition
  - runtests: Add retry option to reduce flakiness
  - runtests: Fix indentation
  - runtests: Recognize lowercase 'windows' in 'curl -V'
  - runtests: Remove server verification after start
  - runtests: Split 'SSH_PWD' into 'SCP_PWD' and 'SFTP_PWD', and more
  - rustls: Make max size of cert and key reasonable
  - sasl: Give help when unable to select AUTH
  - scripts: completion.pl: Sort the completion file for all shells
  - scripts: Drop unused import, formatting
  - scripts: Fix --opts-dir help in completion.pl
  - scripts: Fix perl indentation, whitespace, semicolons
  - sectransp: Fix building for macOS Sierra and older
  - setopt: Provide info for CURLE_BAD_FUNCTION_ARGUMENT
  - smb: Avoid integer overflow on weird input date
  - socket: Use accept4 when available
  - socketpair: Support pipe2 where available
  - spacecheck.pl: Check for non-ASCII chars, fix fallouts
  - spacecheck.pl: Verify 'tests/data/test*' for non-ASCII chars
  - src: Drop strcase.[ch] from tool builds
  - src: Include memdebug.h consistently with angle brackets &lt;&gt;
  - src: Rename curlx_safefree to tool_safefree
  - test1173.pl: Whitelist some option-looking names that aren't options
  - test1658: Add unit test for the HTTPS RR decoder
  - test: Make unittest 1308 into a libtest
  - tests/ech_tests.sh: Sync shebang with rest of bash scripts
  - tests/FILEFORMAT.md: Clarify %hex[] formatting
  - tests/FILEFORMAT.md: Document the aws feature
  - tests/README.md: Document --test-duphandle
  - tests/README.md: List the openssl tool among the prerequisites
  - tests/server/dnsd: Basic DNS server for test suite
  - tests/server: Check for 'stream != NULL' in mqttd
  - tests/server: Fix typo in comment
  - tests/server: Stop using libcurl string comparisons
  - tests/server: Stop using libcurl's printf functions
  - tests/serverhelp: Remove last remnants of http-pipe server
  - tests/tunit: Make a separate directory for tool-based unit tests
  - tests: Add aws feature to the related tests
  - tests: Add https-mtls server to force client auth
  - tests: Fix some test tag mismatches
  - tests: Mark ipfs tests to require ipfs
  - tests: Move a boolean variable out of the path section
  - tests: Prefer '--insecure' over '-k'
  - tests: Provide all non-ascii data hex encoded
  - tests: Remove some unused test case sections
  - tests: Require IPv6 for 1265, 1324, 2086
  - tests: Separate tunit tests from unit tests more
  - tests: Stop using libcurl's strdup
  - tests: Unify test case keywords
  - tests: Use a more portable null device path
  - TODO: Remove "nicer lacking perl message"
  - tool_cb_write.c: Handle EINTR on flush
  - tool_getparam: Clear argument only when needed
  - tool_operate: Make retrycheck() a separate function
  - tool_operate: When retrying, only truncate regular files
  - tool_paramhlp: Avoid integer overflow in secs2ms()
  - tool_parsecfg: Make get_line handle lines ending on the buffer boundary
  - typecheck-gcc.h: Fix the typechecks
  - urlapi: Redirecting to "" is considered fine
  - urlapi: Remove unneeded guards around PUNY2IDN
  - urldata: Remove the unused struct field 'hide_progress'
  - VERSIONS: List all past releases
  - vquic: Consistent name for the stream struct across backends
  - vquic: Init for every call to recvmsg
  - vtls: Avoid NULL deref on bad PEM input
  - vtls: Fix build with ssl but without http
  - VULN-DISCLOSURE-POLICY: Use of weak algos
  - winbuild: Add the deprecation warning to the README
  - winbuild: curl_get_line is not used for tool builds
  - windows: Fix builds targeting WinXP, test it in CI
  - wolfssl: Fix to enable ALPN when available
  - ws: Fix the header replace check
  - ws: Store protocol context as connection meta data</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.0-1.1.cf" date="1748520000">- Fix regression: curl_multi_add_handle() returning OOM when using more than
  400 handles (GH#17475)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.14.1-1.0.cf" date="1749038400">- Update to 8.14.1
  - asyn-thrdd: Fix clean-up when RR fails due to OOM
  - autotools: Recognize more Linux targets when setting '-D_GNU_SOURCE'
  - BUG-BOUNTY.md: Mention the medium bounty amount in 2025
  - cmake: Fix missed version number for multi-pkg-config detections
  - cmdline-docs: Mention HTTP resumed uploads to be shaky
  - curl: make -N handled correctly
  - curl: Upload from '.' fix
  - dllmain: Exclude from Cygwin builds
  - docs/tests: Remove mention of hyper
  - docs: Fix typos
  - ftp: Fix teardown of DATA connection in done
  - http: Fail early when rewind of input failed when following redirects
  - license: Update some copyright links to curl.se
  - memanalyze.pl: Fix getaddrinfo/freeaddrinfo checks
  - misc: Fix spelling
  - misc: We write *an* IPv6 address
  - multi: Fix add_handle resizing
  - spelling: 'a' vs. 'an'
  - spelling: Call it null-terminate consistently
  - test1510: Fix expectation
  - tests: Await portfile to be complete
  - tests: Fix checks for https-mtls proto
  - tests: Improve server start reliability
  - tests: Move test docs into /docs
  - tests: Re-enable 1510, document heimdal memleak
  - tests: Test mtls also w/ clientAuth EKU only
  - tests: Test mtls with --insecure
  - tls BIOs: Handle BIO_CTRL_EOF correctly
  - tool_getparam: Make --no-anyauth not be accepted
  - tool_getparam: Refactored, simplified
  - tool_getparam: Remove two nextarg NULL checks
  - VULN-DISCLOSURE-POLICY.md: The distros list wants ≤ 7 days embargo
  - wolfssl: Fix sending of early data
  - ws: Handle blocked sends better (CVE-2025-5399)
  - ws: Tests and fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-1.0.cf" date="1752667200">- Update to 8.15.0
  - TLS: Remove support for Secure Transport and BearSSL
  - altsvc: Accept 'clear' without semicolon as well
  - asyn-ares: Remove redundant NULL check
  - asyn-thrdd: Free the previous name before strdup'ing the new
  - autotools: Detect and link 'brotlicommon' library for brotli
  - autotools: Drop '$top_builddir/src' from src header path
  - autotools: Drop headers from src mk-unity rules (fixup)
  - autotools: Drop no longer necessary '--srcdir' unity options
  - autotools: Drop redundant 'Makefile.inc' from 'EXTRA_DIST' in src
  - autotools: Simplify configuration in tests, examples
  - bufq: Change read/write signatures
  - bufq: Remove the unused Curl_bufq_unwrite function
  - build: Assume 'sys/socket.h', 'sys/time.h' on non-Windows (as in 'curl/curl.h')
  - build: Drop 'HAVE_SYS_SOCKET_H' and 'HAVE_SYS_TIME_H' macros
  - build: Drop explicit curlx from hdr paths, refer headers with 'curlx/' prefix
  - build: Drop unused variables in tests
  - build: Fix libcurltool with cmake and tunits, related tidy-ups
  - build: Split '.c' and '.h' file lists in tests
  - build: Stop checking for 'sys/stat.h'
  - build: stubgss tidy-ups (in tests)
  - build: Sync build scripts between client/libtest
  - build: Tidy up 'Makefile.inc' use in lib and src
  - build: Tidy up header paths, use srcdir where possible
  - cf-socket: Make socket data_pending a no-op
  - checksrc-all: Rewrite in Perl, remove 'checksrc.bat'
  - checksrc: Reduce exceptions, apply again to curlx
  - cmake/FindGSS: Fix processing C header path options
  - cmake/FindGSS: Initialize result variables
  - cmake: 'curl_add_clang_tidy_test_target' tidy-ups
  - cmake: Build 'stubgss' library for libtests to match autotools
  - cmake: Check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
  - cmake: Configure c-ares header directory in project root (was: lib)
  - cmake: Document OpenSSL and ngtcp2 crypto lib custom variables
  - cmake: Drop never-propagated C macros
  - cmake: Drop passing redundant 'CURL_STATICLIB' in examples and clients
  - cmake: Drop redundant macro from test clients
  - cmake: Drop reference to future variable
  - cmake: Enable soversion by default for OpenHarmony OS
  - cmake: Fix 'curl_add_clang_tidy_test_target' when no '-D' option
  - cmake: Fix generator expression in docs/examples
  - cmake: Gather options recursively in 'curl_add_clang_tidy_test_target'
  - cmake: Make docs depend on support files
  - cmake: Move 'OUTPUT' argument in the 'add_custom_command()' line
  - cmake: Omit clang-tidy on internal libs curlu and curltool
  - cmake: Replace 'cmakelint' with 'cmake-lint' from 'cmakelang', fix issues
  - cmake: Replace the way clang-tidy verifies tests, fix issues found
  - cmake: Simplify handling generated 'lib1521.c' in libtests
  - cmake: Sync 'target_link_libraries()' order in tests more
  - cmake: Sync tests scripts by using the variable 'BUNDLE'
  - cmake: Sync tests scripts with each other and autotools (more)
  - cmake: Use 'target_link_options()' when available
  - config-win32: Fix default targets, shorten macro logic
  - configure: Order LDAP after the SSL libraries
  - connect: Drop unused struct member
  - connection: Clarify 'transport'
  - connection: Eliminate member 'remote_addr'
  - curl-config: Fix whitespace in usage text
  - curl.h: Make CURL_IPRESOLVE_* symbols defined as longs
  - curl.h: Make CURLSSLOPT_* symbols defined as longs
  - curl.h: Remove the "RESERVED" error codes
  - curl: Implement non-blocking STDIN read on Windows
  - curl: Improve non-blocking STDIN performance
  - curl: Remove the global argument from many functions
  - curl: Unify pointer names to global config
  - curl_get_line: Make sure lines end with newline
  - curl_memory.h: Fix to undefine 'accept4'
  - curl_path: Make SFTP handle a path like /~ properly
  - curlinfo: Provide the 'digest' feature
  - CURLSHOPT_SHARE.md: Mention multi-threading requires callbacks
  - DEPRECATE.md: Add VS2005 removal to the list
  - digest: Fix build with disabled digest auth
  - DISTROS: Update NixOS link
  - docs,tests: Fix english grammar "allow to" -&gt; "allow &lt;something&gt; to"
  - docs/CONTRIBUTE: Fix broken link
  - docs/examples: Add ftp-delete.c
  - docs: Beef up examples/websocket.c
  - docs: Fix broken link in CODE_REVIEW.md
  - docs: Fix broken link in INSTALL.md
  - docs: Fix docs for CURLOPT_PREQUOTE after #17616
  - docs: Fix documentation of connect_only 2
  - docs: Fix two typos
  - docs: Mention that the netrc file works without port numbers
  - docs: Mention the as-is concept generically
  - docs: Note SSLS-EXPORT feature in -ssl-sessions doc
  - docs: Reflect that delimiter-separated capath is only OpenSSL
  - docs: Sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
  - docs: Warn about lifetime in CURLOPT_CLOSESOCKET*
  - easy: Fix comment-documentation
  - easygetopt: Fix curl logo in header comment
  - firefox-db2pem: Avoid use of eval in script
  - ftp: Fix prequotes for a directory in URL
  - ftplistparser: Split parse_unix into sub-functions
  - h2_serverpush: Fix file handle leaks reported by clang-tidy
  - h3: Fix query of concurrent streams
  - http/3: Report handshake with version and cipher as for TCP connections
  - http2: Do not delay RST send on aborted transfer
  - http2: Fix var types in is_alive() implementations
  - http: Explicitly ignore parsing errors for Retry-After
  - http: Fix build with cookies and HSTS disabled
  - http_ntlm: Protect against null deref
  - http_ntlm: Remove unreachable code
  - INSTALL.md: Cygwin details and add source code link
  - ldap: Avoid automake caching issues with LDAP library names
  - ldap: If ldap-lib is sufficient, add it to LIBS
  - ldap: Initial support for --with-ldap option
  - lib2082: Drop 'typedef struct'
  - lib: Address singleuse issues
  - lib: Avoid reusing unclean connection
  - lib: Drop two interim macros in favor of native libcurl API calls
  - lib: Fix unused parameter/function compiler warnings
  - lib: Make 'CURLX_SET_BINMODE()' and use it
  - lib: Make 'curlx_wait_ms()' and use it
  - lib: Replace scache no-op macros with '#ifdef'
  - lib: Stop 'time()' debug overrides at the end of source in altsvc, hsts
  - lib: Unify recv/send function signatures
  - libcurl-env.md: Drop LOGNAME, USER and NTLMUSER
  - libcurl.m4: Fix indentation
  - libssh2: Remove use of 'initialised' for clean-up
  - libssh: De-complex myssh_statemach_act()
  - libssh: Fix readdir issues
  - libtests: Make tests 1503, 1504, 1505 use the 1502 binary
  - libtests: More header tidy-ups
  - libtests: Stop building the same source multiple times
  - memdebug.h: #undef 'fclose' before defining it
  - memdebug.h: Eliminate global macro 'CURL_MT_LOGFNAME_BUFSIZE'
  - memdebug: Include in unity batch
  - memory: Stop overriding unused 'wcsdup()'/'_wcsdup()' system functions
  - memory: Tidy up '_tcsdup()' override
  - misc: Fix typos
  - mk-lib1521: Replace 'printf' with 'curl_mprintf'
  - multi: Add dirty bitset
  - multi: Do not expire a blocked transfer
  - multi: Fix polling with pending input
  - multi: Remove careful bounds check as coverity says it is not needed
  - multi: xfer table/bitset, handle limits
  - ngtcp2: Fix coverity warning about result handling
  - openssl: Enable readahead
  - openssl: Error on SSL_ERROR_SYSCALL
  - openssl: Fix handling of buffered data
  - openssl: Fix openssl engine use
  - openssl: Fix pkcs11 provider available check
  - os400: Upgrade ILE/RPG bindings with latest definitions
  - pingpong: On disconnect, check for unflushed pingpong state
  - projects/build-openssl.bat: Remove
  - pytest: test_07_70, weaken early data check
  - pytest: Adapt for runs with openssl-1.1.1
  - pytest: Disable test_07_37 and test_07_36 with openssl's quic
  - quic: Implement CURLINFO_TLS_SSL_PTR
  - RELEASE-PROCEDURE.md: Update docs/VERSIONS
  - runtests.pl: Fix sprintf() using one too many %s
  - runtests: Fix 'LD_PRELOAD' detection for cmake-built curl binaries
  - runtests: Support memory-limits per test
  - rustls: Apply memory function overrides, fixing an ECH buffer free
  - rustls: Don't try printing the not provided file
  - schannel: Allow partial chains for manual peer verification
  - schannel: Drop Windows 2000 compatibility logic
  - scorecard: Flame graphs and documentation
  - SCP/SFTP: Avoid busy loop after EAGAIN
  - scripts: Fix to quote the copyright email address
  - socks: Fix query when filter context is null
  - system.h: Remove some macros
  - test1117: Reduce write delays
  - test1175: Fix to run, and fix documentation issues detected
  - test1222: Fix for out-of-tree and no-libcurl-manual builds
  - test1499, 1599: use '%LOGDIR'
  - test1499: Verify two chunked responses on reused connection
  - test1596: Let test pass after year 2036
  - test1706: Pass include directory to 'managen' for out-of-tree builds
  - tests/client: Drop autotools logic no longer necessary
  - tests/client: Use 'curl_mfprintf()'
  - tests/dnsd: Read config from file
  - tests/http/clients: Drop hack and use 'curl_setup.h' again
  - tests/http/clients: Move to tests/client
  - tests/http/requirements: Remove multipart
  - tests/libtest: Call 'curlx_now_init()' for unit 1399, 2600 (Windows)
  - tests/libtest: Drop 'TEST_HANG_TIMEOUT' redefinition hack
  - tests/libtest: Drop a checksrc exception
  - tests/libtest: Use 'curltime' from curlx
  - tests/server/util.c: Include netinet/in6.h
  - tests/server: De-dupe/merge three 'sockdaemon()' clones into one
  - tests/server: Drop 'memdebug.h'
  - tests/server: Make all global vars/funcs static
  - tests/server: Move memory init to 'memptr.c'
  - tests/servers.pm: Add more ways to figure out current user
  - tests: Always make bundles, adapt build and tests
  - tests: Bundle http clients, de-dupe, enable for MSVC
  - tests: Constify, make consts static
  - tests: Drop 'BUNDLE_SRC' variable
  - tests: Drop mk-bundle exceptions
  - tests: Drop unused or redundant includes
  - tests: Drop useless "nodist_SOURCES" assignments
  - tests: Fail torture if !valgrind&amp;threaded resolver
  - tests: Fix 1301, 1308 to fail on error
  - tests: Fix 'BUNDLE' variable references in 'Makefile.am'
  - tests: Make all names &lt; 75 characters long
  - tests: Make individual test sources compile cleanly
  - tests: Make sshserver less verbose
  - tests: Move 'curlcheck.h' to libtest as 'unitcheck.h'
  - tests: Move GSS-API dynamic stub into debug-mode libcurl
  - tests: torture: Don't duplicate valgrind command
  - tests: Use %b64[] to base64 data
  - tests: Use %b64[] to base64 data in 2056, 2057
  - tftpd: Use 'CURLMIN()' macro
  - tidy-up: Replace '&lt;memdebug.h&gt;' with '"memdebug.h"' (src, units)
  - tls: Remove Curl_ssl false_start
  - tool1621: Drop unused internal libcurl headers
  - tool_getparam: Fix --ftp-pasv
  - tool_operate: Fix return code when --retry is used but not triggered
  - tool_paramhelp: Fix language in comments
  - top-complexity: Lower max allowed complexity threshold to 90
  - unit tests: Extract "private" prototypes at build time
  - unit1302: Expand the base64 encode/decode tests
  - url: Fix connection lifetime checks
  - url: Fix NULL deref with bad password when no user is provided
  - urlapi: Simplify and split into sub functions
  - urlapi: Use uppercase hex encoding
  - vauth: Move auth structs to conn meta data
  - vtls: Change send/recv signatures of tls backends
  - vtls: Fix a copy-pasted early data comment typo
  - vtls: Log rustls negotiated KEX group name
  - vtls: Prefer ciphersuite to cipher in msgs
  - vtls: Prefer rustls-ffi ciphersuite name API
  - VULN-DISCLOSURE-POLICY.md: Fix typos
  - VULN-DISCLOSURE-POLICY: All reports should be disclosed
  - VULN-DISCLOSURE-POLICY: Exclude not installed software
  - VULN-DISCLOSURE-POLICY: Minor language polish
  - warnless: Drop parts of the 'read'/'write' preprocessor hack (Windows)
  - warnless: Replace 'read()'/'write()' wrapper functions with macros (Windows)
  - windows: Drop redundant 'curl_wcsdup_callback' callback
  - windows: Fixup 'fopen()' in 'CURLDEBUG' builds
  - windows: Reduce/stop loading DLLs at runtime
  - wolfssl: Add support for ML_KEM hybrids
  - ws: Drop redundant 'CURL_EXTERN' from function definitions
  - xfer: Manage pause bits</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.0.cf" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.15.0-2.1.cf" date="1753617600">- Fix dependency on CA bundle when we don't use the old one at
  /etc/pki/tls/certs/ca-bundle.crt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
</package>
<package pkgid="d9fb506761cfc3def686d39e43b736d01697f7bc37cb70fcb5b2f530319a4bdb" name="libgpg-error" arch="i686">
  <version epoch="0" ver="1.61" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1.0.cf" date="1778414400">- Update to 1.61 (https://dev.gnupg.org/T8239)
  - Fix possible stack overflow in es_printf for %.100f format
    (https://dev.gnupg.org/T8240)
  - Fix out-of-bounds read in vfnameconcat
  - Add cross compile support for wasm*-*-emscripten target
  - Update Japanese and Polish translations</changelog>
</package>
<package pkgid="6cf9282077a32ba666bcbd198de2710e5ef6fa85026efd4fbbb8b4e4d2c5e52e" name="libgpg-error" arch="x86_64">
  <version epoch="0" ver="1.61" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1.0.cf" date="1778414400">- Update to 1.61 (https://dev.gnupg.org/T8239)
  - Fix possible stack overflow in es_printf for %.100f format
    (https://dev.gnupg.org/T8240)
  - Fix out-of-bounds read in vfnameconcat
  - Add cross compile support for wasm*-*-emscripten target
  - Update Japanese and Polish translations</changelog>
</package>
<package pkgid="7f613602fac84eaa2d13d57210c6031efca387818091786c2dfb22472e6a7b3a" name="libgpg-error-devel" arch="i686">
  <version epoch="0" ver="1.61" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1.0.cf" date="1778414400">- Update to 1.61 (https://dev.gnupg.org/T8239)
  - Fix possible stack overflow in es_printf for %.100f format
    (https://dev.gnupg.org/T8240)
  - Fix out-of-bounds read in vfnameconcat
  - Add cross compile support for wasm*-*-emscripten target
  - Update Japanese and Polish translations</changelog>
</package>
<package pkgid="bc8d61b00db1acb1392d0106b3810ca07787956cb11072ace6389b93a2a1b660" name="libgpg-error-devel" arch="x86_64">
  <version epoch="0" ver="1.61" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1.0.cf" date="1778414400">- Update to 1.61 (https://dev.gnupg.org/T8239)
  - Fix possible stack overflow in es_printf for %.100f format
    (https://dev.gnupg.org/T8240)
  - Fix out-of-bounds read in vfnameconcat
  - Add cross compile support for wasm*-*-emscripten target
  - Update Japanese and Polish translations</changelog>
</package>
<package pkgid="d2017076b6e0ae6d846d93372c889e4d07b204eeab3fba2fa10b4386896bff27" name="libidn" arch="i686">
  <version epoch="0" ver="1.43" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="746c3ae75b40ece70e0ad86a86ec07b554256fadc8655b331400df99654f0fce" name="libidn" arch="x86_64">
  <version epoch="0" ver="1.43" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="d86427e7d5e8d4f1d34cd1af888d8d2ffaaae62d9bbc1a9245764cf34f7cd303" name="libidn-devel" arch="i686">
  <version epoch="0" ver="1.43" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="19b00f8f7491959140874d7202b67da54c34588c55be3aed951adf3449725f7c" name="libidn-devel" arch="x86_64">
  <version epoch="0" ver="1.43" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="dddb611c118730e189a254d3dfda47b7be43300346e985ca83753b20797cab72" name="libidn-java" arch="noarch">
  <version epoch="0" ver="1.43" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="aee2ed60384771cfa7b86683397d21d1c0514275a043d32d0a45272705ac4c42" name="libidn-javadoc" arch="noarch">
  <version epoch="0" ver="1.43" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="495191fc8906dde82d4e70a2dbe197c2d60327c5bf93dcc65529a6ca426291ed" name="libmetalink" arch="i686">
  <version epoch="0" ver="0.1.3" rel="31.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-15" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-24" date="1642075200">- Fix a few issues found by the Coverity static analysis tool
  https://bugs.launchpad.net/libmetalink/+bug/1784359
  https://github.com/metalink-dev/libmetalink/pull/2
- Package the AUTHORS, ChangeLog and NEWS files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-25" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-27" date="1650542400">- Rebuild to sync with rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-28" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-29" date="1666180800">- Note: license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-30" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-31" date="1685361600">- Do not number the sole Source
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="2a224af05ae4a2953cf6eaa8d2c4d463c1d879f913f7d08ebe7286fd6e0bb1c2" name="libmetalink" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="31.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-15" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-24" date="1642075200">- Fix a few issues found by the Coverity static analysis tool
  https://bugs.launchpad.net/libmetalink/+bug/1784359
  https://github.com/metalink-dev/libmetalink/pull/2
- Package the AUTHORS, ChangeLog and NEWS files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-25" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-27" date="1650542400">- Rebuild to sync with rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-28" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-29" date="1666180800">- Note: license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-30" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-31" date="1685361600">- Do not number the sole Source
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="fbc3074ccc24ad4acc0524675f6490fc7272331dde614214880baa1daa17f5ec" name="libmetalink-devel" arch="i686">
  <version epoch="0" ver="0.1.3" rel="31.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-15" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-24" date="1642075200">- Fix a few issues found by the Coverity static analysis tool
  https://bugs.launchpad.net/libmetalink/+bug/1784359
  https://github.com/metalink-dev/libmetalink/pull/2
- Package the AUTHORS, ChangeLog and NEWS files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-25" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-27" date="1650542400">- Rebuild to sync with rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-28" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-29" date="1666180800">- Note: license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-30" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-31" date="1685361600">- Do not number the sole Source
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="fe20bbe987e56a5fde883e019bc4cbc506566fa7e9cf3cca23722756ab0253ae" name="libmetalink-devel" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="31.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-15" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-24" date="1642075200">- Fix a few issues found by the Coverity static analysis tool
  https://bugs.launchpad.net/libmetalink/+bug/1784359
  https://github.com/metalink-dev/libmetalink/pull/2
- Package the AUTHORS, ChangeLog and NEWS files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-25" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-27" date="1650542400">- Rebuild to sync with rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-28" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-29" date="1666180800">- Note: license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-30" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-31" date="1685361600">- Do not number the sole Source
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="3280def71702832f45b2651573945637f96dce22ec5d71feb4fd19a34edd85b2" name="libnet" arch="x86_64">
  <version epoch="0" ver="1.3" rel="7.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
</package>
<package pkgid="9a8a9bf0a0f6248b778dfac68fac0d41f5644aaca7ae74efb08e06b90548ee1f" name="libnet-devel" arch="x86_64">
  <version epoch="0" ver="1.3" rel="7.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
</package>
<package pkgid="9e915f2f0fa09ac02226f4ebf86cbf18f78479ac8e4ebe9f1a428dca3afd01bb" name="libnet-doc" arch="noarch">
  <version epoch="0" ver="1.3" rel="7.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
</package>
<package pkgid="4b88a5c4116a282af375b96e43630c91fc21fcdf29d39bc3984823a708a37f25" name="libpng10" arch="i686">
  <version epoch="0" ver="1.0.69" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-2" date="1517918400">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
- Make zlib-devel dependencies arch-specific
- Preserve upstream timestamps where possible</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-3" date="1518609600">- Avoid use of arch-specific build-requires (#1545195)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-4" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-5" date="1531483201">- Fix the calculation of row_factor in png_check_chunk_length (CVE-2018-13785)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-6" date="1549022400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-7" date="1564056000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="8f23aa17e6ec7cfd4b224584309aa47dfa20af2f24f0e2f5cf15e04ffc82a3b8" name="libpng10" arch="x86_64">
  <version epoch="0" ver="1.0.69" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-2" date="1517918400">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
- Make zlib-devel dependencies arch-specific
- Preserve upstream timestamps where possible</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-3" date="1518609600">- Avoid use of arch-specific build-requires (#1545195)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-4" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-5" date="1531483201">- Fix the calculation of row_factor in png_check_chunk_length (CVE-2018-13785)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-6" date="1549022400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-7" date="1564056000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="bb45fa93e605aaa8781635b9b41e7b97c2925c474f5efee7089fe6edf6208b0c" name="libpng10-devel" arch="i686">
  <version epoch="0" ver="1.0.69" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-2" date="1517918400">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
- Make zlib-devel dependencies arch-specific
- Preserve upstream timestamps where possible</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-3" date="1518609600">- Avoid use of arch-specific build-requires (#1545195)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-4" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-5" date="1531483201">- Fix the calculation of row_factor in png_check_chunk_length (CVE-2018-13785)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-6" date="1549022400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-7" date="1564056000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="74fe61f109a36dea08df8da08230e1e9d8a62129a6aad51376ac6acada53f1fa" name="libpng10-devel" arch="x86_64">
  <version epoch="0" ver="1.0.69" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-2" date="1517918400">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
- Make zlib-devel dependencies arch-specific
- Preserve upstream timestamps where possible</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-3" date="1518609600">- Avoid use of arch-specific build-requires (#1545195)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-4" date="1531483200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.69-5" date="1531483201">- Fix the calculation of row_factor in png_check_chunk_length (CVE-2018-13785)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-6" date="1549022400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-7" date="1564056000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.69-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="e9ea6c2bf4c4f408cc4e611aa3d0b9fd0a672fb0866b30f2a2932530a2e382a1" name="libspf" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="0.cvs20050603.1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041008.1" date="1097236800">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041021.1" date="1098360000">- another CVS snapshot
- spfqtool docs added to -progs subpackage
- alternatives precedence bumped up to 90 (above libspf2, which is buggy)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041026.1" date="1098792000">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041125.1" date="1101384000">- another CVS snapshot
- add another patch to remove bits of spfmilter/Makefile.am that are not
  only not necessary, but that can break things by being there</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041209.1" date="1102593600">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050208.1" date="1107864000">- another CVS snapshot
- stop spfmilter service before removal of package
- restart milter after package upgrade
- remove /var/run/spfmilter and contents after removal of package
- replace _var with _localstatedir macro
- replace /etc with _sysconfdir macro</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050304.1" date="1109937600">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050429.1" date="1114776000">- another CVS snapshot
- updated spfmilter Makefile patch
- add --enable-rfc-recursion configure option for RFC compliance
- add fix for broken tests due to wrong IP addresses
- remove bogus header file /usr/include/_stdint.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050509.1" date="1115640000">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050603.1" date="1117800000">- another CVS snapshot
- use %exclude directives in file list instead of deleting installed files
- use Requires() style dependencies instead of PreReq for scriptlets
- remove fix for broken tests, no longer needed
- add libspf-1.0.0-p4-res_query.patch (included in tarball) to fix new
  RHEL3.x86_64 breakage</changelog>
</package>
<package pkgid="b6e41ac9566705fd92719d3df6375e0a891d715582f1b7e98d33ffc7d808f05f" name="libspf-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="0.cvs20050603.1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041008.1" date="1097236800">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041021.1" date="1098360000">- another CVS snapshot
- spfqtool docs added to -progs subpackage
- alternatives precedence bumped up to 90 (above libspf2, which is buggy)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041026.1" date="1098792000">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041125.1" date="1101384000">- another CVS snapshot
- add another patch to remove bits of spfmilter/Makefile.am that are not
  only not necessary, but that can break things by being there</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041209.1" date="1102593600">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050208.1" date="1107864000">- another CVS snapshot
- stop spfmilter service before removal of package
- restart milter after package upgrade
- remove /var/run/spfmilter and contents after removal of package
- replace _var with _localstatedir macro
- replace /etc with _sysconfdir macro</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050304.1" date="1109937600">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050429.1" date="1114776000">- another CVS snapshot
- updated spfmilter Makefile patch
- add --enable-rfc-recursion configure option for RFC compliance
- add fix for broken tests due to wrong IP addresses
- remove bogus header file /usr/include/_stdint.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050509.1" date="1115640000">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050603.1" date="1117800000">- another CVS snapshot
- use %exclude directives in file list instead of deleting installed files
- use Requires() style dependencies instead of PreReq for scriptlets
- remove fix for broken tests, no longer needed
- add libspf-1.0.0-p4-res_query.patch (included in tarball) to fix new
  RHEL3.x86_64 breakage</changelog>
</package>
<package pkgid="fe8bf2bb1a9c4c3788a9f9894098e5a9d41d41e14ffffc708b36588c153aa259" name="libspf-milter" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="0.cvs20050603.1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041008.1" date="1097236800">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041021.1" date="1098360000">- another CVS snapshot
- spfqtool docs added to -progs subpackage
- alternatives precedence bumped up to 90 (above libspf2, which is buggy)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041026.1" date="1098792000">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041125.1" date="1101384000">- another CVS snapshot
- add another patch to remove bits of spfmilter/Makefile.am that are not
  only not necessary, but that can break things by being there</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041209.1" date="1102593600">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050208.1" date="1107864000">- another CVS snapshot
- stop spfmilter service before removal of package
- restart milter after package upgrade
- remove /var/run/spfmilter and contents after removal of package
- replace _var with _localstatedir macro
- replace /etc with _sysconfdir macro</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050304.1" date="1109937600">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050429.1" date="1114776000">- another CVS snapshot
- updated spfmilter Makefile patch
- add --enable-rfc-recursion configure option for RFC compliance
- add fix for broken tests due to wrong IP addresses
- remove bogus header file /usr/include/_stdint.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050509.1" date="1115640000">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050603.1" date="1117800000">- another CVS snapshot
- use %exclude directives in file list instead of deleting installed files
- use Requires() style dependencies instead of PreReq for scriptlets
- remove fix for broken tests, no longer needed
- add libspf-1.0.0-p4-res_query.patch (included in tarball) to fix new
  RHEL3.x86_64 breakage</changelog>
</package>
<package pkgid="dd7313729abc22dced989f7929042fcbda386af89ad8e4a68b3ad8860c2882db" name="libspf-progs" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="0.cvs20050603.1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041008.1" date="1097236800">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041021.1" date="1098360000">- another CVS snapshot
- spfqtool docs added to -progs subpackage
- alternatives precedence bumped up to 90 (above libspf2, which is buggy)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041026.1" date="1098792000">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041125.1" date="1101384000">- another CVS snapshot
- add another patch to remove bits of spfmilter/Makefile.am that are not
  only not necessary, but that can break things by being there</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20041209.1" date="1102593600">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050208.1" date="1107864000">- another CVS snapshot
- stop spfmilter service before removal of package
- restart milter after package upgrade
- remove /var/run/spfmilter and contents after removal of package
- replace _var with _localstatedir macro
- replace /etc with _sysconfdir macro</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050304.1" date="1109937600">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050429.1" date="1114776000">- another CVS snapshot
- updated spfmilter Makefile patch
- add --enable-rfc-recursion configure option for RFC compliance
- add fix for broken tests due to wrong IP addresses
- remove bogus header file /usr/include/_stdint.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050509.1" date="1115640000">- another CVS snapshot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.0.0-0.cvs20050603.1" date="1117800000">- another CVS snapshot
- use %exclude directives in file list instead of deleting installed files
- use Requires() style dependencies instead of PreReq for scriptlets
- remove fix for broken tests, no longer needed
- add libspf-1.0.0-p4-res_query.patch (included in tarball) to fix new
  RHEL3.x86_64 breakage</changelog>
</package>
<package pkgid="d813d73e0dd4c34553487d8049c600f4fb41a7637a0f387cf723809947ea53a3" name="libssh2" arch="i686">
  <version epoch="0" ver="1.11.1" rel="6.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-5.0.cf" date="1717329600">- Disable rpath, which is useful for riscv64
  (see https://src.fedoraproject.org/rpms/libssh2/pull-request/2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-6.0.cf" date="1720612800">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-7.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
</package>
<package pkgid="4b716d63b1179a8c02f2ca37addca6be52923e67ca1bf8d94d9da7c89aaad62a" name="libssh2" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="6.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-5.0.cf" date="1717329600">- Disable rpath, which is useful for riscv64
  (see https://src.fedoraproject.org/rpms/libssh2/pull-request/2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-6.0.cf" date="1720612800">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-7.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
</package>
<package pkgid="2504b17fcf3c1a89f31499bfa6c461d3fecab06d967e2f58d8f3eedd418b6299" name="libssh2-devel" arch="i686">
  <version epoch="0" ver="1.11.1" rel="6.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-5.0.cf" date="1717329600">- Disable rpath, which is useful for riscv64
  (see https://src.fedoraproject.org/rpms/libssh2/pull-request/2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-6.0.cf" date="1720612800">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-7.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
</package>
<package pkgid="dcd202a1e5447d627a1ff03159b5a7d8f4a1add8161eae68583be6d936b99b72" name="libssh2-devel" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="6.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-5.0.cf" date="1717329600">- Disable rpath, which is useful for riscv64
  (see https://src.fedoraproject.org/rpms/libssh2/pull-request/2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-6.0.cf" date="1720612800">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-7.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
</package>
<package pkgid="15892d99d9e9e2caa1de14652aca821b91a919c35aa28764858b3461449d79c4" name="libssh2-docs" arch="noarch">
  <version epoch="0" ver="1.11.1" rel="6.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-5.0.cf" date="1717329600">- Disable rpath, which is useful for riscv64
  (see https://src.fedoraproject.org/rpms/libssh2/pull-request/2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-6.0.cf" date="1720612800">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-7.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
</package>
<package pkgid="fa0d0571869b9f57d1a20c3e07733fdbff016b4f65ec2a995230c2fb9cc54684" name="libtidyp" arch="x86_64">
  <version epoch="0" ver="1.04" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-11" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-12" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-13" date="1612267200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-14" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove RPATH to libdir
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-15" date="1639051200">- Run test suite with LD_LIBRARY_PATH pointing to tidyp library in the
  buildroot so that it can be found
- Fix dist tags for CentOS Stream</changelog>
</package>
<package pkgid="82ff1ee5682788deacd3b140fdd80d5e6f082d18d587e6520e5e884eee001e42" name="libtidyp-devel" arch="x86_64">
  <version epoch="0" ver="1.04" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-11" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-12" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-13" date="1612267200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-14" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove RPATH to libdir
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-15" date="1639051200">- Run test suite with LD_LIBRARY_PATH pointing to tidyp library in the
  buildroot so that it can be found
- Fix dist tags for CentOS Stream</changelog>
</package>
<package pkgid="d9daef52667b94fac0669f141732fefb7d6060a5df6550ecdc96f3e72588d7ab" name="libunrar" arch="x86_64">
  <version epoch="0" ver="7.21" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-0.1.0.cf.beta1" date="1749643200">- Update to 7.12 beta 1
- Update debian files to 7.1.7-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-1.0.cf" date="1777550400">- Update to 7.21</changelog>
</package>
<package pkgid="b9377730cb0db252bcf80230a5e4b82912263887143b79adf5b477549d9d3cd9" name="libunrar-devel" arch="x86_64">
  <version epoch="0" ver="7.21" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-0.1.0.cf.beta1" date="1749643200">- Update to 7.12 beta 1
- Update debian files to 7.1.7-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-1.0.cf" date="1777550400">- Update to 7.21</changelog>
</package>
<package pkgid="71bcbbb73eac5ec11a0290c601bed8412d0d291d6e643052f973eacc05a391f6" name="libxml2" arch="i686">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="978524968ce4295a27e16e2d0a26f47257b1682b42f7a09b965c0fb0d7ad9fba" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="cefb1e1151565df5d379b75a6b30f3a2d4fcd50175590d9354fc47720db8d7b0" name="libxml2-devel" arch="i686">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="9eba281d31aeb6409343fd95d2f8214fc1a963f7c659910b6539fbbcf22afd77" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="9a5a60a192198192f16b33dd672eda35c97b0f1db766c91cea9c9eedafbc40e0" name="libxml2-static" arch="x86_64">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="a492589efbe216d937da1716234af129f0e7de4630b846dbda4617202fa55aa8" name="libxslt" arch="i686">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="44927db6748334f931975222bcc6d638977a03ba1280a85a3bb079ec776cad1d" name="libxslt" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="4de7b436371e101e63aa5ecd8c2db427837491500ea5d9fa0f410001cba687d1" name="libxslt-devel" arch="i686">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="2e2ecbc1e87a961e2725519f926ccd1f3a5de860716f1c735cc1aeb181e98d1a" name="libxslt-devel" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="b1d721f38ca7812070a217b2f5dacdf6579c33fb171f0065221f5ac8d7372384" name="mcrcon" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-4" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-7" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.3-1" date="1733313600">- Update to 0.7.3 (rhbz#2330303)
  - Add support for Valve style rcon authentication (GH#106)
  - Change maximum packet size to correct value (4096 -&gt; 4106) (GH#103)
  - Print auth failed message to stderr instead of stdout
  - Fail immediately if received packet size is out of spec
  - Return proper exit code from run_terminal_mode()
  - Add error messages to rcon_command() function
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="bc9a4f83ee3e6543c31789550c7d86f6c66c31304085f99d289e629246f79240" name="metamail" arch="x86_64">
  <version epoch="0" ver="2.7" rel="54.7.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.5" date="1714737600">- Fix for gcc14 compatibility and some other stuff (rightfully) generating
  warnings
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.6" date="1726660800">- Avoid file dependency for fonts after Fedora 38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.7" date="1761825600">- Port from termio.h to termios.h
- Add fixes for c99</changelog>
</package>
<package pkgid="58f191049396965822fd30625f0cce4bc4fc727b5edfc9b1f7a15b2f5d92f680" name="mgdiff" arch="x86_64">
  <version epoch="0" ver="1.0" rel="13.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0-13" date="1680177600">- License is SPDX: MIT
- Avoid deprecated patch syntax
- Use distribution linker flags
- Replace deprecated _BSD_SOURCE and _SVID_SOURCE with _DEFAULT_SOURCE
  unless we're on EL-7 or Fedora &lt; 21, where it doesn't work</changelog>
</package>
<package pkgid="73940388f66f43a1e69fb8d4ccddf0568eaa415cf59259709d80b1200686fd88" name="mirror" arch="noarch">
  <version epoch="0" ver="2.9" rel="13"/>
  <changelog author="Conectiva &lt;dist@conectiva.com&gt;" date="929534400">- Recompiled with glibc 2.1.x, egcs 1.1.x, rpm 3.0.x and kernel 2.2.x</changelog>
  <changelog author="Guilherme Wunsch Manika &lt;gwm@conectiva.com&gt;" date="940420800">- Security fix against the '..' problem</changelog>
  <changelog author="Guilherme Wunsch Manika &lt;gwm@conectiva.com&gt;" date="956059200">- Dealt with possibly compressed man pages</changelog>
  <changelog author="Guilherme Wunsch Manika &lt;gwm@conectiva.com&gt;" date="970747200">- Macro-ized everything</changelog>
  <changelog author="Wanderlei Antonio Cavassin &lt;cavassin@conectiva.com&gt;" date="971611200">- fixed man page perms</changelog>
  <changelog author="Wanderlei Antonio Cavassin &lt;cavassin@conectiva.com&gt;" date="971611201">- fixed doc perms (argh!)</changelog>
  <changelog author="Arnaldo Carvalho de Melo &lt;acme@conectiva.com&gt;" date="971697600">- /usr/lib/mirror _is_ part of this package
- more macros
- redid the patch to make it possible to build this package as non-root user</changelog>
  <changelog author="Raul Dias &lt;rsd@conectiva.com&gt;" date="984744000">- mirror-2.9-11cl
- added patch to prevent timeouts during directory listing.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; mirror-2.9-12" date="1047384000">- added security_note.txt to docs and patched mirror.defaults accordingly.
- don't automatically replace mirror.defaults on upgrade.
- add provides perl(lsparse.pl) to fix perl dependency issue.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; mirror-2.9-13" date="1071057600">- Even more macros.
- Updated %description.
- Updated URL.
- Used a valid Group: Applications/Internet.</changelog>
</package>
<package pkgid="22a1ca6c2a3b8fc8a87afb2f3414ff88edcd15133879b3820de29d5a418bc265" name="mkisofs" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="454dd29381be98ba2be24d548e1483e35f50d4e1544330d876c8d363f7205d61" name="mkisofs" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="a6c945e10b8b5f5b3055be29e78db85380183adf8a979750128f334c41d38ed1" name="mod_fastcgi" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="3.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7.1-2" date="1705924800">- Drop support for httpd 2.2.x
- Avoid use of deprecated patch syntax
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7.1-3" date="1706184000">- Rebuilt for binutils breakage in Rawhide
  (see https://pagure.io/releng/issue/11888)</changelog>
</package>
<package pkgid="67d6206877664e92f147d6aec134326640bf07f887223e35fea36b016abd21e6" name="mod_fcgid" arch="x86_64">
  <version epoch="0" ver="2.3.9" rel="33.fc29"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-27" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.9-28" date="1661342400">- BR: systemd-rpm-macros for definition of %{_tmpfilesdir}</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-31" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-32" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Software Management Team &lt;packaging-team-maint@redhat.com&gt; - 2.3.9-33" date="1720526400">- Eliminate use of obsolete %patchN syntax (#2283636)</changelog>
</package>
<package pkgid="32dc6a4e82c8293c4dcde65e07fbc95126a50b0024fd77617a4a0f758cc1d62c" name="moin" arch="noarch">
  <version epoch="0" ver="1.9.11" rel="3.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9.11-2.0.cf" date="1676635200">- Use SPDX-format license tag
- Assume we have rpm 4.9 or later
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9.11-3.0.cf" date="1714737600">- Avoid use of deprecated patch syntax
- Expand %files list to avoid warning about passlib.rpmmoved listed twice</changelog>
</package>
<package pkgid="7a0ccc829e146e393c5b699592c15fd052ccb9d7be9003dad6931464aac4381a" name="moin-macro-MiniPage" arch="noarch">
  <version epoch="0" ver="1.9" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-4" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="858a2583c4f67aca9da1a39b0e00a4e9005ed308aeceabc8effd006745f838bd" name="moin-macro-TitleIndexNonPersonal" arch="noarch">
  <version epoch="0" ver="20060519" rel="13.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20060519-13" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7f06704a6159e4ded0f924358a1333cb624eca8a68379acacbc2f6ae979b55ed" name="moin-theme-balanced" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="2c8fff0edeeff9b4cefaf4433f4380c59e2f398450c1de5bacfbc5b4dd75724c" name="moin-theme-balanced-kubuntu" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="1141dd7073fab1d0e22844ff617c4bfee7b869c8646245ecb613f7e756e5e9da" name="moin-theme-balanced-orchard" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="92d21973c651f5d42df1d15655b226c4766922fdabb6db41085c0ceb146232a8" name="moin-theme-dew" arch="noarch">
  <version epoch="0" ver="0" rel="0.12.20080530.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0-0.12.20080530" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="00a3a2597aff225253a4e52a552f36a84d5db77f4f72691e808ab7c33f9c1b0c" name="moin-theme-hypermodern" arch="noarch">
  <version epoch="0" ver="2006.02.24" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2006.02.24-14" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a3b33a493379dd0c367761e6f6e9fc1ec914b7fc9f5ca966b395121bb4681ead" name="moin-theme-mentalwealth" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="f7da3e682002546f18bdb2da87798c2c3221fbae1ec3542e66c3a73a9347a411" name="moin-theme-mentalwealth-orange" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="aec7ff4a5581f1f57aa2e4f5303640c5aac216547267c70c94111cbf8f6e690e" name="moin-theme-mentalwealth-purple" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="6635e186474d7bc64df0785db2ef8a24676ad548e8622a3ebe420afd9fdac35e" name="moin-theme-mentalwealth-red" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="6a4cd8e41197b376f35eb5653d2bba286033fcf17c9672ff824e8c5e2456e869" name="moin-theme-monobook" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="4d806137995b1bd816b7bef210b358afe1c2eeede501aab8bf1d22ea6f075198" name="moin-theme-monomoin" arch="noarch">
  <version epoch="0" ver="0.5" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-14" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="1878363653fe4f41184db314f198d516a4a91321817aea09da3983c659e59e87" name="moin-theme-solenoid" arch="noarch">
  <version epoch="0" ver="2012.12.16" rel="6.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2012.12.16-6" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3cb438b511a854524f99d94a488d0e1a027e1712458e2d4f1af9fd17875056da" name="moin-theme-widget" arch="noarch">
  <version epoch="0" ver="20060807" rel="13.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20060807-13" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="4b5d89923dd806634080b21b434627c8f2b9695d718204d72e6a995763891e0b" name="network-scripts-ppp" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="35.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-24.0" date="1530705600">- Updated EAP-TLS patch to v1.101 (CVE-2018-11574)
- Replaced initscripts requirement by network-scripts from Fedora 29 (#1592384)
- Remove %clean section and buildroot cleaning in %install section
- Drop support for building with old distributions prior to Fedora 21
  - Always assume use of systemd
  - Always have libudev with systemd
  - systemd-units always part of systemd package now
  - Always put ephemeral files under /run rather than /var
  - Always have glibc with CLOEXEC support
  - Always package our own initscripts
  - %_tmpfilesdir macro always available
  - There's always a devel package for libpcap</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-27.0" date="1539950400">- Split out the network-scripts from Fedora 29 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-28.0" date="1542888000">- Updated EAP-TLS patch to v1.102</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-30.0" date="1547640000">- Fix some issues found by coverity scan</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-31.0" date="1558353600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-32.0" date="1573473600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-33.0" date="1573473601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-34.0" date="1582891200">- Fixed buffer overflow in the eap_request and eap_response functions
  (CVE-2020-8597)
- Changed sources to github</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-35.0" date="1587643200">- Updated EAP-TLS patch to v1.300</changelog>
</package>
<package pkgid="b5ba4a06ea6217c9fe87d1383c54aa4fdce21d43c85187811812e23dc89ab4f6" name="nmap" arch="x86_64">
  <version epoch="4" ver="7.92" rel="5.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-3.1.cf" date="1689854400">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-4.0.cf" date="1701259200">- Use pcre2 instead of deprecated pcre from F-40 onwards (#2128336)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-5.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-6.0.cf" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.94-1.0.cf" date="1709208000">- Update to 7.94 (see CHANGELOG for details)
- Zenmap now requires Python 3
- Required lua version is now 5.4
- Provide ncat in nmap-ncat for convenience (rhbz#2214073)
- Add patch to fix finding zenmap messages files
  (https://github.com/nmap/nmap/issues/2718)
  (https://github.com/nmap/nmap/pull/2789)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.95-1.0.cf" date="1713873600">- Update to 7.95 (see CHANGELOG for details)
- Use pcre2 unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-2.0.cf" date="1720958400">- Downgrade Nmap to 7.92 to fix NPSL license issue (rhbz#2296006)
  https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/thread/Q67UGCHSCKCLJOVOHSLYU4AERAHBS5YE/
  https://gitlab.com/fedora/legal/fedora-license-data/-/issues/543
- pcre2 only used from F-40 onwards again, as it was prior to 7.95
- Support EMS in ssl-enum-ciphers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-3.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-4.0.cf" date="1737201600">- Fix build with libpcap-1.10.5
  - This version changed SOCKET to PCAP_SOCKET, which conflicts with an
    unrelated use of the same name internally
  - https://github.com/the-tcpdump-group/libpcap/pull/1251</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-5.0.cf" date="1737201601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="6c5f81fd8d84c97837f6ab1be0e8547ed44ace5daad7a3ffe58def4c87a3e625" name="nmap-ncat" arch="x86_64">
  <version epoch="4" ver="7.92" rel="5.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-3.1.cf" date="1689854400">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-4.0.cf" date="1701259200">- Use pcre2 instead of deprecated pcre from F-40 onwards (#2128336)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-5.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-6.0.cf" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.94-1.0.cf" date="1709208000">- Update to 7.94 (see CHANGELOG for details)
- Zenmap now requires Python 3
- Required lua version is now 5.4
- Provide ncat in nmap-ncat for convenience (rhbz#2214073)
- Add patch to fix finding zenmap messages files
  (https://github.com/nmap/nmap/issues/2718)
  (https://github.com/nmap/nmap/pull/2789)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.95-1.0.cf" date="1713873600">- Update to 7.95 (see CHANGELOG for details)
- Use pcre2 unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-2.0.cf" date="1720958400">- Downgrade Nmap to 7.92 to fix NPSL license issue (rhbz#2296006)
  https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/thread/Q67UGCHSCKCLJOVOHSLYU4AERAHBS5YE/
  https://gitlab.com/fedora/legal/fedora-license-data/-/issues/543
- pcre2 only used from F-40 onwards again, as it was prior to 7.95
- Support EMS in ssl-enum-ciphers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-3.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-4.0.cf" date="1737201600">- Fix build with libpcap-1.10.5
  - This version changed SOCKET to PCAP_SOCKET, which conflicts with an
    unrelated use of the same name internally
  - https://github.com/the-tcpdump-group/libpcap/pull/1251</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-5.0.cf" date="1737201601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="ef1b60ba5342d6cbc3666005047eea0fd00e3510eef149ebfac29d9d7f2c74a2" name="perl-Algorithm-C3" arch="noarch">
  <version epoch="0" ver="0.11" rel="10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-10" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1567b512ef196a9290405efbb10cb2084d2ec09aa642a6ca074c4b3644c90374" name="perl-Algorithm-Diff" arch="noarch">
  <version epoch="0" ver="1.2010" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2010-8" date="1678104000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="82f86bf9c5fdc167b2685f7b69c79c55afb7b9324791ff02793a68971ec3719c" name="perl-Algorithm-Diff-XS" arch="x86_64">
  <version epoch="0" ver="0.04" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-22" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-25" date="1689076800">- Perl 5.38 rebuild</changelog>
</package>
<package pkgid="35a4231d76ca54428c7089794b799486af758d971da4a34f86ac964a2fc7927f" name="perl-Any-Moose" arch="noarch">
  <version epoch="0" ver="0.27" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-27" date="1678104000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="8a49aa0bbb941033e50c712c2b9d4755ce533a2dfb9071d3893c035b20b06258" name="perl-AnyEvent" arch="x86_64">
  <version epoch="0" ver="7.17" rel="18.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-11" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-15" date="1678190400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-16" date="1689249600">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-18" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="c5fcfcaa386e95942437890aa142340c13fbd0e422f2f00947ca2bd678204d67" name="perl-AnyEvent-AIO" arch="noarch">
  <version epoch="0" ver="1.1" rel="38.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-38" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="29cca9eb05477613412fb2357750b69c2d24a51b54056230d7eca39549287464" name="perl-AnyEvent-BDB" arch="noarch">
  <version epoch="0" ver="1.1" rel="42.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-42" date="1689336000">- Use SPDX-format license tag
- Use %licence unconditionally</changelog>
</package>
<package pkgid="bfe7931fd3f646ba4dbf0d28ce5cc22636e613bcf078574e9d270f8f40916c5f" name="perl-Archive-Any" arch="noarch">
  <version epoch="0" ver="0.0946" rel="13.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0946-13" date="1678190400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="2f32dffd59e413e90e56cfc5799109a9d224f5399967c357a3c55032d9a6d7ef" name="perl-Archive-Any-Lite" arch="noarch">
  <version epoch="0" ver="0.11" rel="22.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-22" date="1678190400">- Use SPDX-format license tag
- BR: perl(Parallel::ForkManager) unconditionally
- Use %license unconditionally</changelog>
</package>
<package pkgid="f66ef2340c197ed9e50e55b5b35e6fc8c4197769d1a695df5cb8faac66d9b0b2" name="perl-Archive-Peek" arch="noarch">
  <version epoch="0" ver="0.37" rel="5.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-1" date="1636977600">- Update to 0.37
  - Add repository metadata
  - Port from Moose to Moo and Type::Tiny
  - Make prereqs more specific with respect to phase
  - Add negative test
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-5" date="1678190400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="da6a68d20f836e182384de1f7a15b58f6e13649fa06c580170dec6778b0b5227" name="perl-Archive-Tar" arch="noarch">
  <version epoch="0" ver="3.08" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.04-1" date="1740571200">- Update to 3.04
  - Fix handling filenames with trailing whitespace
  - Allow --format=ustar option for ptar
  - Symlink tests on Windows (https://github.com/Perl/perl5/issues/21402)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.06-1" date="1778414400">- Update to 3.06
  - Hardlinks not extracted by default; added EXTRACT_HARDLINK flag
  - If hardlinks are extracted, they are now subject to the same rules as
    symlinks with regards to chown and chmod</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.08-1" date="1779624000">- Update to 3.08
  - Validate symlink and hardlink linkname in SECURE MODE
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="49ce9455736475167a8581a2ebe2a74d8271d1a99adb47b346cf4abd629c7078" name="perl-Archive-Zip" arch="noarch">
  <version epoch="0" ver="1.68" rel="11.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.68-11" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="6754a8ddd687b0722559d99cc36e47d247c9f2b0916543f1e99c0206fd23d978" name="perl-Array-Compare" arch="noarch">
  <version epoch="0" ver="3.0.8" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.3-1" date="1565697600">- Update to 3.0.3
  - Added NoSkip method to clear Skip setting</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.3-3" date="1593432000">- Perl 5.32 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.7-1" date="1607342400">- Update to 3.0.7
  - Fix documentation typo
  - Add bugtracker info</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.8-1" date="1608552000">- Update to 3.0.8
  - Only support versions 5.10+</changelog>
</package>
<package pkgid="be23c876916a49d72b679ae0f38bed1b0e472558804ff01e270d865c9f4cbe22" name="perl-Array-Diff" arch="noarch">
  <version epoch="1" ver="0.09" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.09-14" date="1678276800">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="cdddf3d0f3a13aa73c4c41893fc0a55821314b43ddc964b7843b3e24f0464764" name="perl-B-COW" arch="x86_64">
  <version epoch="0" ver="0.007" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-6" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-9" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-1" date="1665835200">- Update to 0.005
  - Add version to Test::More use to ensure correct version
  - Remove useless MIN_PERL_VERSION_FOR_COW
  - Update CI workflow
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-1" date="1666094400">- Update to 0.006
  - Disable prototypes to silence warning</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.007-1" date="1666353600">- Update to 0.007
  - Advertise XSLoader dependency in metadata</changelog>
</package>
<package pkgid="9483168c5462adec984e8e9ab37a317a641b6887ed7577fcf8025f5804d0ab06" name="perl-B-Hooks-EndOfScope" arch="noarch">
  <version epoch="0" ver="0.28" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-6" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.28-1" date="1709294400">- Update to 0.28
  - Add optional prereqs to metadata to help prereq analysis tools
    (CPAN RT#151992)</changelog>
</package>
<package pkgid="957de10f275437a0f1ae3f9651c1c144e114ccf727414ae0122fddc32a502dbb" name="perl-B-Hooks-OP-Annotation" arch="x86_64">
  <version epoch="0" ver="0.44" rel="35.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-29" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-33" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-35" date="1678276800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="62c74147f7c9bfe7258f692748c79d3fbbd6093e4b6c349f219650a0ceb54ec4" name="perl-B-Hooks-OP-Check" arch="x86_64">
  <version epoch="0" ver="0.22" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-13" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-17" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-19" date="1678276800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7a20fec292319c6f76b968a7286d7be14de1007ad3a5d5c327356c0559fd8f3d" name="perl-B-Keywords" arch="noarch">
  <version epoch="0" ver="1.29" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1716811200">- Update to 1.27 (rhbz#2283492)
  - Add bareword __CLASS__ since 5.39.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1750939200">- Update to 1.28
  - Add keywords any, all since 5.42.0
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1760875200">- Update to 1.29
  - Fix new 5.43 warning with qw($\) (GH#10)</changelog>
</package>
<package pkgid="ccc85dc7387407b630ede11c98f7a99a98e743ac0386a08e31926f7f8af7980a" name="perl-B-Utils" arch="x86_64">
  <version epoch="0" ver="0.27" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-19" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-23" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-25" date="1678276800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6627958a8f21d4e7c60866755352ad8c6df7d15e25b92c08140ddf00d70443d8" name="perl-BDB" arch="x86_64">
  <version epoch="0" ver="1.92" rel="23.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-17" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-20" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-23" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="88483f81af5f3cd40eff9d507fa6d0e1ea71e38b010f9aec75f85a0cbaa304b3" name="perl-BSD-Resource" arch="x86_64">
  <version epoch="0" ver="1.2911" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-16" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-19" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-21" date="1674302400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3914fad347f071920f2314a9dca2ce3775b187340d59d6e182d3cf700def56ed" name="perl-BerkeleyDB" arch="x86_64">
  <version epoch="0" ver="0.67" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.65-9" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-1" date="1728907200">- Update to 0.66
  - Bundled Test::More failed with perl 5.41.x (GH#12)
  - Possible precedence problem between ! and string eq (GH#13)
  - Silence clang warnings (GH#10)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-3" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.67-1" date="1770033600">- Update to 0.67 (no functional changes)</changelog>
</package>
<package pkgid="3504d9eb062f4d5aa1ac5e420316b8effdde08f1afd651d4f11fc62030659ede" name="perl-CPAN-Changes" arch="noarch">
  <version epoch="0" ver="0.500005" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500002-1" date="1698321600">- Update to 0.500002
  - Full rewrite
    - The new version can parse nested entries to an arbitrary depth, rather
      than just groups
    - It can parse many more formats, and can format the outputs more flexibly;
      this means it can better handle the change logs that actually exist on
      CPAN
  - Parsed releases keep their original order
  - Pass given ChangeLog filename for --check
- Package LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500003-1" date="1708689600">- Update to 0.500003
  - Fix calling -&gt;name on an unnamed group
  - Fix -&gt;set_changes call on groups</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500004-1" date="1714737600">- Update to 0.500004
  - Fix tests on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500005-1" date="1744977600">- Update to 0.500005
  - Fix Test::CPAN::Changes on perl 5.10 without upgrading version.pm
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="57ce523cd9eaca56a3e7ccf2593295918f8e6c22e2e38a299925b1988ec0eab1" name="perl-CPAN-DistnameInfo" arch="noarch">
  <version epoch="0" ver="0.12" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-27" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="406e8105be8981c134d8e7a7db2f2926b39e43fb1c93d5da5d86574c9249b9c3" name="perl-CPAN-Meta" arch="noarch">
  <version epoch="0" ver="2.150013" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150011-1" date="1769169600">- Update to 2.150011 (rhbz#2432163)
  - Improved example of testing a minimum prerequisite version of a module
  - Remove some code meant to handle running on pre-v5.8 perl, even though v5.8
    was already a requirement
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150012-1" date="1769428800">- Update to 2.150012 (rhbz#2432714)
  - Distribution metadata update
- Add workaround for test issues with CPAN::Meta::Requirements ≥ 2.144
  https://github.com/Perl-Toolchain-Gang/CPAN-Meta/issues/145</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150013-1" date="1771675200">- Update to 2.150013 (rhbz#2441425)
  - Fix an incompatibility with newer CPAN::Meta::Requirements (GH#145, GH#147)</changelog>
</package>
<package pkgid="0f2f5fb87d35f63223406c3a7a108e3f7f37bc28144e486cad9c4c134a83f593" name="perl-CPAN-Meta-Check" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1672747200">- Update to 0.015
  - Drop Test::Deep prereq
- Use SPDX-format license tag
- Add hack to work around test issue with Scalar::Util 1.50
  (CPAN RT#145766)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1672747201">- Update to 0.017
  - Use Module::Metadata for more accurate testing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-2" date="1689422400">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1689940800">- Update to 0.018
  - Fix version requirement for CPAN::Meta::Prereqs
  - Move issue tracker to GitHub</changelog>
</package>
<package pkgid="3ad7adc1cda232848642135f3c26d99c61fd7d0dfce8da940df0b5e5929f6504" name="perl-CPAN-Meta-Requirements" arch="noarch">
  <version epoch="0" ver="2.145" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.144-1" date="1769169600">- Update to 2.144 (rhbz#2432229)
  - Remove code meant to cope with running on v5.8, when v5.10 is the minimum
    required perl
  - Normalize away "&gt;= 0" in compount version requirements; it's meaningless
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.145-1" date="1769860800">- Update to 2.145 (rhbz#2435673)
  - Correct "normalization of 0" code to work correctly with vstrings (GH#46)</changelog>
</package>
<package pkgid="20800b8c1a21505ad56e9636b86d74b60ea35065634348503bd3090726d97a3e" name="perl-CPAN-Meta-YAML" arch="noarch">
  <version epoch="0" ver="0.020" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-491" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.019-1" date="1734350400">- Update to 0.19
  - Generated from ETHER/YAML-Tiny-1.75.tar.gz
- Use author-independent source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.020-1" date="1734436800">- Update to 0.20
  - Generated from ETHER/YAML-Tiny-1.76.tar.gz</changelog>
</package>
<package pkgid="24ebd3c16593269615b85f9d5e430d617050429616b40d9e116cb9d3d769e766" name="perl-CPAN-Requirements-Dynamic" arch="noarch">
  <version epoch="0" ver="0.002" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.001-1" date="1714392000">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002-1" date="1744027200">- Update to 0.002
  - Remove unnecesary conditions
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="d81dff05ea5b3051744ed9fbf762ed28bdabfa04fa3911b6c6d1bdd02250cdad" name="perl-Canary-Stability" arch="noarch">
  <version epoch="0" ver="2013" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2013-15" date="1689076800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="05b581365aa0b0b537c29eefec21bbbf79ad22aef45e67f859554eb48aa802af" name="perl-Capture-Tiny" arch="noarch">
  <version epoch="0" ver="0.50" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-16" date="1689422400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1734696000">- Update to 0.50
  - Stringify '$]' for far future compatibility
  - Fixed docs about custom files for capture</changelog>
</package>
<package pkgid="59a634463d6f661858e766e62ed1c69f0d224be0336f157a1acfd2f501fa65c0" name="perl-Carp-Clan" arch="noarch">
  <version epoch="0" ver="6.08" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.08-14" date="1689422400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c56efa99ba105daf6efa00cb63d3dfe29e6260ca19aa6c74831ee6bd945b7da4" name="perl-Carp-Fix-1_25" arch="noarch">
  <version epoch="0" ver="1.000001" rel="30.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000001-30" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="2a5d94c2f97f9742863c1012d94d6ebdeaf5d1a91529470b8883c86bcb264c85" name="perl-Child" arch="noarch">
  <version epoch="0" ver="0.013" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-21" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="867d3266406ae26086e2b89288bbbabc442e8f5dd061c42f747dd46e62d177ac" name="perl-Class-Accessor" arch="noarch">
  <version epoch="0" ver="0.51" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-17" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a68a78b8c818a77bb982ef92e1970fdad77b6402b88cbbce443780502947612a" name="perl-Class-C3" arch="noarch">
  <version epoch="0" ver="0.35" rel="10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.35-10" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="fb79e1eda7b4573f490160d747ae0f23bb7ef672ed91f41944f8cb32f8b6f03f" name="perl-Class-C3-XS" arch="x86_64">
  <version epoch="0" ver="0.15" rel="10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-5" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-8" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-10" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="46f032f9fad1f600e5638688c0711037ea439e77bf6517799e1b3309bbc0973e" name="perl-Class-Data-Inheritable" arch="noarch">
  <version epoch="0" ver="0.10" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-5" date="1678449600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-1" date="1729771200">- Update to 0.10
  - Don't use vars, use our</changelog>
</package>
<package pkgid="14ffdb93979fbe1017a2d7d08ef9e9d6eb9c553187317aed0c9588741dfb58e4" name="perl-Class-Factory-Util" arch="noarch">
  <version epoch="0" ver="1.7" rel="43.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-43" date="1678449600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="260e1cec6cf763cdec708531ab613fc792589f408493a150ebad557213d35883" name="perl-Class-Inspector" arch="noarch">
  <version epoch="0" ver="1.36" rel="13.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-13" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="77afbd1faf2fdd7aa435134db5917e09bdc6ed88c596696b174bf64b3f33173a" name="perl-Class-Load" arch="noarch">
  <version epoch="0" ver="0.25" rel="22.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-22" date="1678449600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="a48ea3b30b4c681c24bc2c880773933e62bcb06f969b0a0759e2eae7865797e1" name="perl-Class-Load-XS" arch="x86_64">
  <version epoch="0" ver="0.10" rel="20.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-15" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-18" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-20" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c28d8744a33684c7f53db25f4b79f984f179ea2e9d9ccca608337fe833af3a43" name="perl-Class-Method-Modifiers" arch="noarch">
  <version epoch="0" ver="2.15" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.14-1" date="1673956800">- Update to 2.14
  - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.15-1" date="1678104000">- Update to 2.15
  - Localize $SIG{__DIE__} before calling eval (CPAN RT#146848)</changelog>
</package>
<package pkgid="9563b08c90ba5c5994830056b3d1ef596343892b6a7ed166c4f1c719643b5214" name="perl-Class-Singleton" arch="noarch">
  <version epoch="0" ver="1.6" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.6-8" date="1674216000">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64</changelog>
</package>
<package pkgid="4392a4fbe664951f947cbb7b3e0965a43167d32448ea5850e0264b9461a5f9b1" name="perl-Class-Tiny" arch="noarch">
  <version epoch="0" ver="1.008" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-8" date="1689422400">- Use SPDX-format license tag
- Drop support for building with old perls needing Devel::GlobalDestruction
- Use %license unconditionally</changelog>
</package>
<package pkgid="43d7973701d00cff721f6c5e495dd1ae79752f5013320496bde9d90d21d99d4e" name="perl-Class-XSAccessor" arch="x86_64">
  <version epoch="0" ver="1.19" rel="28.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-24" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-27" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-28" date="1664539200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f46b7a86d27dd830c44c1311604ab0b964e6daa0ef530dd8bc489710efb763d7" name="perl-Clone" arch="x86_64">
  <version epoch="0" ver="0.50" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.46-7" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.47-1" date="1724068800">- Update to 0.47
  - Stop using quote as package separator</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.47-3" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-1" date="1772539200">- Update to 0.48
  - Performance: Optimize hot paths in Clone.xs
  - Fix: Replace subtest with SKIP/bare blocks to avoid Test2 warnings
  - Fix: Don't require MGf_DUP flag for ext magic duplication
  - Fix: Lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers
  - Fix t/10-deep_recursion.t for Windows
  - Fix C89 declaration-after-statement violations in Clone.xs
  - Fix deep recursion stack overflow on Windows
  - Fix cloning of Math::BigInt::GMP objects (GH#16)
  - Fix cloning of threads::shared data structures (GH#18)
  - Add thread safety test for Class::DBI-like patterns (GH#14)
  - Add comprehensive documentation with examples and limitations
  - Improve README.md structure and installation instructions
  - Add DBI + DBD::SQLite as recommended test dependencies
  - Fix weakened reference cloning via deferred weakening (GH#15)
  - Fix memory leak when cloning non-existent hash values (GH#42)
  - Fix segfault when cloning DBI database handles (GH#27)
  - Rewrite t/09-circular.t to fix SEGV on CPAN Testers (GH#54)
  - Replace static recursion_depth with stack parameter
  - Fix C++ style comments in Clone.xs for C89 portability
  - Fix memory leak in Clone.xs (GH#42)
  - Allow a MAX_DEPTH recursion of 32,000 calls (GH#19 aka CPAN RT#97525)
  - Rename tests with more readable names
  - Remove TODO from CoW test</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1774526400">- Update to 0.49
  - Try to exclude macOS extended attributes from dist tarball
  - Fix: Suppress DBI STDERR noise in t/13-io-handle.t (GH#82)
  - Fix: Skip DBI fork tests on Windows
  - Fix: Remove spurious warn output in t/03-scalar.t
  - Add AI_POLICY.md documenting AI-assisted workflow</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1774699200">- Update to 0.50
  - Fix: Deep-copy HVs past MAX_DEPTH instead of aliasing (GH#93)
  - Fix: Strip macOS xattrs from dist directory before packaging
  - Clean-up: Remove unreachable break and empty magic_ref if-body in Clone.xs
  - Docs: Update MAX_DEPTH limits to reflect actual platform values
  - Docs: Add SECURITY.md policy for vulnerability reporting
  - Prefer using gtar in Makefile.PL</changelog>
</package>
<package pkgid="26e9916a8c9c6cdad33c7b7deb59e217ce8e7f2ee6963ae2848eba83a90df554" name="perl-Compress-Raw-Bzip2" arch="x86_64">
  <version epoch="0" ver="2.218" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.211-1" date="1712491200">- Update to 2.211 (no changes, rhbz#2273784)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no changes, rhbz#2277505)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-511" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213
  - Silence unused variable warnings</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-519" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Development workflow updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435735)
  - No functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1772971200">- Update to 2.218 (rhbz#2445591)
  - Add SECURITY.md (GH#18)
  - Fix POD typo</changelog>
</package>
<package pkgid="53116182f9e6ad37a33d67c249eb0360b302f561666cbe2d48314394d2a225e7" name="perl-Compress-Raw-Lzma" arch="x86_64">
  <version epoch="0" ver="2.221" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-2" date="1727956800">- Rebuild against xz 5.6.3</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-4" date="1743249600">- Rebuild against xz 5.8.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-5" date="1743768000">- Rebuild against xz 5.8.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-6" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Development workflow updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-2" date="1767787200">- Rebuild against xz 5.8.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217
  - Test updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1772366400">- Update to 2.219
  - Add PERL_UNUSED_DECL for trace to silence clang warning
  - Fix indentation in Lzma.xs that triggers a clang warning
  - Remove vestigial references to Pod::Markdown (GH#14)
  - Fix POD typo
  - Document that flush returns LZMA_STREAM_END on success, rather than LZMA_OK
    (GH#16)
  - Remove unused constants (GH#17)
  - Documentation improvements (GH#15)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.220-1" date="1772971200">- Update to 2.220
  - Remove obsolete TODO comment</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.221-1" date="1772971201">- Update to 2.221
  - Add SECURITY.md</changelog>
</package>
<package pkgid="9adfc9c7f41bbf9bb874570df7b19fcfcbba1cb10d5e04a9327a57547ee95530" name="perl-Compress-Raw-Zlib" arch="x86_64">
  <version epoch="0" ver="2.222" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no changes, rhbz#2277504)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-511" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-519" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - get_Bufsize is correct, but the documentation says get_BufSize (GH#34)
  - Development workflow updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435736)
  - No functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1770120000">- Update to 2.218 (rhbz#2436314)
  - Fix for regression of GH#34</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1771934400">- Update to 2.219 (rhbz#2441964)
  - Update bundled zlib to 1.3.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.221-1" date="1772280000">- Update to 2.221 (rhbz#2443301)
  - zlib 1.3.2: Update references to zlib 1.3.1 to use zlib 1.3.2
  - zlib 1.3.2: Add "Perl_crz" prefix to "z_errmsg" (GH#32)
  - Fix POD typo
  - Version number wrong in 2.220 Changes file (GH#38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.222-1" date="1772971200">- Update to 2.222 (rhbz#2445592)
  - Add SECURITY.md (GH#40)
  - Fix POD typos</changelog>
</package>
<package pkgid="a5244211347a71cfeb71b7cf165652d44997eb74c8e6fbeeb1b0191760efc045" name="perl-Config-Tiny" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1641297600">- Update to 2.28
  - Replace both uses of bareword filehandles with 'my' variables
  - Modernize Makefile.PL
  - Make corresponding patches where appropriate to Tiny.pm and t/02.main.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-6" date="1678622400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1680696000">- Update to 2.29
  - Edit to remove Test::Pod from TEST_REQUIRES in Makefile.PL, again
  - Update version number in t/02.main.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1697198400">- Update to 2.30
  - Add support for an array syntax for cases where you wish to assign an array
    of values to a key
    - See the new POD section called ARRAY SYNTAX
    - See also the updated question in the FAQ: What happens if a key is
      repeated?
    - See also the sample code in the Synopsis, in t/02.main.t and in
      t/test.conf
    - In each case, search for the word greetings to find the new code samples</changelog>
</package>
<package pkgid="c97e861f68b5106f53733c0ecda2eff253e78f768995811d3914ac4169bbd249" name="perl-ConfigReader-Simple" arch="noarch">
  <version epoch="0" ver="1.29.8" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.5-2" date="1689508800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.6-1" date="1706011200">- Update to 1.296
  - Refresh distro, update email address, update repo URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.7-1" date="1736078400">- Update to 1.297
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.8-1" date="1744632000">- Update to 1.298
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="031cf7e5d02c9022ee1a97766f37a01292a337e243d7ea75b08104ad9a419eac" name="perl-Const-Fast" arch="noarch">
  <version epoch="0" ver="0.014" rel="29.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-29" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="acc6efeeade175aef0d76e1578f32a58ff448910c8d7843d5b4025af7d3e2afd" name="perl-Convert-BinHex" arch="noarch">
  <version epoch="0" ver="1.125" rel="24.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.125-24" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for ancient distributions with rpm &lt; 4.9</changelog>
</package>
<package pkgid="f724c698095db3a0b0ee04049aac7affb87fa00b8b968485443d59baaed410b6" name="perl-Convert-TNEF" arch="noarch">
  <version epoch="0" ver="0.18" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-27" date="1674216000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2a48139db384df13519640b272b074ced48f40de11eb3cf90622a3335e16d76b" name="perl-Convert-UUlib" arch="x86_64">
  <version epoch="4" ver="1.8" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-7" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-13" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-16" date="1737633600">- Fix for C23 mode (rhbz#2341023)</changelog>
</package>
<package pkgid="d1bf71f71a5a780b31f571e52d0945596c7d3066a38f4c82b672b126bb64c853" name="perl-Coro" arch="x86_64">
  <version epoch="0" ver="6.570" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-7" date="1676894400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-13" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-17" date="1714737600">- BR: valgrind-devel rather than /usr/include/valgrind/valgrind.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-18" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-21" date="1737720000">- Fix for compiling in C23 mode (CPAN RT#158609, rhbz#2341024)</changelog>
</package>
<package pkgid="8b4ce439a242373ed39adaf0c678a0ffa36f68de74400779b085da654d57c5c0" name="perl-Cpanel-JSON-XS" arch="x86_64">
  <version epoch="0" ver="4.40" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.38-1" date="1716897600">- Update to 4.38
  - Encode real core booleans as boolean notation (GH#224)
  - Minor test fixes
  - Fix docs typo (GH#225)
- Pod::Spell::CommonMistakes not available in EPEL
  (how did that ever work?)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.38-3" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.39-1" date="1734091200">- Update to 4.39
  - Fix Windows -Dusequadmath (GH#229, GH#235)
  - Fix inconsistent behavior between decoding escaped and unescaped
    surrogates, and escaped non-characters vs. non-escaped non-characters; now
    aligned to JSON::PP (GH#227, GH#233)
  - Add type_all_string tests (GH#236)
  - Silence UV to char cast warnings (GH#232)
  - Fix MSVC preprocessor errors (GH#232)
  - Fix -Wformat warnings on Windows (GH#228)
  - Clarify BigInt decoding (GH#226)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.39-3" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.40-1" date="1757419200">- Update to 4.40
  - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
  - Detect more malformed numbers, with two decimal points
  - Pin Github actions to latest @v via pinact run -u</changelog>
</package>
<package pkgid="5a07abb932f0bcc7794bfd7ed0d0f876830e9230c43eef7913c33b2aa63cff33" name="perl-Crypt-Cracklib" arch="x86_64">
  <version epoch="0" ver="1.7" rel="38.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-33" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-36" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-38" date="1678622400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="475454425c7a4dd50a7eb26d45065b252d824d9d0c9d5c8a8204d167a8ed80a8" name="perl-Crypt-PBKDF2" arch="noarch">
  <version epoch="0" ver="0.161520" rel="18.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.161520-18" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3fc44bfe4f49904b52bd5ee6d801624591df7d435afdeee2ce132a22566530cf" name="perl-Crypt-SmbHash" arch="noarch">
  <version epoch="0" ver="0.12" rel="48.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-48" date="1678708800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c4ba72a7fd28ebb5cb45270ac87d23b6b6e8026bd909ffe70eb179e468206a3b" name="perl-Cwd-Guard" arch="noarch">
  <version epoch="0" ver="0.05" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-21" date="1673611200">- Drop perl(:MODULE_COMPAT*) dependency from Fedora 38 onwards
- Use SPDX-format license tag
- Use %license unconditionally
- Fix permissions verbosely</changelog>
</package>
<package pkgid="352e089ce9a726e995a9ee9f79465fd095a29755f173b684ef4862ae3ca09fb3" name="perl-DBD-CSV" arch="noarch">
  <version epoch="0" ver="0.62" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.60-2" date="1689508800">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-1" date="1736769600">- Update to 0.62
  - It's 2025
  - Replace "use vars" with "our" (GH#9)
  - Specify recommended versions based on known CVE's
  - Update documentation for groff-1.24
  - Tested with perl-5.40.0
  - Add SECURITY.md</changelog>
</package>
<package pkgid="18a9f15abfbd0348cf01b554514a1232afca04015d45001f14a57c0c2e865b9c" name="perl-DBD-SQLite" arch="x86_64">
  <version epoch="0" ver="1.78" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.74-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-1" date="1729339200">- Update to 1.76
  - Upgraded bundled SQLite to 3.46.1
  - Fix for Windows quadmath builds (GH#115)
  - Omit load_extension if static build</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-3" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.78-1" date="1767355200">- Update to 1.78
  - Upgraded bundled SQLite to 3.51.1
  - Omit constants for newly-added C-array extension
  - SQLite 3.51.0 has two extensions (C-array and percentile) amalgamated but
    both are disabled by default
  - Make -&gt;column_info() also return generated columns (GH#119)
- Use bundled SQLite unless system SQLite is 3.31.0 or above (needed for
  generated columns)</changelog>
</package>
<package pkgid="9cce5e3a4cca8a8aa33e231a6e2df17f82b99926b4d4993dc1186cf7b63edaff" name="perl-DBI" arch="x86_64">
  <version epoch="0" ver="1.647" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-21" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Build Coro for EL-9 since the test is now passing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-22" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-24" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-25" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.644-1" date="1724760000">- Update to 1.644
  - Update Devel::PPPort
  - Fix CVE-2014-10401 and CVE-2014-10402: f_dir might not exist in DBD::File
    connections
  - Do not check gccversion on clang
  - Upgrade GIMME to GIMME_V
  - Do not check with JSON::XS with perl-5.022 and later
  - Makefile.PL allows gcc-10 and up now
  - Do not leak $_ after callback execution (CPAN RT#144526, GH#117)
  - Switch from Dynaloader to XSLoader (GH#94)
  - Tim handed the project to the team
  - Merge Pull Requests, resolve RT tickets and resolve GH issues: thanks to
    many! Please check git log
- Add patch from Fedora to fix FTBFS with gcc 14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.645-1" date="1725364800">- Update to 1.645
  - Move developer tests to xt/
  - Make Changes match CPAN::Changes::Spec and regen DBI::Changes from that
  - Fixes for modern gcc i.c.w. recent perl
  - Small code and documentation clean-ups for recent perl
  - See TODO in 'perldoc DBI' to see where you can help with documentation!</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.645-1.1" date="1727956800">- Drop Coro support for EL-10 onwards (Coro test hanging)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-1" date="1736683200">- Update to 1.646
  - Remove "experimental" tag from statistics_info() (GH#134)
  - RT tickets moved to GitHub issues
  - All RT tickets now marked as resolved with reference to GitHub issue
  - Fix install issue (GH#168)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-1" date="1737374400">- Update to 1.647
  - Spellcheck
  - Fix Makefile rules for Changes (Windows case issue)
  - Another example to bind columns (GH#159)
  - Fix fetchall_arrayref for undefined NAME (GH#156)</changelog>
</package>
<package pkgid="8442b4cccff6efc10008d9e703712f05295cf1765cc9c7264451ec972859dfa5" name="perl-DBI-Coro" arch="x86_64">
  <version epoch="0" ver="1.647" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-21" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Build Coro for EL-9 since the test is now passing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-22" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-24" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-25" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.644-1" date="1724760000">- Update to 1.644
  - Update Devel::PPPort
  - Fix CVE-2014-10401 and CVE-2014-10402: f_dir might not exist in DBD::File
    connections
  - Do not check gccversion on clang
  - Upgrade GIMME to GIMME_V
  - Do not check with JSON::XS with perl-5.022 and later
  - Makefile.PL allows gcc-10 and up now
  - Do not leak $_ after callback execution (CPAN RT#144526, GH#117)
  - Switch from Dynaloader to XSLoader (GH#94)
  - Tim handed the project to the team
  - Merge Pull Requests, resolve RT tickets and resolve GH issues: thanks to
    many! Please check git log
- Add patch from Fedora to fix FTBFS with gcc 14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.645-1" date="1725364800">- Update to 1.645
  - Move developer tests to xt/
  - Make Changes match CPAN::Changes::Spec and regen DBI::Changes from that
  - Fixes for modern gcc i.c.w. recent perl
  - Small code and documentation clean-ups for recent perl
  - See TODO in 'perldoc DBI' to see where you can help with documentation!</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.645-1.1" date="1727956800">- Drop Coro support for EL-10 onwards (Coro test hanging)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-1" date="1736683200">- Update to 1.646
  - Remove "experimental" tag from statistics_info() (GH#134)
  - RT tickets moved to GitHub issues
  - All RT tickets now marked as resolved with reference to GitHub issue
  - Fix install issue (GH#168)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-1" date="1737374400">- Update to 1.647
  - Spellcheck
  - Fix Makefile rules for Changes (Windows case issue)
  - Another example to bind columns (GH#159)
  - Fix fetchall_arrayref for undefined NAME (GH#156)</changelog>
</package>
<package pkgid="54eddf6bf4ca9c89289a25bcb7ac92d1c024e1adae33ba18c0f8aa61be4dbcaa" name="perl-DBM-Deep" arch="noarch">
  <version epoch="0" ver="2.0019" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0016-17" date="1678708800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0016-18" date="1684843200">- Remove use of ' as a package name separator (CPAN RT#148417)
  (fix for Perl 5.38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0017-1" date="1693742400">- Update to 2.0017 (rhbz#2236875)
  - Get rid of old perl4-style ' package separator and use :: instead for
    compatibility with perl 5.38 (CPAN RT#148417)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0018-1" date="1699531200">- Update to 2.0018 (rhbz#2248772)
  - Tiny documentation and metadata fixes to make sure people go to the correct
    issue tracker</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0019-1" date="1699876800">- Update to 2.0019 (rhbz#2249377)
  - Improvement so that when you try to put too much data in you get a useful
    error, and don't corrupt the database</changelog>
</package>
<package pkgid="770c4d82c88429e48e7fa926346b361d43eb4ddb083f17d9499a77df8d1cd9bb" name="perl-Data-Alias" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-3" date="1752148800">- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1770120000">- Update to 1.29
  - Fix compatibility with perl 5.43.8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-1" date="1773316800">- Update to 1.30
  - Use isGV_with_GP_on when available (CPAN RT#173582)</changelog>
</package>
<package pkgid="95aa03bda3b5d54c11857cf9b86ad309a55216bd8af4c418c5defc8b0b1c59eb" name="perl-Data-Binary" arch="noarch">
  <version epoch="0" ver="0.01" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-14" date="1678795200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c2600085801b70c22faa4802db3cf2b442e55cef4b4aab9f6df56d63daea261d" name="perl-Data-Compare" arch="noarch">
  <version epoch="0" ver="1.29" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1678881600">- Update to 1.28
  - Bug fix: undef values in hashes were treated incorrectly: need to check
    for existence, not definedness before comparing (GH#21)
- Use SPDX-format license tag
- Use %license unconditionally
- Drop NOTES and README files as they provide nothing useful to users</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1682164800">- Update to 1.29
  - Skip taint-mode tests if perl was built without taint support</changelog>
</package>
<package pkgid="7f0472608e6c9a460a21ae50f81a686f5754abce2b61ec022c226e081c644075" name="perl-Data-Dump" arch="noarch">
  <version epoch="0" ver="1.25" rel="7.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-7" date="1677844800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1d4362e9460143b0dbf23924a0d2394998ed39bf55d234aa33e4915d8304a2fb" name="perl-Data-Dump-Streamer" arch="x86_64">
  <version epoch="0" ver="2.42" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.40-18" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.40-21" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.41-1" date="1674820800">- Update to 2.41
  - Switch from JSON::XS to Cpanel::JSON::XS as an optional test prereq
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.42-1" date="1676980800">- Update to 2.42
  - Perltidy source to preferred format
  - Fixed issues serializing the global stash
  - Added test to detect if serializing the global stash breaks anything</changelog>
</package>
<package pkgid="6ba320bf48ad4bf4f353ff3d2d10fb3c73aa7e75a5a1a32ecf7b3f89e77bfa8e" name="perl-Data-Dumper-Names" arch="noarch">
  <version epoch="0" ver="0.03" rel="42.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-42" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="85fe6f8f1ac7ccdcbab8c7013aa13149b235878e0bd32d940d2b1e10da20968e" name="perl-Data-OptList" arch="noarch">
  <version epoch="0" ver="0.114" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-1" date="1624881600">- Update to 0.112
  - Update author contact info
  - Add perl version support to docs
  - Replace a "goto" deep in the guts with a sub call, for speed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.113-1" date="1672574400">- Update to 0.113
  - Update author contact info
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.114-1" date="1683460800">- Update to 0.114
  - Data::OptList now requires perl v5.12.0
  - Tests no longer add "-T" to shebang, so do not invoke taint mode
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="751167e2811c980dfbbfc2370ffc32cc5edf3d15f416082a3755e4e0a1850d9b" name="perl-Data-Section" arch="noarch">
  <version epoch="0" ver="0.200008" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.200008-1" date="1672574400">- Update to 0.200008
  - Fix to some example code
  - update packaging and metadata
  - Minimum required Perl is now v5.12
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.200008-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="e9828044bb33412c6d69c304551f28e513824f67ffee43533b1d639f44971b0e" name="perl-Data-Section-Simple" arch="noarch">
  <version epoch="0" ver="0.07" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-27" date="1679054400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="bbc75c06b4b73580df55fc9ada653dd4961627893b600da1033ac854abc1cf74" name="perl-Data-Tumbler" arch="noarch">
  <version epoch="0" ver="0.010" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-25" date="1674216000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b223db704329a951adceaae7d0515ad1a2df9007d66ddb564ef5242d651f8cdb" name="perl-Data-UUID" arch="x86_64">
  <version epoch="0" ver="1.227" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-9" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-12" date="1689163200">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-14" date="1693742400">- Update license to SPDX format</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.227-1" date="1710849600">- Update to 1.227
  - New maintainer, GTERMARS
  - Add basic GitHub Actions setup for testing
  - Typo corrections in POD
  - Eliminated use of state/node files in temp directory (CVE-2013-4184)</changelog>
</package>
<package pkgid="47a61a3c692119ffde5362075f160aa953ecc10e2e840471d8f533d4357085cd" name="perl-Data-Visitor" arch="noarch">
  <version epoch="0" ver="0.32" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-8" date="1679486400">- Use SPDX-format license tag
- Use %license unconditionally
- Use Data::Alias unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.32-1" date="1682769600">- Update to 0.32
  - Removed an unnecessary use of Sub::Name (GH#1)</changelog>
</package>
<package pkgid="f4ab0575a29e7fe9c50aedc9a159b3997c282c949336a9710daf9ce1255ee381" name="perl-Date-Range" arch="noarch">
  <version epoch="0" ver="1.41" rel="6.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1" date="1624881600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-2" date="1628251200">- Make Date::Simple a run-time dependency, not just a test dependency (#1977229)
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-6" date="1679918400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8139782723fe8265c5369249ab6bd827288197731d4745aa8ff580a03d3bc462" name="perl-DateTime" arch="x86_64">
  <version epoch="2" ver="1.66" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.59-4.0.cf" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.63-1.0.cf" date="1698062400">- Update to 1.63
  - Switched to using the 'Perl_isfinite' function instead of trying to
    implement this ourselves in XS code; this should fix quadmath builds on
    Windows (GH#139)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-1.0.cf" date="1699272000">- Update to 1.65 (rhbz#2248104)
  - Fix builds on macOS with Perls before 5.22.0; this seems to have the same
    issue as Windows on older Perls (GH#141)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-5.0.cf" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.66-1.0.cf" date="1739966400">- Update to 1.66 (rhbz#2346459)
  - Require Specio 0.50
    - That release has a bug fix for validation of integer values
    - Without the fix, DateTime could accept non-integer values for things like
      nanoseconds (GH#145)
- Drop EL-7 support
  - Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="e926ddb089bb0916601393964957ea41030b33fe85ef0bfd490b26b654dfeee1" name="perl-DateTime-Calendar-Mayan" arch="noarch">
  <version epoch="0" ver="0.0601" rel="41.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-41" date="1679918400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="a525864c81a25d4275fd881ab5744a85843d7ba01df844e70b666456dac1b6d1" name="perl-DateTime-Format-Builder" arch="noarch">
  <version epoch="1" ver="0.83" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.83-8" date="1673784000">- Use SPDX-format license tag
- Assume we are building with rpm ≥ 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="5d695ac6ca055679edf65cfce6d89dac95bd74a0417c83e87918e7745a25c097" name="perl-DateTime-Format-MySQL" arch="noarch">
  <version epoch="0" ver="0.08" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07.01-7" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1690891200">- Update to 0.08
  - Fix parsing microsecond &lt; 100,000 off DateTime object by zero-padding</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-2" date="1691150400">- Do not use rpmversion macro, which is a new builtin since rpm-4.18.92</changelog>
</package>
<package pkgid="0dde3a70f7c275162a8cc1461ef33dbf3f5d0b59b4ef3ef51582b92a4ae9e1cd" name="perl-DateTime-Format-Strptime" arch="noarch">
  <version epoch="1" ver="1.80" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.80-1" date="1765195200">- Update to 1.80 (rhbz#2419653)
  - Fix the parse_datetime docs to state that it returns either an empty list
    of undef when it cannot parse the given string, depending on the context;
    previously, the docs said it always returned undef, which is not true
    (GH#33)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="5fdb50ab8efcb2c820e360bd326531fac9077c5b6b755d48d5fbdb0c828e1a1b" name="perl-DateTime-Locale" arch="noarch">
  <version epoch="0" ver="1.45" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.38-1.0.cf" date="1681646400">- Update to 1.38
  - Rebuilt all locale data with the data from CLDR 43.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1.0.cf" date="1685361600">- Update to 1.39
  - Fixed parsing of the 'el-polyton' locale code: this had the same issue as
    'be-tarask', which was fixed in 1.36; this is now fixed in such a way that
    similar language+variant codes will be parsed correctly in the future
    (GH#37)
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.40-1.0.cf" date="1699358400">- Update to 1.40
  - Rebuilt all locale data with the data from CLDR 44.0.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1.0.cf" date="1712404800">- Update to 1.41
  - Rebuilt all locale data with the data from CLDR 44.1.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0.cf" date="1713528000">- Update to 1.42
  - Rebuilt all locale data with the data from CLDR 45.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0.cf" date="1722168000">- Update to 1.43
  - Fixed the prefers_24_hour_time method, which was incorrectly returning
    false when the locale's time_format_short method contained a quote string
    with "h" or "K" in it, e.g. the fr-CA locale's time_format_short is
    "HH 'h' mm": the quoted 'h' caused this method to return false (GH#39)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0.cf" date="1730203200">- Update to 1.44
  - Rebuilt all locale data with the data from CLDR 46.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1.0.cf" date="1743508800">- Update to 1.45
  - Rebuilt all locale data with the data from CLDR 47.0.0
- Use %{make_build} and %{make_install}
- Drop support for building with List::Util &lt; 1.45</changelog>
</package>
<package pkgid="b427f9561d1b1c3354e6929cabce445fa0a95587844e1b63dd8cff20b9a69a64" name="perl-DateTime-TimeZone" arch="noarch">
  <version epoch="0" ver="2.68" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.63-1.0.cf" date="1725796800">- Update to 2.63
  - This release is based on version 2024b of the Olson database
  - This release does not include any changes to current or future zones, only
    historical changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.64-1.0.cf" date="1737115200">- Update to 2.64
  - This release is based on version 2025a of the Olson database
  - Contemporary changes for Paraguay</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.65-1.0.cf" date="1742990400">- Update to 2.65
  - This release is based on version 2025b of the Olson database
  - Contemporary changes for Chile</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.66-1.0.cf" date="1765454400">- Update to 2.66
  - This release is based on version 2025c of the Olson database
  - Only historical changes
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.67-1.0.cf" date="1772798400">- Update to 2.67
  - This release is based on version 2026a of the Olson database
  - Contemporary changes for Moldova</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.68-1.0.cf" date="1777291200">- Update to 2.68
  - This release is based on version 2026b of the Olson database
  - Contemporary changes for British Columbia, CA
- Temporarily disable POD spelling test due to dictionary issues in Rawhide</changelog>
</package>
<package pkgid="bedd4b06400fbb9e7cf882f4e97e6a9f0ef0033eb1ddb20ebb88ee9b8fcc0537" name="perl-Declare-Constraints-Simple" arch="noarch">
  <version epoch="0" ver="0.03" rel="51.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-51" date="1679486400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="f4794b4aad42dd3833569d787e8d08cb3488199d32032b177d0af37392132d6f" name="perl-Devel-CallChecker" arch="x86_64">
  <version epoch="0" ver="0.009" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-13" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-16" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1681214400">- Update to 0.009
  - Port to Perl 5.33.1, which defines a PERL_VERSION_GE() macro that clashes
    with the one this module previously had
  - Skip thread tests on some old versions of Perl (around 5.10.0) where a
    core bug makes thread creation violate an internal assertion and causes
    crashes
  - Skip thread tests on pre-5.8.9 Perls where a core bug makes thread creation
    corrupt memory
  - Skip thread tests on pre-5.8.3 Perls where a core bug makes thread
    completion break the global PL_sv_placeholder
  - Put whitespace around C string literals being pasted, for C++11
    compatibility
  - Avoid using C preprocessor directives inside a macro argument list (which
    is not valid)
  - In XS code in the test suite, when croaking, avoid using __FILE__ as part
    of a format string, in case it includes a metacharacter
  - Document the intended scope of this module's backporting effort
  - Fix a documentation wording glitch
  - In XS declare as const some data that never changes
  - Refactor thread tests
  - In XS, refactor Perl version comparisons
  - In XS, rename some macros for better style
  - In XS, better argument parenthesisation in some macros
  - Avoid some compiler warnings
  - In .gitignore, list temporary files produced by test XS compilation
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5f83909c3147576796bf6db018e4aa97a0e3b62c8a43111a4dfdb15fa82b82db" name="perl-Devel-Caller" arch="x86_64">
  <version epoch="0" ver="2.07" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.06-24" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.06-28" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.06-30" date="1680004800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.07-1" date="1681214400">- Update to 2.07 (rhbz#2185832)
  - Fix compatibility with bleadperl (CPAN RT#144051)
  - Small Pod and Distribution clean-ups (GH#1)</changelog>
</package>
<package pkgid="2f5e24fbd3504d4139fc01f457905a017d54dcf7dfbafd03f827a9cc10edecd4" name="perl-Devel-CheckBin" arch="noarch">
  <version epoch="0" ver="0.04" rel="23.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-23" date="1680004800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3a0e4d7801dbf02b46a03706056419be615e703ad979525e5f1b03c4dbbb0569" name="perl-Devel-CheckCompiler" arch="noarch">
  <version epoch="0" ver="0.07" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-21" date="1680004800">- Use SPDX-format license tag
- Fix permissions of installed files
- Use %license unconditionally</changelog>
</package>
<package pkgid="0453465d6b7e2e473d018774c6401be5f5dfdf51d60fa6794286624881ee4822" name="perl-Devel-Cycle" arch="noarch">
  <version epoch="0" ver="1.12" rel="26.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-26" date="1680004800">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="440591d473f1c0c7b49c6f9916915cd901d62c6e1e338f9632591f9527d2e5d5" name="perl-Devel-EnforceEncapsulation" arch="noarch">
  <version epoch="0" ver="0.51" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-27" date="1680264000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="45b41fd209f122da1aa5de2db2bb25d234105218b5fe19a9603f06227d08c5b9" name="perl-Devel-GlobalDestruction" arch="noarch">
  <version epoch="0" ver="0.14" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-21" date="1680264000">- Use SPDX-format license tag
- Drop support for old Perl versions needing XS helper</changelog>
</package>
<package pkgid="ae3afc348c0b1170d24db953377b7556a4de0a206c111486fa6b7ac6feed27cc" name="perl-Devel-GlobalDestruction-XS" arch="x86_64">
  <version epoch="0" ver="0.03" rel="20.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-13" date="1593000000">- Perl 5.32 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-15" date="1593172800">- Specify all dependencies</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-19" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-20" date="1625486400">- Fix dist tags for Alma and Rocky Linux</changelog>
</package>
<package pkgid="9908ef139e8345e79fcb6b8de373606092e136af3b88c828c75ad4e5ca684032" name="perl-Devel-Hide" arch="noarch">
  <version epoch="0" ver="0.0016" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0016-1" date="1767441600">- Update to 0.0016
  - Drop support for perl 5.6 (deprecated since 0.0012)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="48c39baa6049f81c77dfa00b1eeb41a4d25320ce8cfdfbee55aab28af2566b94" name="perl-Devel-Leak" arch="x86_64">
  <version epoch="0" ver="0.03" rel="51.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-46" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-49" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-51" date="1680609600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="03b70429502bd27d58c8d93c8aa0279553e732a7bbea4653bd96efaf1691de01" name="perl-Devel-LexAlias" arch="x86_64">
  <version epoch="0" ver="0.05" rel="32.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-26" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-27" date="1639310400">- Fix dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-29" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-32" date="1678708800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b30d627e1d170036ac26fa8fd53af7b680efeac561dc1dd7b88ec2e85117d828" name="perl-Devel-OverloadInfo" arch="noarch">
  <version epoch="0" ver="0.008" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-1" date="1755000000">- Update to 0.008
  - Generate README.md in the repository
  - Move git repository to Codeberg
- Assume Sub::Util is always available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="e1d326ae01863c34b8009f43292f7532911c6a37a056658a79520f9625bfa034" name="perl-Devel-PartialDump" arch="noarch">
  <version epoch="0" ver="0.20" rel="18.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-18" date="1680609600">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="289b0a369eb0f2828c5459f62077155048e9fd4fbb13682ce98fa6b2b785842a" name="perl-Devel-StackTrace" arch="noarch">
  <version epoch="1" ver="2.05" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.04-15" date="1689163200">- Use SPDX-format license tag
- Fix permissions verbosely
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.05-1" date="1704715200">- Update to 2.05
  - Added explicit boolean overloading for trace objects
    - Without this, Perl will use the object's string overloading and then
      check the truthiness of the returned string, which is a lot of extra work,
      which can produce significant slowdowns in some cases, as seen in
      https://github.com/plack/Plack/pull/697 (GH#23)</changelog>
</package>
<package pkgid="cc967eb039cd0e081629d5963dc8cc0731a27482a348eded7c0833bef6942f73" name="perl-Devel-Symdump" arch="noarch">
  <version epoch="1" ver="2.18" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.18-25" date="1689163200">- Use SPDX-format license tag
- Drop support for building with Test::Harness &lt; 3.04</changelog>
</package>
<package pkgid="5c01825df821dcd0c3dc9cf5665b8402f6ef80837f71663125cfe103e92c3736" name="perl-Digest-BubbleBabble" arch="noarch">
  <version epoch="0" ver="0.02" rel="36.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-36" date="1680696000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="409023d1b5d110d0c752612b172671bace51e520e83e0636be5a89b1659bcd41" name="perl-Digest-MD4" arch="x86_64">
  <version epoch="0" ver="1.9" rel="41.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-34" date="1680696000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-35" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-39" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-41" date="1724155200">- Drop redundant build requirements libdb-devel and gdbm-devel</changelog>
</package>
<package pkgid="3619ad1d3e7f3953c000e569d65f9bc0dcd4333aea555ecc4f94a5e96706b524" name="perl-Digest-SHA" arch="x86_64">
  <version epoch="1" ver="6.04" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.02-477" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.02-488" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.03-1" date="1660046400">- Update to 6.03
  - Corrected addfile to report error when stdin is a directory
    (CPAN RT#143899)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.04-1" date="1677412800">- Update to 6.04
  - Modified SHA_INIT/sharewind to silence warnings from gcc 12
    (CPAN RT#146585)
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f172399fbd5fed27dc6714c288d9c45f314e3690d6a452e1f7f2dfcc0c5bfac8" name="perl-Dir-Self" arch="noarch">
  <version epoch="0" ver="0.11" rel="24.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-24" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="253211625350b732eb8590e6cee26674d1dcc1b11270419ed03f77b243197659" name="perl-Dist-CheckConflicts" arch="noarch">
  <version epoch="0" ver="0.11" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-27" date="1680696000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="594ce7dedc04d3cc83325ef6ae7b180122ff299b8bba955d8a2539ed5a21977d" name="perl-DynaLoader-Functions" arch="noarch">
  <version epoch="0" ver="0.004" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-1" date="1680868800">- Update to 0.004
  - Port test C code to Perl 5.33.1, which defines a PERL_VERSION_GE() macro
    that clashes with the one this code previously had
  - In test C code, avoid a compiler warning that arises on Perl 5.20
  - In test C code, rename some macros for better style
  - In test C code, better argument parenthesisation in a macro
- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="3e5ebbe04568dfd285db97e6199a2da2684298de61f3652df17cc800b3663b2e" name="perl-EV" arch="x86_64">
  <version epoch="0" ver="4.37" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.34-4" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.34-7" date="1746619200">- Fix FTBFS with ExtUtils::ParseXS ≥ 3.57 (rhbz#2364628)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.36-1" date="1766750400">- Update to 4.36
  - Work around changes in xsubpp for Perl 5.42
- Add patch to remove unescaped quotes from typemap file (rhbz#2364628)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.37-1" date="1769083200">- Update to 4.37
  - Work around issues with different versions of ExtUtils::ParseXS</changelog>
</package>
<package pkgid="463c47ecc5a30a683ac1c685c87f6d8212a71ebad58b0071f6e5ac53c5831046" name="perl-Email-Address" arch="noarch">
  <version epoch="0" ver="1.913" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.913-1" date="1673352000">- Update to 1.913 (rhbz#2159569)
  - This version now requires Perl v5.12
  - Some small tweaks made to the code to take advantage of v5.12
  - Update distribution metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.913-2" date="1689508800">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="2f7a9173bdbce8e0aaa72679077118569d5b3fcc487c4a1145cb0e0def965190" name="perl-Env-Sanctify" arch="noarch">
  <version epoch="0" ver="1.12" rel="28.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-28" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="a6086ba3aedf46f3774b6fd5d36b6513b6b2a1ad41160ebb1910a285feb83bf2" name="perl-Error" arch="noarch">
  <version epoch="1" ver="0.17030" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.17029-12" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.17030-1" date="1739880000">- Update to 0.17030 (rhbz#2346218)
  - Fix die/warn hooks for perl 5.41.9 changes (GH#4)</changelog>
</package>
<package pkgid="f0eed4ca5cf7fa88ae6fa3a6955630505fb785c05d599346c99b79c760963769" name="perl-Eval-Closure" arch="noarch">
  <version epoch="0" ver="0.14" rel="20.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-20" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="2e91012969ad92b08a69efec741572ab89087c7e698e4612bf07c1160e26c56e" name="perl-Event" arch="x86_64">
  <version epoch="0" ver="1.28" rel="7.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1619784000">- Update to 1.28
  - Remove C-only restriction on -&gt;Inline method (GH#5)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-2" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-5" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-7" date="1680868800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4efc581b63b821abe283ca5224eefa88852f802045c9b2490c3223332b16b7a5" name="perl-Exception-Base" arch="noarch">
  <version epoch="1" ver="0.25.01" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-13" date="1680868800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-24" date="1689508800">- Fix FTBFS with Perl 5.38 (rhbz#2222742)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-25" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="300ac4cf6402aedd821ef8c337f98ae25518ef065e4536527b40064680822d0b" name="perl-Exception-Class" arch="noarch">
  <version epoch="0" ver="1.45" rel="7.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1" date="1620043200">- Update to 1.45
  - The field names for an exception are now checked to ensure that they are
    valid Perl identifiers (GH#13)
- Package new CODE_OF_CONDUCT.md file
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-7" date="1680955200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="814d761e08f0a80458757382ec3a7f345b571594740cb1f5b9fac7cf442d9cf2" name="perl-Expect" arch="noarch">
  <version epoch="0" ver="1.38" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.35-20" date="1680955200">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-1" date="1708776000">- Update to 1.36
  - Made timeouts optional and added qr// regex support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1709899200">- Update to 1.37
  - Fix to timeout code</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.38-1" date="1710244800">- Update to 1.38
  - Fix to fix to timeout code</changelog>
</package>
<package pkgid="4250680e59729dcd49e24e319b7e8b59a5b496f5801da48010223d4008f91284" name="perl-Exporter-Declare" arch="noarch">
  <version epoch="0" ver="0.114" rel="22.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.114-22" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="437c768ed3a2cd630e6968d0cd238806b878d818849fc50a77ae894a518c95fd" name="perl-Exporter-Tiny" arch="noarch">
  <version epoch="0" ver="1.006003" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006002-8" date="1747656000">- Drop support for EOL distributions prior to F-28, EL-8:
  - Weak dependencies always available
  - Use %{make_build} and %{make_install}
- Don't pull in Lexical::Var on distributions with Perl 5.37.2 or later</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006003-1" date="1765195200">- Update to 1.006003
  Bug Fixes:
  - Support Perl versions &gt;= 10, in theory
  Documentation:
  - Restore documentation about exporting to hashes, which was accidentally
    removed
  - Update copyright dates</changelog>
</package>
<package pkgid="6719adbb25539b630c2c107d106c9a97ad4b4d5f640079c8448e6852d3487a50" name="perl-ExtUtils-BuildRC" arch="noarch">
  <version epoch="0" ver="0.005" rel="6.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-6" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4cc7bc0432db8ecdbcb297ed7093b0e5cd46d3ba6a593033497c3987961eeea6" name="perl-ExtUtils-CBuilder" arch="noarch">
  <version epoch="1" ver="0.280238" rel="499.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.280238-499" date="1689508800">- Upgrade to 0.280238 as provided in perl-5.37.11
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="15a13c00b912b9113bd26b77d0c642f22b0fc1c673535fa4077559d4b7be8b3e" name="perl-ExtUtils-Config" arch="noarch">
  <version epoch="0" ver="0.010" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-28" date="1680955200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1714132800">- Update to 0.009
  - Add a but method
  - Add ExtUtils::Config::MakeMaker
- Release tests moved to xt/, stop running them</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-1" date="1723896000">- Update to 0.010
  - Fix regression in serialize method</changelog>
</package>
<package pkgid="9c938f35242c8f075f37d0cec85e49599f984f43e3df0167e31841212b6403c2" name="perl-ExtUtils-Depends" arch="noarch">
  <version epoch="0" ver="0.8002" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8001-7" date="1680955200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8002-1" date="1742385600">- Update to 0.8002 (rhbz#2353300)
  - Fix UNC path bug (CPAN RT#102436)
  - Fix get_makefile_vars losing path components if space-quoted and more than
    one dependency, which was breaking CPAN module "true" - dependent on two
    modules
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="05eaaa16b6e98ca4d26bc439ceed05045fbe170cabdd256743f2539a850363b6" name="perl-ExtUtils-HasCompiler" arch="noarch">
  <version epoch="0" ver="0.025" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-1" date="1714392000">- Import from Fedora</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.025-1" date="1715083200">- Update to 0.025
  - Skip static test on dynamic perls
- BR: gcc and perl-devel for tests</changelog>
</package>
<package pkgid="c8610ee875b03513e27b0f0a6855a0a8896a2dd5a2af2e0cbdbc362b04134361" name="perl-ExtUtils-Helpers" arch="noarch">
  <version epoch="0" ver="0.028" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.026-22" date="1681128000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.027-1" date="1718798400">- Update to 0.027
  - Revert "Make split_like_shell always unixy"</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.028-1" date="1725364800">- Update to 0.028
  - Add ext argument to man1_pagename and man3_pagename</changelog>
</package>
<package pkgid="40710a65ae9384e7dff5d1ae0d6a1fe2e15d3d8ceca9c323a92d08b91e81c0cb" name="perl-ExtUtils-InstallPaths" arch="noarch">
  <version epoch="0" ver="0.015" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-1" date="1714132800">- Update to 0.013
  - Try to install any installable paths</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1725969600">- Update to 0.014
  - Drop 5.006 support
  - Compensate for perls without installsitescript</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1758974400">- Update to 0.015
  - Restore installing non-standard types
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="d555b58ab6950208fe758e04d55018b5746efbca2d82c2ea0eb60c731cb3ada0" name="perl-ExtUtils-MakeMaker-CPANfile" arch="noarch">
  <version epoch="0" ver="0.09" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-15" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f832752909df107df43acfa87227f197606df43117caf18c754ad349bfe3aae2" name="perl-ExtUtils-ParseXS" arch="noarch">
  <version epoch="1" ver="3.63" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.51-510" date="1718193600">- Add man page perlxs*, which are missing in tarball</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.57-1" date="1746187200">- Update to 3.57
  - Rewrite half of the internals to facilitate refcounted stack later on
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.58-1" date="1753099200">- Update to 3.58
  - ExtUtils::ParseXS has been extensively restructured internally; most of
    these changes shouldn't be visible externally, but might affect XS code
    that was using invalid or unsupported syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.59-1" date="1757073600">- Update to 3.59
  - Throw an exception when combining the length operator with a typemap other
    than T_PV</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.60-1" date="1759060800">- Update to 3.60
  - Fix INTERFACE for C23
  - Support perl package names in INTERFACE
  - Clean up typemap file-finding code and change priority
  - Revert throwing an exception when combining the length operator with a
    typemap other than T_PV</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.61-1" date="1767960000">- Update to 3.61
  - Allow XS files with no XS again
    https://github.com/Perl/perl5/issues/24016</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.63-1" date="1775476800">- Update to 3.63
  - Allow 'length(foo)' to work with any 'foo' type that has 'SvPV_nolen()' or
    similar in its typemap, not just that it maps to T_PV
  - Use static, not STATIC
  - Rewrite perlxs.pod
  - Finish refactoring to use an Abstract Syntax Tree (AST) internally
  - Improve warning and error messages
  - Improve test coverage
  - Reorganise t/</changelog>
</package>
<package pkgid="831c3d28357ea57e976c4731612b3ccca4bbbd4fb462f8f4e2e6452b401134c9" name="perl-ExtUtils-PkgConfig" arch="noarch">
  <version epoch="0" ver="1.16" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-21" date="1681300800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5506b7904e179d20c08e0ef0fbecffd306984606d031a669a19d1c716a9fd522" name="perl-Fennec" arch="noarch">
  <version epoch="0" ver="2.018" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.018-16" date="1681128000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3396fd14f7f8f097b6e95ee1ca4763c81e1c65001cd39af8864dcd5b9947b302" name="perl-Fennec-Lite" arch="noarch">
  <version epoch="0" ver="0.004" rel="29.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-29" date="1689508800">- Use SPDX-format license tag
- Fix permissions verbosely</changelog>
</package>
<package pkgid="58736dee816d18de04e19fe014c84b1bf152e74694f0302e182cb566298b1502" name="perl-File-Copy-Recursive-Reduced" arch="noarch">
  <version epoch="0" ver="0.008" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-17" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.007-1" date="1694865600">- Update to 0.007
  - Corrections in tests to better accommodate Windows path separators</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-1" date="1711368000">- Update to 0.008
  - Encoding directive added to POD
  - Corrections in test files to guard against CPANtesters who run tests with
    PERL_AUTHOR_TESTING turned on</changelog>
</package>
<package pkgid="036464cd11ced104f05316067f762ad2d6f39cc264fa322c9ac21c47a8d362d6" name="perl-File-Find-Object" arch="noarch">
  <version epoch="0" ver="0.3.9" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.7-1" date="1672660800">- Update to 0.3.7
  - Fix test failures on Windows (GH#2)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.7-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.8-1" date="1690027200">- Update to 0.3.8
  - Fix use_ok() call (GH#3)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.9-1" date="1733918400">- Update to 0.3.9 (rhbz#2331637)
  - Avoid implicit symbol imports
    https://perl-begin.org/tutorials/bad-elements/#non_explicitly_imported_symbols
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
</package>
<package pkgid="cf88574a0d740ec8fcc7f15eede55a80eeb4664ed8aa57bbb4fc4e0db70d2a04" name="perl-File-Find-Object-Rule" arch="noarch">
  <version epoch="0" ver="0.0313" rel="5.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0313-1" date="1630065600">- Update to 0.0313
  - Split File::TreeCreate off to its own distribution
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0313-5" date="1681300800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="68c4c3296359845bbd8b480231f028ea4c3c565a12ab338e863069b47656da26" name="perl-File-Find-Rule" arch="noarch">
  <version epoch="0" ver="0.35" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.34-25" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.35-1" date="1749211200">- Update to 0.35
  - Use 3-argument version of open() to avoid arbitrary code execution
    vulnerability (GH#4, CVE-2011-10007)
- Use %{make_build} and $${make_install}</changelog>
</package>
<package pkgid="0a173abd210871156f815d97b0eca2ec6acea4dee9c203c16ffaf63097fafcef" name="perl-File-Find-Rule-Perl" arch="noarch">
  <version epoch="0" ver="1.16" rel="5.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-1" date="1648641600">- Update to 1.16
  - Fix test when run after 'make clean' (CPAN RT#142008)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-5" date="1689336000">- use SPDX-format license tag</changelog>
</package>
<package pkgid="b08d5e09902cb79d6f40e71f6601ece548a970cd1acdeb299ebb7e539414a305" name="perl-File-Find-Rule-VCS" arch="noarch">
  <version epoch="0" ver="1.09" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-1" date="1682769600">- Update to 1.09
  - Tooling updates
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="2234621f57a3ebfb3c5f83e755432ba0bce6934f80806470a76547bb851e01e6" name="perl-File-HomeDir" arch="noarch">
  <version epoch="0" ver="1.006" rel="9.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006-9" date="1685620800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="d4d01cf60972265957b13ef63567875d7c4f7cfd5cb0c977a9a269a1495dac7a" name="perl-File-MMagic" arch="noarch">
  <version epoch="0" ver="1.30" rel="30.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-25" date="1624276800">- Correct license to App-s2p and ASL 1.0 and BSD
- Package README.ja
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-30" date="1678795200">- Use SPDX-compatible license tag</changelog>
</package>
<package pkgid="58ca32a1c2c418eedc23b736458dccfa6545ce5128b0ac6f51f3fc0f25a85baa" name="perl-File-Remove" arch="noarch">
  <version epoch="0" ver="1.61" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1655208000">- Update to 1.61
  - Symlinks were broken in Windows/msys
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-4" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6ec785d022c1ea782c690c3a0d16ff53ab0c885d1239263ee004d14dedca4512" name="perl-File-ShareDir" arch="noarch">
  <version epoch="0" ver="1.118" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.118-8" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="a5bf09d8784badb8cac834236723a8ae408bfede5e8f441b621ac04406110b3e" name="perl-File-ShareDir-Install" arch="noarch">
  <version epoch="0" ver="0.14" rel="3.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-1" date="1656676800">- Update to 0.14
  - Work around a build issue on Windows (CPAN RT#125571)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-3" date="1681473600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2be8a9c5a4959307fa32394635dff6a4e1ea6a0c13ac21473e6cab97efce55c4" name="perl-File-ShareDir-ProjectDistDir" arch="noarch">
  <version epoch="0" ver="1.000009" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000009-19" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="40106b34c39903e003a6d80365b0630c4dca8dbde626ff213d3b24c172a135ba" name="perl-File-Slurp" arch="noarch">
  <version epoch="0" ver="9999.32" rel="10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 9999.32-10" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0f4f6180ce1077c094cf5195204397246cf83ddcbae5d46c4d8687255a7d1f69" name="perl-File-Slurp-Tiny" arch="noarch">
  <version epoch="0" ver="0.004" rel="23.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-23" date="1681992000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="5f720207c6d0ced115f66bef360c917d318580c533208af1991e0251f45a70a0" name="perl-File-Slurper" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-1" date="1640779200">- Update to 0.013
  - Always split on newlines in read_lines</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1671364800">- Update to 0.014
  - Always return an empty file as an empty string
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="c71dc91c9153ea9e309e1bcdff819fd6135379e81ab01d1c3470de35791ce03f" name="perl-File-TreeCreate" arch="noarch">
  <version epoch="0" ver="0.0.1" rel="6.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0.1-1" date="1630065600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0.1-6" date="1681992000">- SPDX migration</changelog>
</package>
<package pkgid="9f39a006627094f8bd5234eaf236fd93a6e955e35c628e4388e3457fec45e82e" name="perl-File-Which" arch="noarch">
  <version epoch="0" ver="1.27" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-8" date="1686312000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="29b1a61664980fd4e39a7cd55aed527a4a309e8e7f4ae9eb9f1271bed6fd3caf" name="perl-File-chdir" arch="noarch">
  <version epoch="0" ver="0.1011" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1011-21" date="1681819200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="892a2ef8066ab324268ce1522a5e3e9cb17935d88c221777941b2f977ef74592" name="perl-File-pushd" arch="noarch">
  <version epoch="0" ver="1.016" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.016-17" date="1681819200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f79e680bf1724303eba62a2cca148cd8d18ebe1e7218805c2c6781fab5593cda" name="perl-FileHandle-Fmode" arch="x86_64">
  <version epoch="0" ver="0.15" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-23" date="1678708800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-24" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-28" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-1" date="1718798400">- Update to 0.15
  - Documentation improvements
  - Avoid win32_fmode() when perl is built by UCRT compiler, as UCRT changes
    struct _iobuf (affects MSWin32 only)
- Remove bogus exec permissions on source files</changelog>
</package>
<package pkgid="f6e842818a3d29124c15252081f48e9c9b677e00accdc4f4f40a1ddd3ed883c2" name="perl-FileHandle-Unget" arch="noarch">
  <version epoch="0" ver="0.1634" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1634-16" date="1682078400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="aeb9983e3074e9773daa1639a72bd258c66d188c99a68abae38b204a01f9614e" name="perl-Filter" arch="x86_64">
  <version epoch="2" ver="1.65" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.64-511" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.64-519" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-1" date="1757332800">- Update to 1.65
  - Documentation updates</changelog>
</package>
<package pkgid="9c755ab8ff67565711803c679ce761782356e460eaab3f20a30ba4a9aabd7c48" name="perl-Filter-Simple" arch="noarch">
  <version epoch="0" ver="0.94" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.94-2" date="1689595200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="603a2ba73a4ee90e698491929618b23b44cff7299f8d32b177b246c6527eaa56" name="perl-FreezeThaw" arch="noarch">
  <version epoch="0" ver="0.5001" rel="41.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5001-41" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="41c2cabd59728da1c423e8d90cc125a9ebe88cafc68d950b9de59159c2338e4d" name="perl-Function-Parameters" arch="x86_64">
  <version epoch="0" ver="2.2.6" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.4-5" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.4-6" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.5-1" date="1737288000">- Update to 2.002005 (rhbz#2338807)
  - When debugging (perl -d), skip over invisible (generated) parameter
    initialization
    code even if single-step mode is active
  - Move repository and bugtracker to https://codeberg.org/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.5-2" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.6-1" date="1755432000">- Update to 2.002006 (rhbz#2388952)
  - Fix a parse-time memory leak with undef or default initializers
    ('fun ($x = undef)' or 'fun ($ =)'); this leak mostly manifests as noise
    from memory checkers because non-leaked ops aren't freed anyway while perl
    is still running
  - Update bugtracker info in README</changelog>
</package>
<package pkgid="99a866fa97ca657ffdf5e834afb0cbc21f78bb796b2058f2feb37d838c159e1a" name="perl-Guard" arch="x86_64">
  <version epoch="0" ver="1.023" rel="26.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-21" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-24" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-26" date="1682078400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="482344e9544162dbaef8f9a5a9c9eaae3ed8ccb3ee88f33e7aac085c1cebeb35" name="perl-HTML-Lint" arch="noarch">
  <version epoch="0" ver="2.32" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-10" date="1627128000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-11" date="1643198400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-12" date="1654603200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-13" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-14" date="1669809600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-15" date="1674475200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-16" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="395e47383de0bc68b4dbd461b232db4f28da8365c6ec004f19deb40fccc369fd" name="perl-HTML-SimpleLinkExtor" arch="noarch">
  <version epoch="0" ver="1.273" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.273-2" date="1689595200">- Use SPDX-format license tag
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64
- Use %license unconditionally</changelog>
</package>
<package pkgid="a06f4a0acfdb142dd09e526801e74bc67c4dacf1f0754e9786b002726390f4c2" name="perl-HTML-Tidy" arch="x86_64">
  <version epoch="0" ver="1.60" rel="12.1.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-12.1.cf" date="1688040000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9fec59f1f75898af3318509d8f54a75b43106432dcc2ebd352ce342d5791e206" name="perl-HTTP-SimpleLinkChecker" arch="noarch">
  <version epoch="0" ver="1.16.8" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16.8-2" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="85e30242a3655e46ee742f37d03fb744f203de9cbdbcdb771a2f75218c3a8204" name="perl-HTTP-Size" arch="noarch">
  <version epoch="0" ver="1.153" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.153-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1ab50b7f94032a42035431e0b94172f40245b642eebd43aa7db93af478e5493b" name="perl-HTTP-Tiny" arch="noarch">
  <version epoch="0" ver="0.094" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.090-1" date="1731499200">- Update to 0.090
  - Find the certificate bundle via IO::Socket::SSL rather than implementing
    it in HTTP::Tiny
  - When encoding form data, given a hashref with an arrayref value, preserve
    the order of the values in the arrayref rather than sorting
  - Fix internal link to "TLS/SSL SUPPORT" section in POD
- Enable AUTOMATED_TESTING</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.092-1" date="1767009600">- Update to 0.092
  - Added keep_alive_timeout to force keepalive connections to be closed based
    on a timeout
  - Optional tests are always required when releasing
  - Always use TCP_NODELAY option
  - Fixed test incorrectly testing cookie jar interactions multiple times
  - Fixed perl version comparisons to work when not starting with 5
  - Fixed link to LIMITATIONS in documentation
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094-1" date="1779105600">- Update to 0.094
  - Fix to prevent invalid characters in all headers, and prevent header
    smuggling (CVE-2026-7010)</changelog>
</package>
<package pkgid="868bc0217e03cdfd082091d8ee203a3787c4ca669a34c12593a1ad2d57143519" name="perl-Hash-FieldHash" arch="x86_64">
  <version epoch="0" ver="0.15" rel="23.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-17" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-20" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-23" date="1682078400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="03e21b70ccc82422229133512779a71dc06b44a7b74849e0a264bc8feec6454c" name="perl-Hash-StoredIterator" arch="x86_64">
  <version epoch="0" ver="0.008" rel="22.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-17" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-20" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-22" date="1682251200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b4d938ac3c73ebc52ae070efe1d40ccdbeaaead16e761d9f3f24a075711639af" name="perl-Hash-Util-FieldHash-Compat" arch="noarch">
  <version epoch="0" ver="0.11" rel="22.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-22" date="1682251200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b40e77608666d6443873a0c2433cc35ba0245afd2b2d579ca67dbe455ae11763" name="perl-Hook-LexWrap" arch="noarch">
  <version epoch="0" ver="0.26" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-19" date="1682251200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="5c5660a8add1f328bcf8090b6b9b25840b87bff8bb0fe03bebe04da5d4f305af" name="perl-IO-AIO" arch="x86_64">
  <version epoch="0" ver="4.81" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.78-1" date="1662465600">- Update to 4.78
  - Add IO::AIO::mount and IO::AIO::umount
  - Add a bunch of symbols from sys/mount.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-1" date="1664193600">- Update to 4.79
  - The autoconf result of the mount check was not used, so it failed to
    compile on most systems
  - Fix format string usage for croak in extract_stringvec function</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-2" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-1" date="1680436800">- Update to 4.8
  - Remove long-obsolete "paths must be absolute" text in aio_open/stat
    descriptions
  - Another workaround for the low-quality musl libc
  - Test for umount separately, as it is more portable
  - Some low-quality posix attempts (openbsd, osx) declare the availability of
    fexecve() but then don't even bother to implement a stub
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-4" date="1702468800">- Fix use of incompatible pointer type in configure test for fexecve()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-6" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-1" date="1708516800">- Update to 4.81
  - Work around a bug in musl w.r.t. to O_SEARCH and use EIO_O_PATH instead,
    verifying the semantics against the subset of O_PATH and O_SEARCH
  - aio_copy now tries to preallocate the destination file
  - fexecve configure test used the wrong pointer type</changelog>
</package>
<package pkgid="dcd5cdbaf6d5c08f212202aa1a72032eae0fc202dcbe61dbda2c1510dcb7fcec" name="perl-IO-Capture" arch="noarch">
  <version epoch="0" ver="0.05" rel="41.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-41" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3619841e7beebcb0f79216aa5636ed469938394ee100fba36341196839eeea21" name="perl-IO-Compress" arch="noarch">
  <version epoch="0" ver="2.220" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213
  - Add stub module IO/Compress.pm (GH#57)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Various workflow updates
  - IO::Compress::Gzip accidentally modified the `$EXPORT_TAGS{all}-&gt;@*` of
    other modules (GH#64)
  - Fix typos in streamzip (GH#59)
  - Fix documentation for get_Bufsize in Compress::Raw::Zlib
    (https://github.com/pmqs/Compress-Raw-Zlib/issues/34)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435525)
  - Refresh zipdetails from https://github.com/pmqs/zipdetails
  - Delete GZIP environment variable before running interop tests (GH#24)
  - IO::Compress @2.215: t/006zip.t failed due to missing test files (GH#67)
  - Fix version check in 000prereq.t
  - Enhance _dosToUnixTime to handle zero and invalid datetime values; add
    tests for edge cases (GH#65)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1772971200">- Update to 2.218 (rhbz#2445605)
  - Add SECURITY.md (GH#69)
  - Fix POD typo
  - Refresh zipdetails from https://github.com/pmqs/zipdetails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1773057600">- Update to 2.219 (rhbz#2445768)
  - Fix a few typos
  - Squash repeated semicolons
  - Make dependent version checking consistent and update module to version
    2.219 (GH#70)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.220-1" date="1779019200">- Update to 2.220 (rhbz#2478225)
  - Remove use of eval in globmapper (GH#73)
  - Update zipdetails to version 4.006
  - Fix typo in fastForward (GH#72)
  - Fix issue with 'rawdeflate' option in AnyInflate (GH#71)</changelog>
</package>
<package pkgid="eb8899ea71a2a910ba1781a1c64cafb9f52dcc507eb28dd72b45a130b5584fb6" name="perl-IO-Compress-Lzma" arch="noarch">
  <version epoch="0" ver="2.217" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.207-1" date="1708516800">- Update to 2.207 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.211-1" date="1712491200">- Update to 2.211 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Various workflow updates
  - Stop accidentally modifying the '$EXPORT_TAGS{all}-&gt;@*' of other modules
    (IO::Compress GH#64)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217
  - Delete XZ environment variable before running interop tests
  - Rework workflow to automatically detect and use all the versions of perl
    available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="50d09cb3887b6eaed7e0f63fa5c839813568ff1971a8987d68ff278415bff5d5" name="perl-IO-FDPass" arch="x86_64">
  <version epoch="0" ver="1.3" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-8" date="1682251200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="91b7eae0d5cf35c547aaa4876c7b0d917ccd702ad14cb23af308fc309bb1f08c" name="perl-IO-Multiplex" arch="noarch">
  <version epoch="0" ver="1.16" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-25" date="1682337600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="777520540dc6964f42b9f0d9996c39056c9272878a4e9156852c6b242fd31b5b" name="perl-IO-Socket-INET6" arch="noarch">
  <version epoch="0" ver="2.73" rel="6.fc29"/>
  <changelog author="Michal Josef &#x160;pa&#x10D;ek &lt;mspacek@redhat.com&gt; - 2.72-23" date="1621339200">- Patch for bad code in test and random test fail (#1207174)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.73-1" date="1639137600">- Update to 2.73
  - Deprecate in favour of IO::Socket::IP
- Fix dist tags for Alma, Rocky and CentOS Stream Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.73-6" date="1681819200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="91557f698859044c1647db6e0ab915afc7bf1b2b67af664b67766b2c7d5966b3" name="perl-IO-Socket-IP" arch="noarch">
  <version epoch="0" ver="0.44" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.43-1" date="1732536000">- Update to 0.43
  - Swapped unit tests from `Test::More` to `Test2::V0`
  - Fixed some documentation typos (CPAN RT#157201)
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-1" date="1778760000">- Update to 0.44
  - Can 'use parent' rather than 'use base' (CPAN RT#177570)</changelog>
</package>
<package pkgid="3133edaba59662a2912201699a2438bea03946eedd7127fa8a98a5037c5ed9e4" name="perl-IO-Socket-SSL" arch="noarch">
  <version epoch="0" ver="2.098" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.087-2" date="1720612800">- Pick an upstream fix for runtime warning</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.088-1" date="1721044800">- Update to 2.088 (rhbz#2297795)
  - Minor fixes for use on ancient versions of perl and for building with newer
    versions of openssl</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.089-1" date="1724932800">- Update to 2.089
  - New option SSL_force_fingerprint to enforce fingerprint matching even if
    certificate validation would be successful without
  - Document _get_ssl_object and _get_ctx_object for cases where direct use of
    Net::SSLeay functions is needed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.090-1" date="1748952000">- Update to 2.090
  - Fix OCSP live test after Let's Encrypt has disabled OCSP support (GH#169)
  - public_suffix now preserves trailing dot (GH#167)
- Apply Crypto Policy patches unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.091-1" date="1749729600">- Update to 2.091
  - Fix behaviour on one-sided SSL shutdown; if the application continued to
    read after half-closing the SSL connection, this could result in reading
    encrypted data (i.e. close notify, SSL session tickets...)
  - See documentation of stop_SSL for detailed description of handling
    half-closed SSL connections</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.093-1" date="1750161600">- Update to 2.093
  - Rework for one-sided SSL shutdown, to implement a useful and secure
    behaviour without affecting existing applications</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.094-1" date="1750334400">- Update to 2.094
  - Fix memory leak introduced in 2.092</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.095-1" date="1752235200">- Update to 2.095
  - Regression: make sysread set buffer to empty string again when returning EOF
    (GH#171)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.096-1" date="1767614400">- Update to 2.096
  - Allow stacking TLS layers with SSL_usebio; this also allows LWP (after
    patches) to access https site through TLS-enabled proxy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.098-1" date="1767787200">- Update to 2.098
  - Fix GH#175 with upgrading from plain socket (no object) by using correct
    fdopen mode +&lt; instead of &lt;+
  - Another fix for GH#175 to make sure that an unblessed sockets gets blessed
    in place instead of using new_from_fd; document that it will not retain
    original class with unblessed sockets on error, since this never worked
    anyway (there is no native unbless)</changelog>
</package>
<package pkgid="d8ed1f721031a4a934c15800f50cc644c5b8cbf7989632087062ecfce3d7e953" name="perl-IO-Socket-Socks" arch="noarch">
  <version epoch="0" ver="0.74" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.74-17" date="1682337600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="f41ce5a9314d04fbcff1bafe5fb99e57f57e711515d6ffb49836c43943977b72" name="perl-IO-String" arch="noarch">
  <version epoch="0" ver="1.08" rel="47.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-47" date="1689422400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="98ae2d9327f4bd5a482cdbc9949d616da1eb124cf674bd0df70d186afc0e80be" name="perl-IO-Tty" arch="x86_64">
  <version epoch="0" ver="1.31" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.20-4" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.20-7" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.21-1" date="1774267200">- Update to 1.21
  Bug Fixes:
  - Fix slave fd leak on IO::Pty destruction; the slave pty file descriptor was
    not closed when the IO::Pty object was destroyed, leaking file descriptors
    until process exit (GH#14, GH#39)
  - Fix set_raw() to modify cflag for proper raw mode on BSD/macOS; set_raw()
    was not clearing CSIZE|PARENB or setting CS8 in cflag, causing incomplete
    raw mode on macOS, OpenBSD, and NetBSD (GH#12, GH#40)
  - Modernize function detection to use proper system headers instead of
    fragile K&amp;R-style forward declarations; the old approach conflicted with
    real prototypes on modern compilers (especially FreeBSD/Clang), causing all
    function checks to fail (GH#38, GH#41)
  Improvements:
  - Add BSD CI testing for FreeBSD, OpenBSD, and NetBSD via
    cross-platform-actions; also bumps actions/checkout from v2 to v4 (GH#42)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-1" date="1774440000">- Update to 1.23 (rhbz#2450189)
  Bug Fixes:
  - Fix function detection on Solaris by adding __EXTENSIONS__ to expose BSD
    extensions (like strlcpy) that are hidden when _XOPEN_SOURCE is defined
    (GH#47, GH#48)
  - Fix file descriptor leaks in open_slave() error paths; the master pty fd
    was not closed on several early-return error paths, causing fd leaks when
    falling through multiple pty allocation methods (GH#49)
  - Replace deprecated indirect object syntax (e.g. 'new IO::Pty') with direct
    method calls ('IO::Pty-&gt;new'); Perl 5.36+ disables indirect object calls,
    so this fixes forward compatibility (GH#52)
  Improvements:
  - Add unit tests for ttyname(), slave()/close_slave() lifecycle,
    set_winsize()/get_winsize() round-trips, pack_winsize/unpack_winsize, and
    constant importing (28 new tests) (GH#50)
  - Replace DynaLoader with XSLoader and bump minimum perl version to 5.8.8;
    XSLoader is simpler and has been in core since perl 5.6 (GH#51)
  - Add clone_winsize_from() test coverage (7 new tests) covering basic clone
    between slave ttys, non-tty master fast path, croak on non-tty source, and
    pixel dimension preservation (GH#53)
  Maintenance:
  - Fix stale POD versions, add Perl 5.38/5.40 to CI, and update repository
    URLs from toddr/IO-Tty to cpan-authors/IO-Tty (GH#44)
  - Remove dead Perl 5.003 compatibility code, modernize XS (Nullch to NULL,
    perl_get_sv to get_sv, sprintf to snprintf) (GH#45)
  - Modernize CI with dynamic perl version discovery via
    perl-actions/perl-versions and add a disttest job (GH#46)
  - Regenerate README from POD to fix stale version (GH#52)
  - Modernize 'use vars' to 'our' declarations in Tty.pm and Pty.pm; add
    missing 'use warnings' to Pty.pm (GH#53)
  - Add AI_POLICY.md for transparency on AI-assisted contributions
  - Convert README to Markdown and update MANIFEST</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.24-1" date="1774612800">- Update to 1.24 (rhbz#2452300)
  Bug Fixes:
  - Fix slave pty reopening on Solaris/illumos; after close_slave(), reopening
    with plain Perl open() skipped pushing STREAMS modules (ptem, ldterm,
    ttcompat), causing isatty() to return false - added _open_tty() XS function
    that opens the device and pushes STREAMS modules on platforms that support
    I_PUSH (GH#54, GH#55)
  - Fix undef warnings on Perl 5.8.8 by removing the undef operator on
    localized $SIG{__DIE__}, and fix XS ttyname() on older Perls by avoiding
    the InOutStream typemap, which can return NULL for filehandles created via
    new_from_fd (GH#56, GH#58)
  - Add __BSD_VISIBLE for FreeBSD in function probes; the _XOPEN_SOURCE
    definition hid BSD extensions like strlcpy, causing probe failures and
    subsequent compile errors from conflicting static/non-static declarations
    (GH#57, GH#59)
  Maintenance:
  - Modernize Makefile.PL: replace BUILD_REQUIRES with TEST_REQUIRES
    (EUMM 6.64+), add CONFIGURE_REQUIRES, upgrade META_MERGE to meta-spec v2,
    modernize generated Constant.pm to use 'our' instead of 'use vars', and
    remove dead PPD postamble (GH#60)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-1" date="1775131200">- Update to 1.25 (rhbz#2454158)
  Bug Fixes:
  - Fix IO::Pty DESTROY force-closing the slave pty: the DESTROY method (added
    in 1.21) explicitly closed the cached slave handle, breaking consumers like
    IPC::Run that hold a reference to the slave via $pty-&gt;slave() and expect it
    to survive master destruction; now just deletes the internal reference and
    lets Perl's refcounting handle fd closure correctly (GH#62, GH#64)
  Maintenance:
  - Simplify version variables to a single source of truth: extract version
    from Tty.pm in Makefile.PL using MM-&gt;parse_version() instead of hardcoding
    it, use VERSION_FROM in WriteMakefile, and remove $XS_VERSION from Tty.pm
    (GH#61)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-1" date="1775131201">- Update to 1.26 (rhbz#2454517)
  Bug Fixes:
  - Fix strlcpy detection on DragonFly BSD to avoid static/non-static
    declaration conflict; added __DragonFly__ guard to the function test
    (paralleling __FreeBSD__) and added a belt-and-suspenders check for
    perl's own HAS_STRLCPY in Tty.xs (GH#67)
  Maintenance:
  - Add 5-minute timeout to all CI test steps to prevent hung tests from
    consuming CI resources indefinitely (GH#66)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1775304000">- Update to 1.27 (rhbz#2454942)
  Bug Fixes:
  - Fix build on OpenBSD by including termios.h to detect openpty reliably and
    setting _BSD_SOURCE to find strlcpy in includes (GH#68)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1776945600">- Update to 1.29 (rhbz#2461125)
  Bug Fixes:
  - Fix make_slave_controlling_terminal() on Solaris/HP-UX to use _open_tty()
    instead of IO::Tty-&gt;open(), ensuring STREAMS modules (ptem, ldterm,
    ttcompat) are pushed via I_PUSH when the slave is opened for controlling
    terminal setup - parallel fix to the slave() method fix in 1.24 (GH#69)
  - Fix Perl 5.40+ "Possible memory corruption: ioctl overflowed 3rd argument"
    warning in clone_winsize_from() and get_winsize(); use
    pack_winsize(0,0,0,0) to pre-allocate the ioctl buffer with SvCUR matching
    sizeof(struct winsize) instead of an empty string (GH#74)
  - Fix diagnostic warnings being silently suppressed when callers use lexical
    "use warnings" (the modern standard since Perl 5.6); $^W and PL_dowarn only
    fire under perl -w - replaced with warnings::enabled() in IO::Tty and
    IO::Pty (GH#76) and ckWARN(WARN_IO) in Tty.xs (GH#79)
  - Fix file descriptor leak in IO::Pty when new_from_fd() fails after
    pty_allocate() or _open_tty() returns raw C-level fds; added POSIX::close()
    calls on the raw fds before croaking at three sites in new() and slave()
    (GH#77)
  - Fix openpty() detection on Alpine Linux and other musl-based systems where
    openpty() has moved from libutil into libc (glibc 2.34+); probe libc first
    before falling back to -lutil (GH#78)
  - Fix -Wsign-compare compiler warnings: change namebuflen parameter type from
    int to size_t in open_slave() and allocate_pty() to match the return type
    of strlcpy() and the size argument of snprintf() (GH#80)
  - Fix spurious "_FORTIFY_SOURCE requires compiling with optimization"
    warnings during configure probes when $Config{optimize} (e.g. -Os) is
    separate from $Config{ccflags}; include optimize flags in all configure
    probe compilations (GH#81)
  - Fix header probes in Makefile.PL missing platform extension defines
    (_GNU_SOURCE, _BSD_VISIBLE, etc.) that function probes already included;
    bare #includes could cause HAVE_PTY_H and similar to be unset on strict
    POSIX systems even when the header exists (GH#84)
  - Fix configure-time function detection probes being broken by compiler
    optimization:
    - The probes stored function pointers in local variables that -O2/-Os
      (added to probe flags in GH#81) eliminated as dead stores, so the linker
      never saw the function reference; on systems where openpty() lives in
      -lutil (older glibc, BSDs), the probe falsely succeeded without -lutil,
      producing "undefined symbol: openpty" at runtime
    - Fixed by storing the function pointer in a file-scope global variable
      that the optimizer cannot eliminate (GH#87, GH#88)
  Improvements:
  - Use L&lt;&gt; instead of C&lt;&gt; for cross-module POD references in Tty.pm and Pty.pm
    so MetaCPAN renders IO::Pty, IO::Handle, and IO::Stty as clickable links
    (GH#86)
  Maintenance:
  - Modernize POD in Tty.pm and Pty.pm: remove stale platform version
    references (FreeBSD 4.4, OpenBSD 2.8, HPUX 10.20, Solaris 2.6), replace
    defunct SourceForge/mailing list URLs with GitHub issue tracker (GH#70)
  - Modernize the 'try' example script: add strict/warnings, my declarations,
    3-arg open, and lexical filehandles; the script is shipped to CPAN and
    referenced in POD as the canonical usage example (GH#73)
  - Strengthen test coverage for set_raw() and winsize: verify all termios
    flags set by cfmakeraw (iflag, oflag, PARENB, CSIZE, CS8, VMIN, VTIME) and
    add a test for the unpack_winsize() length-validation croak (GH#75)
  - Update GitHub Actions to Node.js 24 versions: actions/checkout v6,
    cross-platform-actions/action v1, perl-actions/install-with-cpm v2;
    required before GitHub forces Node.js 24 in June 2026 (GH#85)
  - Add Ubuntu LTS version matrix (20.04, 22.04, 24.04) to the GitHub Actions
    test suite; exercises the system perl on each current Ubuntu LTS release
    via Docker containers, running after the main ubuntu job (GH#89)
- Add patch to fix detection of openpty() in libutil on older Fedora releases</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1779710400">- Update to 131 (rhbz#2481113)
  Bug Fixes:
  - Fix v1.27 regression where _open_tty() always passed O_NOCTTY, preventing
    make_slave_controlling_terminal() from acquiring a controlling terminal via
    the POSIX-standard open-without-O_NOCTTY mechanism (it was forced to fall
    through to an explicit TIOCSCTTY ioctl) (GH#91, GH#94)
    - _open_tty() now takes an optional noctty flag (default 1 for backward
      compatibility)
    - make_slave_controlling_terminal() passes 0
  - Fix openpty() detection on Fedora 33-34 / glibc 2.32-2.33 where LTO flags
    (-flto=auto) caused the libc-only compile probe to falsely succeed,
    producing "undefined symbol: openpty" at runtime; try -lutil before libc;
    harmless on systems where openpty lives in libc (glibc 2.34+, musl) and
    necessary where it doesn't (GH#92, GH#93)
  Maintenance:
  - Address CPANTS kwalitee issues: add LICENSE, SECURITY.md, and
    CONTRIBUTING.md; add META 'provides' for IO::Tty, IO::Pty, and
    IO::Tty::Constant; use --format=ustar in TARFLAGS to prevent PaxHeader
    entries in distribution tarballs (GH#90)
  - Clean up MANIFEST.SKIP: add #!include_default so ExtUtils::Manifest's
    built-in skip list is in effect, drop five entries that duplicate those
    defaults, and add a ^\.claude/ rule
- Package CONTRIBUTING.md, LICENSE and SECURITY.md</changelog>
</package>
<package pkgid="b1f1b462f712441888f554a35b11b9e68cd761026f1ff18f36f0e3d13c528a41" name="perl-IO-Zlib" arch="noarch">
  <version epoch="1" ver="1.15" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.12-1" date="1672401600">- Update to 1.12
  - Use a distinct test file, with pid in it, for each test
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.13-1" date="1673092800">- Update to 1.13 (no changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.14-1" date="1673438400">- Update to 1.14
  - Fix INSTALLDIRS option for newer perls</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.14-499" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.15-1" date="1709294400">- Update to 1.15 (rhbz#2267126)
  - Specify license in module metadata</changelog>
</package>
<package pkgid="47671b26cf5a99cf40dfcbd36d0b0233e116e846ca1c8f7bc39f695118fa3c1c" name="perl-IO-stringy" arch="noarch">
  <version epoch="0" ver="2.113" rel="11.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.113-11" date="1682337600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="9323c01e03c514af316d30e264a2addb62cd75cf40000cf2a6e3e1036709364f" name="perl-IPC-Cmd" arch="noarch">
  <version epoch="2" ver="1.04" rel="500.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.04-500" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="1c74aa7c27ef8489c856e9d2be1f24016f3daec65f1e2261f0385591192b0163" name="perl-IPC-Run" arch="noarch">
  <version epoch="0" ver="20260402.0" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250809.0-1" date="1754913600">- Update to 20250809.0 (rhbz#2387443)
  - Reduce delays in detecting child exit (GH#172)
  - Add quickstart section at the top of the docs (GH#174)
  - Retry _read() on EINTR instead of losing pipe contents (GH#177)
  - In test suite, work around bug in NetBSD 10
- Use %{make_build] and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260322.0-1" date="1774267200">- Update to 20260322.0 (rhbz#2450190)
  Bug fixes:
  - Handle EAGAIN in _write() for non-blocking pipe writes (GH#126, GH#221)
  - Prevent fd leak in _do_kid_and_exit when TFD == KFD (GH#149, GH#218)
  - Suppress spurious "Filehandle STDIN reopened" warnings in child when $^W=1
    with pty redirection (GH#131, GH#219)
  - Make binmode the default on Win32 to prevent newline mangling of
    binary data (GH#116, GH#192)
  - Avoid undef warning in _cleanup when fork fails (GH#82, GH#197)
  - Wrap coderef in eval in _do_kid_and_exit to prevent child process from
    escaping into parent code path on die() (GH#97, GH#193)
  - Propagate CODE ref exceptions back to parent via error pipe
    (GH#122, GH#224)
  - Close external input handles in parent after fork to prevent hangs when
    child exits early (GH#57, GH#226)
  - Preserve $cur_kid when a Timer is encountered in harness(), fixing
    "No command before 'init'" errors (GH#134, GH#187)
  - Restore compat for bare undef params in harness() (GH#124, GH#190)
  - Passing undef as stdin/stdout/stderr no longer dies (GH#141, GH#184)
  - Avoid "Modification of a read-only value" when passing undef stdin
    (GH#139, GH#185)
  - Reject empty/undef command name in _search_path (GH#162, GH#182)
  - Limit input buffer chunk size to prevent exponential memory growth when
    streaming data to slow consumers (GH#154, GH#183)
  - Silently ignore undef arguments passed as timeout to harness()
    (GH#128, GH#189)
  - Correct two minor documentation issues in Run.pm (GH#133, GH#188)
  - Skip win32_compile.t when getprotobyname('tcp') is unavailable
    (GH#137, GH#186)
  - Survive SIGPIPE when child exits before consuming all stdin (GH#35, GH#204)
  - Handle EPIPE when child exits before consuming stdin (GH#92, GH#195)
  - Handle tied STDERR without FILENO in _debug_fd (GH#93, GH#194)
  - Invalidate path cache on $PATH change, add clearcache() (GH#82, GH#196)
  - Support scalar ref for '&gt;pipe' and '&lt;pipe' operators (GH#50, GH#201)
  - Use $type in IO::new error message instead of $_ (GH#49, GH#202)
  - Fix &lt;pipe documentation example order and equivalent pipe example
    (GH#66, GH#198)
  - Suppress spurious numeric warning in result() and results() (GH#65, GH#199)
  - Suppress numeric warnings from result() when SIGCHLD is IGNORE
    (GH#29, GH#205)
  - Handle scalar refs in Win32IO pipe operators (GH#213, GH#214)
  - Remove blanket TODO from win32_newlines.t, keep only for still-failing
    tests (GH#215, GH#216)
  - Prevent handle inheritance of caller-owned fds on Win32
    (GH#169, GH#181, GH#211)
  - Enable kill_kill test 1 on Win32 (CPAN RT#11215, GH#207)
  - Suppress filehandle warning during global destruction in tied_stderr.t
    (GH#237, GH#239)
  - Resolve File::Temp cleanup warning on Windows CI (GH#236, GH#238)
  - Suppress Socket::IPPROTO_TCP redefined warning in win32_compile.t
    (GH#230, GH#235)
  - Prevent tied_stderr.t from hanging on Win32 CI (GH#222, GH#225)
  Improvements:
  - Add env option to set child process environment variables without modifying
    parent %ENV (GH#178, GH#179)
  - Add started() method to query harness run state (GH#171, GH#180)
  - Add finished() method to distinguish exit-0 from not-yet-exited
    (GH#169, GH#181)
  - Add pid(), pids(), is_running(), full_path(), full_paths() convenience
    methods (GH#44, GH#203)
  - Add &lt;blocking_pipe operator for blocking writes to child stdin
    (GH#64, GH#200)
  - Add close_stdin() method to prevent unbounded memory growth when streaming
    to long-running children (GH#212)
  Maintenance:
  - Consolidate CI into single testsuite.yml with dynamic Perl version matrix
    (GH#208, GH#209)
  - Add CLAUDE.md with project guidelines for AI-assisted development (GH#220)
  - Add 5-minute timeout to all CI workflow steps
  - Remove TODO from Win32 autoflush test and align with Unix branch
    (GH#228, GH#234)
  - Clean up resolved TODO tests in win32_newlines.t (GH#223, GH#227)
  - Skip t/eintr.t early on Win32 to avoid SIGUSR1 warning (GH#231, GH#233)
  - Suppress File::Temp version-string warnings in test suite (GH#229, GH#232)
- Apply upstream fixes for compatibility with IO::Tty 1.21</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260401.0-1" date="1775131200">- Update to 20260401.0 (rhbz#2454159)
  Bug fixes:
  - Require IO::Pty 1.25, which fixes stale pty slave fd after close_terminal
    in child, replacing defensive workarounds (GH#240, GH#241, GH#266)
  - Close Win32IO socket/pipe handles explicitly in _cleanup to prevent handle
    leaks (GH#237, GH#246)
  - Handle $SIG{PIPE} set to 'DEFAULT' in _select_loop instead of crashing
    (GH#242, GH#244)
  - Handle $SIG{CHLD} set to '' or 'DEFAULT' in _select_loop (GH#262)
  - Fix PTYS typo in adopt() and missing TIMERS init in harness constructor
    (GH#260)
  - Handle PTY allocation failure gracefully in start() instead of dying with
    an unhelpful error (GH#267)
  - Correct Timer.pm POD typos, _parse_time error message, and remove redundant
    parse call (GH#251)
  - Prevent noexec probe from leaking TAP output in search_path_cache.t (GH#247)
  Improvements:
  - Correct broken POD links and code examples in documentation (GH#252)
  Maintenance:
  - Update GitHub URLs from toddr/IPC-Run to cpan-authors/IPC-Run (GH#263)
  - Replace GPL v2 full text with standard "same terms as Perl" license (GH#268)
  - Add AI policy document (GH#248)
  - Use File::Spec-&gt;devnull in autoflush.t for portability (GH#250)
  - Skip search_path_cache.t on noexec temp filesystems (GH#247)
  - Remove dead code from Run.pm (GH#266)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260402.0-1" date="1775217600">- Update to 20260402.0 (rhbz#2454677)
  Bug fixes:
  - Detect undefined command in arrayref at harness parse time instead of
    deferring to start() (GH#164, GH#271, GH#272)
  - pipe_writer dropped input when data is the string "0" due to redundant
    boolean test on input buffer (GH#264)
  - Callback filter evaluates return in list context to distinguish empty
    return from the string "0", preventing infinite loop on Win32 (GH#264)
  - Skip pty output assertions on BSD/Darwin due to known pty drain timing
    issues on short-lived children (GH#240, GH#274)
  - Implement proper Windows command-line parsing per Microsoft C/C++ rules,
    fixing argument parsing failures with single-quoted strings containing
    whitespace (GH#273)
  Maintenance:
  - Add shebang to eg/synopsis_scripting (GH#275)</changelog>
</package>
<package pkgid="16a8575815902256801512f10947a521f439f077f30b74cc9431e9b9b4d52430" name="perl-IPC-Run3" arch="noarch">
  <version epoch="0" ver="0.049" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.048-28" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.049-1" date="1705838400">- Update to 0.049
  - Avoid some uninitialized warnings in ProfLogReader
  - Improve errno handling on Windows
  - Avoid leaking fds
  - Fix typos in docs</changelog>
</package>
<package pkgid="b422ef958c37e55e7d041088889e0600afea68e72c916c965369ed8c1c631a74" name="perl-IPC-System-Simple" arch="noarch">
  <version epoch="0" ver="1.30" rel="10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-10" date="1682424000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="10ca419a8537bde293e57d98fbc527e3ad0bfb4a727d415bc2344de5c1eb7afc" name="perl-Import-Into" arch="noarch">
  <version epoch="0" ver="1.002005" rel="23.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.002005-23" date="1682424000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f3dc6d70c30f9df8a687fa48be9ef33f7b7a32467284999e48dbb7ba8edeab68" name="perl-Importer" arch="noarch">
  <version epoch="0" ver="0.026" rel="9.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.026-9" date="1689076800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="a3f7a770c3f441daf7fa297d3b6ba8af2a40bae3a996b0792175205b556b54fa" name="perl-JSON" arch="noarch">
  <version epoch="0" ver="4.11" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.11-1" date="1774180800">- Update to 4.11
  - Updated backportPP with JSON::PP 4.18
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="93cfcc5d833f5a4614656dfbf68ac7bdbbe62a8f3ebfe0726bfe21ca83239bb6" name="perl-JSON-MaybeXS" arch="noarch">
  <version epoch="0" ver="1.004008" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004004-1" date="1663675200">- Update to 1.004004
  - Slight speed optimization for is_bool()
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004005-1" date="1682856000">- Update to 1.004005
  - to_json and from_json are now documented (GH#2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004007-1" date="1722772800">- Update to 1.004007
  - is_bool() now recognizes core booleans (perl 5.36+); note that JSON::PP
   4.11 and Cpanel::JSON::XS 4.38 are required to properly encode them</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004008-1" date="1723377600">- Update to 1.004008
  - Improved boolean testing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004008-2" date="1723550400">- Fix runtime dependency on Cpanel::JSON::XS 4.38 (rhbz#2304277)</changelog>
</package>
<package pkgid="c4849fc7de24ab563b347d137815f6204f9c12eaf530d65d237bb9f2bfc57a2d" name="perl-JSON-PP" arch="noarch">
  <version epoch="1" ver="4.18" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.16-522" date="1766491200">- Silence Getopt::Long warning (rhbz#2417867, PR#1, GH#88, GH#93)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.18-1" date="1774008000">- Update to 4.18
  - Fix duplicate specification warning (GH#88, GH#93)
  - Fix typo (GH#92, GH#96)
  - Fix decode_json prototype
  - Fix space_after (GH#89)
  - Fix a reentrancy issue (GH#61, GH#87)</changelog>
</package>
<package pkgid="282a1a301e7d9bbc87588bcb80d0a3b99c2a4881ee5b439f6b3483f1d8c07997" name="perl-JSON-XS" arch="x86_64">
  <version epoch="1" ver="4.04" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.03-14" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.03-17" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.04-1" date="1757419200">- Update to 4.03
  - Fix heap overflow causing crashes, possibly information disclosure or worse
    (CVE-2025-40928), and causes JSON::XS to accept invalid JSON texts as valid
    in some cases</changelog>
</package>
<package pkgid="fee967df66e8475d998dc3919304145e632b3b3697e11cb05caeb024050342d3" name="perl-Jcode" arch="noarch">
  <version epoch="0" ver="2.07" rel="40.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.07-40" date="1682424000">- Use SPDX-format license tag
- Avoid use of deprecated patch tag</changelog>
</package>
<package pkgid="df498ac49401ffaa2d66528465b28217005454f4d57f1831e884d050c97305f7" name="perl-LMAP-CID2SPF" arch="noarch">
  <version epoch="0" ver="0.9" rel="18.fc29"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 0.9-18" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c1058d2c3d0e7231da6940f885c1b37c00fa71efacd21b5d6de34e5f4ea73a5a" name="perl-Lingua-EN-Inflect" arch="noarch">
  <version epoch="0" ver="1.905" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.905-8" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2c10b239bbc7b7cf9ba217879b64366cc29cf96676bc098d22b052efd4f60924" name="perl-List-MoreUtils" arch="noarch">
  <version epoch="0" ver="0.430" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-8" date="1682424000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="005cae57c1e1e2df4415c8595c4db41df3fc64350192ba95a4a91f5c45a89482" name="perl-List-MoreUtils-XS" arch="x86_64">
  <version epoch="0" ver="0.430" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-6" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-8" date="1682510400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="43e3489c63b9d841b950573f9bcd3905d72f67130265e1e9bb0e68c74ca49842" name="perl-List-SomeUtils" arch="noarch">
  <version epoch="0" ver="0.59" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.59-1" date="1670846400">- Update to 0.59
  - Require Module::Implementation 0.04; without this tests fail (GH#11)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.59-2" date="1689681600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="f01394ea26dd8b9abbb34bd278500f9ab604081a35fe959cf4f8b0b3e069e378" name="perl-List-SomeUtils-XS" arch="x86_64">
  <version epoch="0" ver="0.58" rel="18.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.58-14" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.58-18" date="1689681600">- Perl 5.38 rebuild</changelog>
</package>
<package pkgid="ce831505db2a68041eaf262cb93b389a84340b651511c71ee8c22be6c2721cc1" name="perl-Locale-Maketext-Lexicon" arch="noarch">
  <version epoch="0" ver="1.00" rel="30.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.00-30" date="1689595200">- Drop support for building with rpm &lt; 4.9
- Use Lingua::EN::Sentence unconditionally
- Use %license unconditionally</changelog>
</package>
<package pkgid="3410c9df45c22d6b6f1e0fc807f6fe726ed043db90c80067dc97c8430b522f67" name="perl-Locale-Maketext-Simple" arch="noarch">
  <version epoch="1" ver="0.21" rel="499.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.21-486" date="1647604800">- Work around package note files breaking t/0-signature.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.21-499" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="f016583748a74bdda0cfde08406cbc677625e2758db0ce9acb83b9c101a4b163" name="perl-Locale-US" arch="noarch">
  <version epoch="0" ver="3.04" rel="24.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.04-24" date="1682510400">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Use %license unconditionally
  - Don't package kruft2codes.pl as documentation; it's a maintainer script
    that is installed alongside the module itself</changelog>
</package>
<package pkgid="aceea9230168dbb9a2736bc1ffe0e7afaea7c8d9cbc993c8232329fc159c19ce" name="perl-MCE" arch="noarch">
  <version epoch="0" ver="1.902" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.896-1" date="1718193600">- Update to 1.896 (rhbz#2291411)
  - Weaken internal core MCE reference to reap workers automatically upon
    leaving the scope i.e. omitting shutdown
    - Note: No change to MCE models Flow, Grep, Loop, Map, Step, and Stream
    - Call finish explicitly to reap workers
    - This resolves the case when omitting calling $mce-&gt;run(), $mce-&gt;run(1) or
      $mce-&gt;shutdown() inside a scope, causing workers to linger around until
      completion of the script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-1" date="1718884800">- Update to 1.897
  - In scalar context, the init function in MCE Child and models Flow, Grep,
    Loop, Map, Step, and Stream returns a guard to call finish automatically
    upon leaving the { scope } (i.e. omitting finish)
  - Add out_iter_callback to MCE::Candy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.898-1" date="1724328000">- Update to 1.898
  - Fix for MCE::Child, Can't call method "len" on an undefined value
    during global destruction (GH#22)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.899-1" date="1725624000">- Update to 1.899
  - Fix for MCE::Child and MCE::Channel signal anomaly (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.900-1" date="1725969600">- Update to 1.900 (rhbz#2310966)
  - Improve MCE::Child exiting when signaled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-1" date="1735905600">- Update to 1.901 (rhbz#2335354)
  - Add MCE::Core package for future development</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-3" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.902-1" date="1757505600">- Update to 1.902 (rhbz#2394255)
  - Add support for Iterator:: classes
- Use Sereal unconditionally</changelog>
</package>
<package pkgid="1e3abac086d77e6807f41ccbb7efb45f5c07d3cb6f01c953b2edef09fe7b7bcc" name="perl-MCE-Shared" arch="noarch">
  <version epoch="0" ver="1.893" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.884-1" date="1686225600">- Update to 1.884
  - Add missing return statement(s) in Condvar and Queue
  - Move tests for condvar timedwait to xt/condvar_timedwait.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.885-1" date="1686312000">- Update to 1.885
  - Fix typo in Queue dequeue_timed documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.886-1" date="1694692800">- Update to 1.886
  - Add Android support; this required moving MCE::Shared::Base::Common out of
    MCE::Shared::Base to separate file MCE::Shared::Common
  - Bump MCE dependency to 1.889</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.887-1" date="1716724800">- Update to 1.887
  - Improve reaping of completed workers in MCE::Hobo</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.888-1" date="1717675200">- Update to 1.888
  - Apply workaround for PDL::srand in MCE::Hobo
    (https://www.perlmonks.org/?node_id=11159773)
  - Add PDL::srand (v2.062~v2.089) and PDL::srandom (v2.089_01+)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.889-1" date="1718020800">- Update to 1.889
  - Improve support for PDL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.890-1" date="1718107200">- Update to 1.890
  - Revert back to calling CORE::rand() to set the internal seed; MCE::Hobo
    cannot assume the srand or setter function used by the application for
    predictability
    - https://perlmonks.org/?node_id=11159834
    - https://perlmonks.org/?node_id=11159827
  - Add class method MCE::Hobo-&gt;seed to retrieve the seed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.891-1" date="1718884800">- Update to 1.891
  - In scalar context, MCE::Hobo-&gt;init returns a guard to call finish
    automatically upon leaving the { scope } (i.e. omitting finish)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.892-1" date="1724328000">- Update to 1.892
  - Fix for MCE::Hobo, Can't call method "len" on an undefined value during
    global destruction</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.893-1" date="1725969600">- Update to 1.893
  - Improve MCE::Hobo exiting when signaled</changelog>
</package>
<package pkgid="09d31a18ef5f5a1e1ea397aeded5aa2cce9d8b523d649cb4fc46e7dbfb7c63be" name="perl-MCE-tools" arch="noarch">
  <version epoch="0" ver="1.902" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.896-1" date="1718193600">- Update to 1.896 (rhbz#2291411)
  - Weaken internal core MCE reference to reap workers automatically upon
    leaving the scope i.e. omitting shutdown
    - Note: No change to MCE models Flow, Grep, Loop, Map, Step, and Stream
    - Call finish explicitly to reap workers
    - This resolves the case when omitting calling $mce-&gt;run(), $mce-&gt;run(1) or
      $mce-&gt;shutdown() inside a scope, causing workers to linger around until
      completion of the script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-1" date="1718884800">- Update to 1.897
  - In scalar context, the init function in MCE Child and models Flow, Grep,
    Loop, Map, Step, and Stream returns a guard to call finish automatically
    upon leaving the { scope } (i.e. omitting finish)
  - Add out_iter_callback to MCE::Candy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.898-1" date="1724328000">- Update to 1.898
  - Fix for MCE::Child, Can't call method "len" on an undefined value
    during global destruction (GH#22)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.899-1" date="1725624000">- Update to 1.899
  - Fix for MCE::Child and MCE::Channel signal anomaly (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.900-1" date="1725969600">- Update to 1.900 (rhbz#2310966)
  - Improve MCE::Child exiting when signaled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-1" date="1735905600">- Update to 1.901 (rhbz#2335354)
  - Add MCE::Core package for future development</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-3" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.902-1" date="1757505600">- Update to 1.902 (rhbz#2394255)
  - Add support for Iterator:: classes
- Use Sereal unconditionally</changelog>
</package>
<package pkgid="6bf9bdccf2742030737c057076eb94147966463ad7925f7fd7bad1d3e6faba5f" name="perl-MIME-Base32" arch="noarch">
  <version epoch="0" ver="1.303" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.303-17" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="33d10f0d65d1a89599f3d6c1357ef314f9fb923f629b9801a4209e464f2c07bf" name="perl-MIME-Types" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-5" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-1" date="1707220800">- Update to 2.26
  - IANA updates
  - Support multi-level extensions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-3" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.27-1" date="1738929600">- Update to 2.27
  - IANA updates
  - Explicitly set $/ before reading the file by line</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1745064000">- Update to 2.28
  Fixes:
  - Some 'deprecated' texts made it to types.db
  Improvements:
  - text/ecmascript RFC9239
  - Default charsets according to RFC6657
  - Update reference to specs RFC6838 and RFC9694
  - IANA updates
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-2" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1757937600">- Update to 2.29
  - Require 5.16 (2012)
  - Remove xt/98perl.t
  - ::Type-&gt;defaultCharset()
  - Remove use of bareword filehandle
  - IANA updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1765195200">- Update to 2.30
  Fixes:
  - No undef when simplifying illegal type (GH#15)
  Improvements:
  - Add bugtracker to meta
  - Better OO use of attributes</changelog>
</package>
<package pkgid="d7c836132bc3dc0828382530933e46710f617dfc6768bc6eceaf41e59b71e247" name="perl-MIME-tools" arch="noarch">
  <version epoch="1" ver="5.517" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-1" date="1714132800">- Update to 5.515
  -  Fix the "version" setting in META.yml (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-3" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-4" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-5" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.517-1" date="1770811200">- Update to 5.517
  - Handle MIME parameters of the form param= better (i.e. a parameter with no
    value at all); it's treated the same as param="" rather than aborting the
    parse
  - Diagnose additional types of malformed MIME as ambiguous; specifically, an
    empty boundary parameter like boundary= or boundary="" is treated as
    ambiguous</changelog>
</package>
<package pkgid="cee8121b297d7c2b5109cbeda30c57d79494dc4b4e044f4f7d8c6ebe1a824738" name="perl-MLDBM" arch="noarch">
  <version epoch="0" ver="2.05" rel="34.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-29" date="1682510400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-32" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-34" date="1726574400">- Drop optional test dependency perl(DB_File) from Fedora 33 onwards due to
  deprecation of libdb</changelog>
</package>
<package pkgid="4e31b8daa600ea4d546a24462783f18454512cc7b2bda1c4dc80384d5569c44f" name="perl-MRO-Compat" arch="noarch">
  <version epoch="0" ver="0.15" rel="6.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-1" date="1641643200">- Update to 0.15
  - Optimize pure perl DFS inheritance calculation on perl 5.8
  - Fix function prototypes to match core functions
  - Pod formatting fix
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-6" date="1679486400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9dbf01be1143116668d571a5ed51c6e31a22b315f81212fe46c4716624325fee" name="perl-Mail-IMAPClient" arch="noarch">
  <version epoch="0" ver="3.43" rel="7.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.43-7" date="1689681600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="e14de570b19bd3cb5305aa191f1ca99a6e93d4e3a1ee389c8983502850e67248" name="perl-Mail-Mbox-MessageParser" arch="noarch">
  <version epoch="0" ver="1.5111" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.5111-16" date="1682596800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="9753bf422212dcc06a59cb12fcd9adf2554c579100006ca9488dcfaecaa4ba82" name="perl-Mail-SPF" arch="noarch">
  <version epoch="0" ver="3.20260331" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240617-1" date="1718625600">- Update to 3.20240617
  - Update INSTALL file for Dist::Zilla changes
  - Fix memory leak in Mail::SPF::Server when cacheing a Mail::SPF::MacroString
  - When mfrom is empty, create a synthetic mfrom (postmaster@helo) and check
    that identity using the mfrom scope as specified in RFC7208
  - Fix missing declare in Mail::SPF::Server
  - Require Mail::SPF::Mech when needed
  - Correctly handle empty labels
  - Use "try" instead of "eval"
  - Error out if the lookup fails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240827-1" date="1724760000">- Update to 3.20240827
  - Do not try to parse an IPv4 address unnecessarily
  - Import RFC7208 tests
  - Referencing the same TXT record through multiple CNAME aliases is not
    permitted by RFC7208
  - Make it clear that BlackMagic module is not available
  - Fix checks for IPv4-mapped IPv6 connections
  - Cache DNS results
  - Misc dzil/build/ci improvements
  - SPF explanation text is restricted to 7-bit ascii</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240923-1" date="1727092800">- Update to 3.20240923
  - Fix issue where certain DNS results would cause an exception to be thrown</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20250505-1" date="1746446400">- Update to 3.20250505
  - Avoid an 'Attempt to reload Mail/SPF/Mech.pm aborted' error
  - Remove empty record structure in order to stringify it correctly
  - Redirect all references to openspf.org to open-spf.org
  - Fix pod test errors
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20260331-1" date="1775044800">- Update to 3.20260331
  - Do not check for multiple CNAMEs if the included domain is a macro
- Drop build dependency on broken, dead upstream module Mail::SPF::Test</changelog>
</package>
<package pkgid="57b7999d2a0f3de1d4daf6d6d7f09bbdac94a3563a5792b07e473901bbdcfa8b" name="perl-Mail-SPF-Test" arch="noarch">
  <version epoch="0" ver="1.001" rel="11.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001-11" date="1680091200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="fbebf9a876be7be39be800686b72074fa2b6e41d519c52fd6ffaf21d1005d0b2" name="perl-Mail-SRS" arch="noarch">
  <version epoch="0" ver="0.31" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-15" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="834e58bd51ab3372e29c3a97e61cb01f1e9d4bd38581bd48e4d6df971428d617" name="perl-Mail-Sender" arch="noarch">
  <version epoch="1" ver="0.903" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.903-21" date="1686312000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="35b7162be21f1558a2a71cc86e241d20980bc60ea1edb8e7398cae681702c783" name="perl-Mail-Sendmail" arch="noarch">
  <version epoch="0" ver="0.82" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.80-17" date="1689681600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.82-1" date="1752580800">- Update to 0.82
  - Fixed typos (CPAN RT#88351, CPAN RT#119000)
 - Improvement to use Sys::Hostname::Long (CPAN RT#36112, GH#2)</changelog>
</package>
<package pkgid="4ae76b1b915ba3e5ea57ff920cf759586954cdb044baf33057b9fe1ddaf45e6e" name="perl-MailTools" arch="noarch">
  <version epoch="0" ver="2.22" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.21-13" date="1682596800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.22-1" date="1731931200">- Update to 2.22 (rhbz#2326982)
  - To/Cc/Bcc/From fields may appear only once (GH#4)</changelog>
</package>
<package pkgid="dde97e016f274f8db7b7fab309907e6b3f6190bfefe5d92ab8693e4491011794" name="perl-Math-Base-Convert" arch="noarch">
  <version epoch="0" ver="0.13" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-1" date="1758024000">- Update to 0.13
  - Fix precedence issue highlighted by perl 5.42 (CPAN RT#168226)
  - Correct typo: 96 ASCII characters should be 95
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="5390bf47d30bfc22501fcd065a5c735c65c5705ceb7318999927f2b405182c4d" name="perl-Math-Round" arch="noarch">
  <version epoch="0" ver="0.08" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-25" date="1682596800">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1696939200">- Update to 0.08
  - NEILB has taken over maintenance
  - Added usual directory structure with lib/ and t/
  - Converted test.pl to traditional Test::More suite
  - Added LICENSE to doc and ensured metadata has license
  - Switched to dzil</changelog>
</package>
<package pkgid="002e738fe9fbbc78589f971175da2cc94db7a99148564c69de2198d3e50b8831" name="perl-Meta-Builder" arch="noarch">
  <version epoch="0" ver="0.004" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-14" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8089ca762aa797293c3050c03d07fd7429ea103f6ec6401d955615ac1c924c72" name="perl-MetaCPAN-Client" arch="noarch">
  <version epoch="0" ver="2.043000" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.033000-1" date="1732536000">- Update to 2.033000
  - Remove backpan_directory option (GH#127)
- Switch upstream source URL from cpan.metacpan.org to www.cpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.033000-2" date="1752148800">- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker ≤ 7.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.034000-1" date="1764849600">- Update to 2.034000
  - Add distribution to list of known fields in DownloadURL response (GH#129)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.035000-1" date="1767787200">- Update to 2.035000
  - Fix a compatibility issue for ES 8 in scroller setting (GH#131)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.037000-1" date="1767873600">- Update to 2.037000
  - Fix es_filter to merge into query (GH#132)
  - More ES 8 related fixes (GH#133)
  - Updated scripts in examples/ (GH#133)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.038000-1" date="1769774400">- Update to 2.038000
  - Support CVE index</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.039000-1" date="1772280000">- Update to 2.039000
  - Add more types that can be scrolled (GH#134)
  - Fix 'all' fetching from CVE and example scripts (GH#135)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.040000-1" date="1773057600">- Update to 2.040000
  - Use a boolean in reverse_deps term (GH#136)
  - Allow JSON-&gt;true and JSON-&gt;false (GH#137)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.042000-1" date="1777291200">- Update to 2.042000
  - Rating: Fail instead of silent empty response (GH#141)
  - CVE: Clean-up and updated (GH#142)
  - CVE: Fixed search + unbroke 'all' method (GH#144)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.043000-1" date="1777550400">- Update to 2.043000
  - Cleaned up code references to 'type' (GH#148)
  - Support count method (GH#147)
  - Fixed author fields list (GH#145)</changelog>
</package>
<package pkgid="5bba7ee6b4c4f44951f7d93f8624b47a557e967821cef0ca07090e3829cd2db2" name="perl-Mixin-Linewise" arch="noarch">
  <version epoch="0" ver="0.111" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.111-1" date="1672574400">- Update to 0.111
  - Update author information
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.111-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="d460685df4b5e1801fec7f87e31f2d120e32e7fdd88547e30e8bfb412d3ad3b1" name="perl-Mock-Quick" arch="noarch">
  <version epoch="0" ver="1.111" rel="20.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.111-20" date="1681128000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4f9395f65ecb3595efdf585af779a62778d38284c952016ff7fdbf0f21e3fe5b" name="perl-Module-Build" arch="noarch">
  <version epoch="2" ver="0.42.34" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.31-12" date="1648555200">- Handle missing ExtUtils::CBuilder as a missing compiler (#1547165)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.32-1" date="1670587200">- Update to 0.4232
  - Drop Pod::Man dependency for 5.8 compatibility
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.34-1" date="1682683200">- Update to 0.4234
  - PodParser now respects =encoding directives
  - Don't use libraries in t/bundled for Build.PL
  - make_tarball: workaround for broken tar on Darwin
  - Respect $Config{man1ext}/$Config{man3ext}
  - Do not require a compiler if c_source is an empty list
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="93e8a0f354c9725feb639faf1dac9595ecb8b9e71a4828667c43c9761738ce98" name="perl-Module-Build-Deprecated" arch="noarch">
  <version epoch="0" ver="0.4210" rel="26.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4210-26" date="1689681600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e66f401f2c0416bc7e22ad31fbfc921d3e0524c63d73dddf3d45b5425b7e1222" name="perl-Module-Build-Tiny" arch="noarch">
  <version epoch="0" ver="0.053" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.048-1" date="1714392000">- Update to 0.048
  - Implement dynamic prerequisites</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.049-1" date="1725451200">- Update to 0.049
  - Make CPAN::Requirements::Dynamic an optional dependency
- This package retains hard dependency for consistency of use</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.050-1" date="1725451201">- Update to 0.050
  - Revert "Make CPAN::Requirements::Dynamic an optional dependency"
    (GH#36)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.051-1" date="1725624000">- Update to 0.051
  - Make CPAN::Requirements::Dynamic an optional dependency
- This package retains hard dependency for consistency of use
- Run tests verbosely</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.052-1" date="1747137600">- Update to 0.052
  - Add extra_compiler_flags and extra_linker_flags command line arguments</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.053-1" date="1772625600">- Update to 0.053
  - Always set dynamic_config=0 in MYMETA
  - Set PERL_DL_NONLAZY=1 during testing</changelog>
</package>
<package pkgid="6e21c8e278f3ecac9941ed76ae87f7c3f814a1135ffa20a5b5cbbe9d3a12ab52" name="perl-Module-Build-XSUtil" arch="noarch">
  <version epoch="0" ver="0.19" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.19-17" date="1674561600">- Spec tidy-up
  - Use SPDX-format license tag
  - Use %license unconditionally
  - Fix permissions of installed files
  - Avoid redundant perl(:MODULE_COMPAT_*) dependency</changelog>
</package>
<package pkgid="f17ce044b31737c4eb91475a5c1fc45096b5d82e5c9d02737ed5047423a29b5b" name="perl-Module-CPANTS-Analyse" arch="noarch">
  <version epoch="0" ver="1.02" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.01-11" date="1682683200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with ExtUtils::MakeMaker &lt; 6.58</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-1" date="1694347200">- Update to 1.02
  - Treat use v5.36 as use_warnings (GH#49)
  - Skip some of the manifest test if symlink is not available (GH#50)
  - Improve prereq sorting
  - Improve pod detection
  - Improve script detection
  - Use Parse::Distname to get a little more information from a distribution
    name
  - Dedupe possible licences
  - Add Object::Pad as use strict equivalent (GH#42)
  - Fix has_license_in_source_file for distributions that contain only a
    script under bin or scripts (GH#37)</changelog>
</package>
<package pkgid="b3fcf5b911bb87128c42e0fa05cd6f4d61972d5e2b87e83c264664df30187514" name="perl-Module-CPANfile" arch="noarch">
  <version epoch="0" ver="1.1004" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1004-12" date="1631534400">- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1004-16" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a134d7d6e0ffd6488471766165c1fd587c9e39c7b7b9fab7f91fe95ea0f015cf" name="perl-Module-CoreList" arch="noarch">
  <version epoch="1" ver="5.20260420" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20250923-1" date="1758628800">- Update to 5.20250923
  - Updated for v5.43.3</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20251022-1" date="1761307200">- Update to 5.20251022
  - Updated for v5.43.4</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20251120-1" date="1763726400">- Update to 5.20251120
  - Updated for v5.43.5</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20251220-1" date="1766404800">- Update to 5.20251220
  - Updated for v5.43.6</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260119-1" date="1768910400">- Update to 5.20260119
  - Updated for v5.43.7</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260220-1" date="1771675200">- Update to 5.20260220
  - Updated for v5.43.8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260308-1" date="1773057600">- Update to 5.20260308
  - Updated for v5.42.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260320-1" date="1774180800">- Update to 5.20260320
  - Updated for v5.43.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260330-1" date="1774872000">- Update to 5.20260330
  - Updated for v5.42.2
  - Updated for v5.40.4</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260420-1" date="1776686400">- Update to 5.20260420
  - Updated for v5.43.10</changelog>
</package>
<package pkgid="6504e72c4e06268950fb199c63f71be69ba91a0f54813badfb644f7bf087f77c" name="perl-Module-Extract-Namespaces" arch="noarch">
  <version epoch="0" ver="1.026" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-4" date="1682683200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.024-1" date="1707652800">- Update to 1.024
  - Refresh distro, update email address, release under new PAUSE ID BRIANDFOY</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.025-1" date="1737979200">- Update to 1.025
  - Refresh distro
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.026-1" date="1744632000">- Update to 1.026
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="c54655e52e0308db738fca7c34d8450da011e591f285298797ef29a8ae9caf90" name="perl-Module-Extract-Use" arch="noarch">
  <version epoch="0" ver="1.055" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.053-1" date="1723896000">- Update to 1.053
  - More upstream metadata changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.054-1" date="1744632000">- Update to 1.054
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.055-1" date="1776600000">- Update to 1.055
  - extract_modules can now search PATH for file</changelog>
</package>
<package pkgid="0cf5d18dac714e487f1c1f0cd64c80de011d11f6a4d22e6395a60eaad8be3bcd" name="perl-Module-Extract-VERSION" arch="noarch">
  <version epoch="0" ver="1.119" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.116-2" date="1689681600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.117-1" date="1707652800">- Update to 1.117
  - Refresh distro, update email address, move to BRIANDFOY</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.118-1" date="1737547200">- Update to 1.118
  - Refresh dist
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-1" date="1744718400">- Update to 1.119
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="53c1ce7b052211d9097e1c2963c286ef6142c3acd778de41ced5093c7fd47490" name="perl-Module-ExtractUse" arch="noarch">
  <version epoch="0" ver="0.345" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.344-1" date="1630929600">- Update to 0.344
  - Fixed some spelling errors in the Pod
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.345-1" date="1673956800">- Update to 0.345
  - Auto generate meta_yml_has_provides experimental Kwalitee
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="cdb61b7ade81d1dc6a805bff011a7b32f28a841b6d0ad6eba638884743373bbb" name="perl-Module-Find" arch="noarch">
  <version epoch="0" ver="0.17" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.16-3" date="1682596800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-1" date="1739793600">- Update to 0.17
  - Avoid warnings when extracting the distribution tarball, which prevented
    installation under cpanm and other tools (GH#13, CPAN RT#148978)</changelog>
</package>
<package pkgid="611328761841977c698e3af68eae9ac86ae7efc0a94fcae8b08650a799111d16" name="perl-Module-Implementation" arch="noarch">
  <version epoch="0" ver="0.09" rel="36.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-36" date="1682856000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="dc8a1cd9ebe91a58fe6dfe4b1cf27f9245081ec6e8dd4627e1e68ca9e9091c28" name="perl-Module-Info" arch="noarch">
  <version epoch="0" ver="0.39" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-22" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.39-1" date="1724846400">- Update to 0.39
  - Get rid of ' as package namespace separator
  - Fixed compatibility with 5.8.1 (CPAN RT#129677)</changelog>
</package>
<package pkgid="6b44575427b11262f9125325d0b0a29bf5f27ca8fb082115992218f60c1b4f96" name="perl-Module-Load" arch="noarch">
  <version epoch="1" ver="0.36" rel="499.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.36-499" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="04a3e0b9c19939e723bdf20cd56f03609a9bcf81bd277eb7664d18589f506a0c" name="perl-Module-Load-Conditional" arch="noarch">
  <version epoch="0" ver="0.74" rel="499.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.74-499" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b312716b1936fb3e816950b6cbd1cda0e3a99ab51dfe027dc72db576df96c39e" name="perl-Module-Manifest" arch="noarch">
  <version epoch="0" ver="1.09" rel="18.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-18" date="1689681600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="ba66fc206ba883cfe23059fc402edb66ef2e639bff0d1ff9ea5f2525b0b61607" name="perl-Module-Metadata" arch="noarch">
  <version epoch="0" ver="1.000039" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000039-1" date="1775304000">- Update to 1.000039
  - Adds recognition of attributes in "class" declarations (GH#39)
- User %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="47662b3604c37f9310e8e016f3b8fe81ca3e12f41e2b9b99ced2b438d5267853" name="perl-Module-Pluggable" arch="noarch">
  <version epoch="2" ver="6.3" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:5.2-25" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.1-1" date="1729684800">- Update to 6.1
  - Fix typo in examples
  - Fix spelling of "FatPacker"
  - Add before_instantiate and after_instantiate hooks
  - Use explicit test plan instead of done_testing
  - Don't use vars, use our
  - Ignore the .AppleDouble
  - Improve vim swapfile patterns
  - Fix behaviour of File::Find and symlinks on certain versions of Win32
  - Skip unreadable files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.2-1" date="1729857600">- Update to 6.2
  - Add search_dirs, searching filesystem, different from search_path,
    searching namespace</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.2-2" date="1730030400">- Fix clean-up of temporary directory in test (CPAN RT#156362)
- Work around failure of unreadable file test when running as root (CPAN RT#156367)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.3-1" date="1736596800">- Update to 6.3
  - Fix make_path() in t/29unreadable.t (CPAN RT#156362)
  - Fix t/29unreadable.t tests failing as root (CPAN RT#156367)</changelog>
</package>
<package pkgid="2b8c392edbd0d1461aa26d3692d78ecae4fb1bd2ddb73e18c4ae6b2ba64be3fa" name="perl-Module-Refresh" arch="noarch">
  <version epoch="0" ver="0.18" rel="5.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-1" date="1652184000">- Update to 0.18
  - Fix uninitialized warnings when modules were not successfully loaded</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-5" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="4f19448cf4aeb44c383eec2b2117e494807656eb12f5e2938388862c5d7f6849" name="perl-Module-Runtime" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.016-19" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1743940800">- Update to 0.017 (rhbz#2357698)
  - Fixed internal Pod links
  - Various internal formatting changes
  - Check for eval failures via return value, not $@
  - Update packaging to remove Module::Build and set x_static_install
  - Remove broken SIGNATURE file
- Switch to ExtUtils::MakeMaker flow
- Package LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1745236800">- Update to 0.018
  - Avoid xattr headers in release tarball
  - Minor code reformatting</changelog>
</package>
<package pkgid="2c0fd87beb46a83bd7fce4db8d3ddaa0d0dc2afb551f0566c2a53f9e64b604c7" name="perl-Module-Runtime-Conflicts" arch="noarch">
  <version epoch="0" ver="0.003" rel="20.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-20" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="07de8b4ef1953a728d8795e4edbdd8445b78f3693c484109442ce3629897d46b" name="perl-Module-Signature" arch="noarch">
  <version epoch="0" ver="0.96" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.89-1" date="1726488000">- Update to 0.89
  - Replace keyserver with keyserver.ubuntu.com (GH#34, GH#38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.90-1" date="1749816000">- Update to 0.90
  - Fix fail on signature file with an unexpected empty line (CPAN RT#166901)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.92-1" date="1751025600">- Update to 0.92
 - Add SECURITY.md policy
 - Move to three-arg open
 - Remove spaces from eol
 - Change build process to Dist::Zilla
- Recommend perldoc and PAR::Dist, needed for some cpansign functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.93-1" date="1751112000">- Update to 0.93
  - The cpansign script was not installed with version 0.92 (GH#44)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.95-1" date="1777291200">- Update to 0.95 (rhbz#2461945)
  - Announce deprecation of the module</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-1" date="1777377600">- Update to 0.96
  - Fix issue from last release where search keys is interactive
- SECURITY.md no longer shipped</changelog>
</package>
<package pkgid="4e4d0af3971090848c0cdd5d30ec09b5fa702fa659fbbb61cf4e24f873a9b092" name="perl-MojoX-MIME-Types" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-5" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-1" date="1707220800">- Update to 2.26
  - IANA updates
  - Support multi-level extensions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-3" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.27-1" date="1738929600">- Update to 2.27
  - IANA updates
  - Explicitly set $/ before reading the file by line</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1745064000">- Update to 2.28
  Fixes:
  - Some 'deprecated' texts made it to types.db
  Improvements:
  - text/ecmascript RFC9239
  - Default charsets according to RFC6657
  - Update reference to specs RFC6838 and RFC9694
  - IANA updates
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-2" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1757937600">- Update to 2.29
  - Require 5.16 (2012)
  - Remove xt/98perl.t
  - ::Type-&gt;defaultCharset()
  - Remove use of bareword filehandle
  - IANA updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1765195200">- Update to 2.30
  Fixes:
  - No undef when simplifying illegal type (GH#15)
  Improvements:
  - Add bugtracker to meta
  - Better OO use of attributes</changelog>
</package>
<package pkgid="fd1b1a6d6c98e86bbf9a13c6a2840c0c4470abb379620574eee6f00022c68db7" name="perl-Moo" arch="noarch">
  <version epoch="0" ver="2.005005" rel="11.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.005005-11" date="1768996800">- Assume Sub::Util is always available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="e1f15a53b95fac7b60300a563478e625398ab1b62d0cee6e4f4ec08729c26721" name="perl-Moose" arch="x86_64">
  <version epoch="0" ver="2.4000" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2203-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2205-1" date="1690113600">- Update to 2.2205 (rhbz#2224800)
  Tests
  - Adjust the expected list of UNIVERSAL methods, to account for changes in
    perl 5.39.1: some things, like the import method, could end up existing
    based on the perl version or based on a prerequite loading UNIVERSAL.pm
    (GH#183)
- Revert test change for Perl 5.39 if our perl is older than 5.22</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2206-1" date="1690113601">- Update to 2.2206
  - Fix parsing error in test in 2.2205 release</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-1" date="1705838400">- Update to 2.2207
  - Remove test dependency on Test::CleanNamespaces (GH#184)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-2" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-5" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6.1" date="1745150400">- Add provide for Moose::Conflicts, used in test suite for MooseX-Types
- Use %{make_build} and %{make_install}
- Drop Obsoletes/Provides for perl-Class-MOP, merged into perl-Moose in Fedora
  15 (2011)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4000-1.0" date="1751889600">- Update to 2.4000
  Documentation
  - Clarified some wording regarding the interactions between attribute
    configuration options "init_arg" and "required" (GH#187)
  Other
  - The release schedule and numbering scheme has changed; see
    Moose::Manual::Support</changelog>
</package>
<package pkgid="1b43a811bd57d04e82bec6a9424d96e9d276691c4d2c705e3a39aa34aaf02af2" name="perl-MooseX-GlobRef" arch="noarch">
  <version epoch="0" ver="0.0701" rel="35.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0701-35" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1a18fc417f5d11e3a62bfb70cbd2b80dc5bf330852d8f77f695f4031d55831fe" name="perl-MooseX-InsideOut" arch="noarch">
  <version epoch="0" ver="0.106" rel="35.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.106-35" date="1682942400">- Use SPDX-format license tag
- Use author-independent source URL
- Use %license unconditionally</changelog>
</package>
<package pkgid="d66a802496e9851993cd41dbd8cd7a27ba7f5e9fea838a2c499da1fd60b6fb1c" name="perl-MooseX-NonMoose" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-26" date="1682942400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1735905600">- Update to 0.27
  - Drop dependency on List::MoreUtils
  - New maintainer and repository: https://github.com/uperl/MooseX-NonMoose</changelog>
</package>
<package pkgid="7ada48fb98f8e56c1e255d2c495415e39b6e11e7d76f328865682fa8bdb13f27" name="perl-MooseX-Role-Parameterized" arch="noarch">
  <version epoch="0" ver="1.11" rel="12.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-12" date="1682942400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="222c17f1ab99ef60f855274a1197b310014e73a66292e39574fd2e12dfbf6972" name="perl-MooseX-Role-WithOverloading" arch="x86_64">
  <version epoch="0" ver="0.17" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-20" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-23" date="1654257600">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-25" date="1682942400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4813fb39567ad663af11094673cd8518339747b80a7dc8f14387bb6d50b46a6b" name="perl-MooseX-Types" arch="noarch">
  <version epoch="0" ver="0.51" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-19" date="1683028800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Fix permissions of installed files
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1745150400">- Update to 0.51
  - Use Sub::Util rather than Sub::Name, since Sub::Util is in core</changelog>
</package>
<package pkgid="8b86f96cb6b5c6bf00822530821d585acad49721f337802c94a929ba9bcb532b" name="perl-Mouse" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-21" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-22" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-1" date="1722772800">- Update to 2.5.11
  - Use Devel-PPPort 3.59 (GH#113)
  - Mark "builtin" as foreign (GH#123)
- Update bundled ppport.h to version 3.62</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-4" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-5" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.0-1" date="1761825600">- Update to 2.6.0 (rhbz#2407306)
  - Update minimum perl version from 5.8 =&gt; 5.10 (GH#112)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-1" date="1766232000">- Update to 2.6.1 (rhbz#2424094)
  - Provide empty import on Mouse::Deprecated for imported Moose test
    (GH#120, GH#127)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.2-1" date="1775390400">- Update to 2.6.2 (rhbz#2455030)
  - Fix the conversion from floating point number to string with quadmath Perl
    (GH#126)</changelog>
</package>
<package pkgid="07b435fbd6d7c2225d6167daef4700bf4629e49b92ce07994da31d635fbc4dae" name="perl-Net-CIDR" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-1" date="1741521600">- Update to 0.22
  - Improve several error messages
  - Allow unabbreviated IPv6 addresses
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1741608000">- Update to 0.23
  - Allow unabbreviated IPv6 addresses</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1747742400">- Update to 0.24 (no changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24.1-1" date="1747828800">- Update to 0.24.1
  - Strip extra leading zeros from octets in addr2cidr (GH#4)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-1" date="1748088000">- Update to 0.25
  - Fix warning with Perl 5.40</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-1" date="1750593600">- Update to 0.26
  - cidrvalidate() should accept IPv6 addresses with one uncompressed 0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1755086400">- Update to 0.27
  - cidrvalidate() bug fix (GH#9)</changelog>
</package>
<package pkgid="56f7b9c2bc42ddfc6870a1c48ab9038ea8b1a6f56952c2636663408740131ebf" name="perl-Net-CIDR-Lite" arch="noarch">
  <version epoch="0" ver="0.24" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1775908800">- Update to 0.23
  - Security: Fix IPv4 mapped IPv6 packed length (CVE-2026-40199)
  - Security: Reject invalid uncompressed IPv6 (CVE-2026-40198)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1778500800">- Update to 0.24
  - Reject Unicode digits and trailing newlines in parser inputs
    (CVE-2026-45190)
  - Reject zero-padded CIDR masks (CVE-2026-45191)</changelog>
</package>
<package pkgid="1ad2f451e8405b05428aa8afb93fdf6fdb862c89cefb3eb51c3ff682f31fb711" name="perl-Net-DNS" arch="noarch">
  <version epoch="0" ver="1.54" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.49-1.0.cf" date="1735300800">- Update to 1.49
  - Add DSYNC package for Generalized Notification
  - EDNS: Add support for ZONEVERSION option
  - Fix "Use of uninitialized value" errors when using TCP connections
    (CPAN RT#157700)
  - Fix Net::DNS::Nameserver: SOA not present in NODATA response
    (CPAN RT#157669)
  - Fix EDNS option structure does not match JSON from $packet-&gt;edns-&gt;print
    (CPAN RT#157195)
  - Fix user-hostile return value from SVCB key methods (CPAN RT#157043)
- Stop running tests verbosely</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.49-2.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.50-1.0.cf" date="1740139200">- Update to 1.50
  - Minor code improvements in Resolver::Base
  - Add RESINFO package for resolver information
  - Documentation revision and reformatting
  - IPv4 loopback may be disabled in IPv6-only configuration (CPAN RT#158714)
  - Fix use of uninitialized value in _send_udp (CPAN RT#158706)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.0.cf" date="1751889600">- Update to 1.51
  - Resync with IANA DNS Parameters registry
  - Add prototype DELEG RR package
  - Minor code and documentation improvements
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.1.cf" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-1.0.cf" date="1753876800">- Update to 1.52
  - Refactor SVCB to avoid internal use of generic keyNN
  - DELEG documentation and code improvement
  - Fix bug in resolver base selection on non-Unix/Linux platforms
    (CPAN RT#168433)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1756814400">- Update to 1.53
  - Suppress autovivified undefined $rr-&gt;{class} and $rr-&gt;{ttl}
  - Rework test scripts for SVCB and DELEG</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-2.0.cf" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1768824001">- Update to 1.54
  - Resync with IANA DNS parameters registry
  - Resync with IANA DNSSEC algorithms registry
  - Implement DELEGI as derived subtype of DELEG RR
  - Backport DELEG parser to SVCB</changelog>
</package>
<package pkgid="f6f22f8d94ad195e9d6a2536ab75bd6ff171aac75446ae95a621ead4c85bee3a" name="perl-Net-DNS-Nameserver" arch="noarch">
  <version epoch="0" ver="1.54" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.49-1.0.cf" date="1735300800">- Update to 1.49
  - Add DSYNC package for Generalized Notification
  - EDNS: Add support for ZONEVERSION option
  - Fix "Use of uninitialized value" errors when using TCP connections
    (CPAN RT#157700)
  - Fix Net::DNS::Nameserver: SOA not present in NODATA response
    (CPAN RT#157669)
  - Fix EDNS option structure does not match JSON from $packet-&gt;edns-&gt;print
    (CPAN RT#157195)
  - Fix user-hostile return value from SVCB key methods (CPAN RT#157043)
- Stop running tests verbosely</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.49-2.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.50-1.0.cf" date="1740139200">- Update to 1.50
  - Minor code improvements in Resolver::Base
  - Add RESINFO package for resolver information
  - Documentation revision and reformatting
  - IPv4 loopback may be disabled in IPv6-only configuration (CPAN RT#158714)
  - Fix use of uninitialized value in _send_udp (CPAN RT#158706)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.0.cf" date="1751889600">- Update to 1.51
  - Resync with IANA DNS Parameters registry
  - Add prototype DELEG RR package
  - Minor code and documentation improvements
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.1.cf" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-1.0.cf" date="1753876800">- Update to 1.52
  - Refactor SVCB to avoid internal use of generic keyNN
  - DELEG documentation and code improvement
  - Fix bug in resolver base selection on non-Unix/Linux platforms
    (CPAN RT#168433)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1756814400">- Update to 1.53
  - Suppress autovivified undefined $rr-&gt;{class} and $rr-&gt;{ttl}
  - Rework test scripts for SVCB and DELEG</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-2.0.cf" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1768824001">- Update to 1.54
  - Resync with IANA DNS parameters registry
  - Resync with IANA DNSSEC algorithms registry
  - Implement DELEGI as derived subtype of DELEG RR
  - Backport DELEG parser to SVCB</changelog>
</package>
<package pkgid="070bb078c443438b741874cef4d0d8f982a4998914c19560a93b35f532fd8675" name="perl-Net-DNS-Resolver-Programmable" arch="noarch">
  <version epoch="0" ver="0.009" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-17" date="1680091200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="61ee68de15bc9ebc48afe2ce7dc29ef5ec4ef09af9127755e0a05c4e78703e64" name="perl-Net-Daemon" arch="noarch">
  <version epoch="0" ver="0.52" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1774267200">- Update to 0.51
  Bug fixes:
  - Fix Socket::INADDR_ANY constant for unix socket client auth (GH#1, GH#27)
  - Fix post_clone() hook - Clone() never called new(), so the
    $self-&gt;{'parent'} check in new() was dead code; added post_clone() method
    that Clone() calls after creating the new object (GH#2, GH#26)
  - Open logfile when filename string is provided via --logfile; OpenLog()
    previously returned the logfile value as-is when it was a defined string,
    causing Log() to fall through to STDERR (CPAN RT#76133, GH#3, GH#25)
  - Reap forked child processes to prevent zombie accumulation; SigChildHandler
    now uses a proper waitpid reaper instead of returning 'IGNORE', fixing
    zombie buildup on Windows/Strawberry Perl after ~64 connections
    (GH#5, GH#23)
  - Fix ReadConfigFile implementation traversing @INC (CPAN RT#123213, GH#8)
  - Detach threads in ChildFunc to prevent memory leaks; thread objects were
    never joined or detached, causing leftover thread mappings to accumulate
    (GH#12, GH#22)
  - Only load threads if forks hasn't already been loaded and threads exists
    (GH#16)
  Improvements:
  - Add post_clone() hook for per-connection initialization; sub-classes can
    override to perform per-connection setup (GH#2, GH#26)
  - Add --listen option to Options() to allow overriding the default listen
    backlog of 10 (GH#4, GH#24)
  Maintenance:
  - Modernize Makefile.PL metadata: add LICENSE, MIN_PERL_VERSION,
    TEST_REQUIRES, upgrade META_MERGE to meta-spec v2, update GitHub URLs
    (GH#28)
  - Modernize CI workflow: upgrade actions/checkout to v4, use
    perldocker/perl-tester images, dynamic Perl version matrix covering 5.8
    through devel, add disttest job (GH#29)
  - Disable t/ithreadm.t for Windows (GH#19)
  - Improve skip messages and detection of ithreads/forks in tests
  - Convert t/base.t to Test::More
  - Apply consistent perltidy formatting
  - Add strict/warnings, replace 'use vars' with 'our'
  - Remove perl 4-ish subroutine calls
- Use %{make_build} and %{make_install}
- Note that Net::Daemon::Test is GPL-2.0-or-later</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1775476800">- Update to 0.52
  Bug fixes:
  - Fix dead $RegExpLock that was never acquired in ithreads mode; the lock
    variable existed but was never actually locked before regexp compilation,
    leaving ithreads unprotected; also fix share() call to pass explicit ref
    for runtime-loaded prototype (GH#33)
  - Fix ithreads auto-detection to gate on Perl 5.10+ and exclude Windows; on
    Perl 5.8.x threads::shared is never loaded, making lock() a no-op; on
    Windows, DuplicateHandle() corrupts Winsock sockets - WSADuplicateSocket()
    is required instead (GH#19, GH#30, GH#34, GH#35, GH#50)
  - Correct $eventId hash key typo in Log.pm that prevented event IDs from
    being logged (GH#36)
  - Fix Done() call in test server Loop method - was called without arguments,
    preventing proper server shutdown (GH#38)
  - Clean up stale test artifacts (log, ndtest.cnt) (GH#40)
  - Harden ReadConfigFile against $@ contamination and $! errors (GH#44)
  - Skip pidfile write when pidfile option is not set, preventing spurious
    empty pidfile creation (GH#45)
  - Close cloned listening socket in ithreads handler threads; Perl ithreads
    dup every open handle into new threads; on Windows closing these at thread
    exit invalidated the parent's handle; also re-add Windows skip with
    root-cause documentation (GH#19, GH#30, GH#46)
  - Address CPAN testers failures in t/reap.t and t/fork.t (GH#48)
  - Skip ithread-detach.t on Perl &lt; 5.10 (GH#49)
  - Verify privilege drop succeeded in Bind(); assigning to $&gt;/$) silently
    fails without permission - the daemon would continue running as root (GH#51)
  - Use POSIX::setuid/setgid for permanent privilege drop in Bind(); the
    previous $&lt; = ($&gt; = $user) left saved-set-user-ID as root, allowing a
    compromised process to regain privileges (GH#55)
  Improvements:
  - Modernize open() calls to 3-arg form with lexical filehandles throughout
    the codebase (GH#41)
  Maintenance:
  - Fix POD typos and remove outdated alpha warning (GH#37)
  - Fix stale --mode=threads references and config example syntax in
    documentation (GH#39)
  - Update ancient FSF address in Net::Daemon::Test copyright (GH#35)
  - Convert server tests from raw TAP to Test::More (GH#42)
  - Convert ithreads tests to Test::More and fix Test.pm fd leak (GH#43)
  - Convert remaining tests (loop.t, loop-child.t, unix_clients.t, forkm.t) to
    Test::More (GH#47)</changelog>
</package>
<package pkgid="cfc455abbe34b616a587a728e4a7a182aabbca5d963047d9427d8f9252307d6a" name="perl-Net-FTPSSL" arch="noarch">
  <version epoch="0" ver="0.42" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.42-2" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f652ef99d686fa8c8fc07bf10922ba6bbf4980a744a3f20c1d91bcaf7b8c325c" name="perl-Net-HTTPTunnel" arch="noarch">
  <version epoch="0" ver="0.51" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-4" date="1689681600">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="1a6dd9c5add3e232036b7f82becce53a786ee8f90a1e5d65744646c5adbc49e0" name="perl-Net-IDN-Encode" arch="x86_64">
  <version epoch="0" ver="2.500" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-13" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-17" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-21" date="1714737600">- Adapt to perl-5.38.0 and stricter GCC (rhbz#2241714)</changelog>
</package>
<package pkgid="7508fb9e7a2c201ea9dafcfed529af2da872b35405299efdb4d832aaa5a45963" name="perl-Net-IP" arch="noarch">
  <version epoch="0" ver="1.26" rel="30.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-30" date="1683288000">- Use SPDX-format license tag
- Switch upstream from search.cpan,org to metacpan.org
- Avoid use of deprecated patch syntax
- Use %license unconditionally
- Package README file</changelog>
</package>
<package pkgid="a196e7003e751e62267ac663da6fe11a06295f511eed18a29b51ae54d94da345" name="perl-Net-LibIDN" arch="x86_64">
  <version epoch="0" ver="0.12" rel="46.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-43" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-46" date="1689163200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="ddc0675f47afe147712034324c0ca4d0857d26eb20e63369c2a2b1fd2a3d12e2" name="perl-Net-SMTP-SSL" arch="noarch">
  <version epoch="0" ver="1.04" rel="20.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-20" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="11164c4f5ba483e39529522b7d3213e913824a468548e85568462b9733f93248" name="perl-Net-SMTP-TLS" arch="noarch">
  <version epoch="0" ver="0.12" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-2" date="1689768000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b136223fe4142183db9e65de90a12dfb9820fad0479345d861f9ebc9932f12e2" name="perl-Net-SSLeay" arch="x86_64">
  <version epoch="0" ver="1.96" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-4.0.cf" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-5.0.cf" date="1720526400">- BR: openssl-devel-engine on Fedora 41 onwards, at least for now, as the
  build fails in the absence of &lt;openssl/engine.h&gt; (rhbz#2295331)
  (https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-7.0.cf" date="1721736000">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-9.0.cf" date="1742990400">- Fix for test suite compatibility with OpenSSL 3.4
  (https://github.com/radiator-software/p5-net-ssleay/pull/514)
- Drop support for old distributions prior to F-28, EL-8
  - Drop F-26 compatibility patch
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-10.0.cf" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.96-1.0.cf" date="1774180800">- Update to 1.96
  - Skip NPN tests when NPN is disabled in OpenSSL instead of assuming NPN is
    always enabled
  - Update GitHub Actions CI workflow; a number of test jobs were broken
    because some GitHub runners were discontinued, changes in QEMU setup,
    changes in Cygwin, etc.
  - Adjust test 32_x509_get_cert_info.t to match formatting changes in
    OpenSSL 3.4.0 and 3.4.1
  - OpenSSL 3.9.0 and later remove EVP_add_digest()
  - Increase timeout in 62_threads-ctx_new-deadlock.t to allow the test to pass
    on very slow platforms
  - Add missing documentation for STACK_OF() free functions sk_X509_free and
    sk_X509_INFO_free
  - Add $prefx/lib/64 to lib paths in Makefile.PL for Illumos
  - Support vendor-supplied OpenSSL 3.x on VMS and update %ENV modification in
    test 10_rand.t to work on VMS
  - Compiler -D switches Makefile.PL sets are no longer added to the MakeMaker
    CCFLAG attribute because of portability reasons; the switches are now
    passed either via WriteMakefile() or appending them to the
    'perl Makefile.PL ...' DEFINE argument
  - Update GitHub Actions CI testing:
    - Perl on Ubuntu 24.04: Add Perl 5.38, 5.40 and 5.42, add OpenSSL 3.3, 3.4
      and 3.5 minor releases, add LibreSSL 3.9, 4.0 and 4.1 release branches
    - Alpine Linux: Remove 3.15, 3.16 and 3.17; Add 3.19, 3.20, 3.21 and 3.22
    - Freebsd: Add 14.3 and replace 13.2 with 13.5
    - OpenBSD: Add 7.6 and 7.7. Remove 7.2 and 7.3
    - NetBSD: Add 10.1 and replace 9.3 with 9.4
  - Update test 62_threads-ctx_new-deadlock.t to work with LibreSSL 4.1.0
  - Support SSL_CTX_set1_sigalgs_list and SSL_CTX_set1_client_sigalgs_list
  - Support SSL_set1_sigalgs_list, SSL_set1_client_sigalgs_list,
    SSL_get_sigalgs and SSL_get_shared_sigalgs, and add the function
    SSL_CTX_set_cert_cb
  - Add test file 67_sigalgs.t for the sigalgs functions</changelog>
</package>
<package pkgid="3b3543f48a06959ec9df22748b0a439153a752a7f1fe500665f28eeac0a2f5cd" name="perl-Net-Server" arch="noarch">
  <version epoch="0" ver="2.018" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.014-6" date="1726574400">- Only initialize existing Net::SSLeay methods
  - https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
  - https://rt.cpan.org/Public/Bug/Display.html?id=154333
  - https://github.com/rhandom/perl-net-server/pull/38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.015-1" date="1769083200">- Update to 2.015
  - Compatibility fix to work with MakeMaker prior to 6.58 (GH#35)
  - Update META info from dzil (CPAN RT#94977)
  - Compatibility fix to work with Net::SSLeay prior to 1.34 (GH#38)
  - Multiplex fix for Perl 5.40.x (CPAN RT#172029)
  - Compatibility fix to work with Socket.pm prior to 1.93
  - Remove all bindv6only sniffing; always use setsockopt to set IPV6_V6ONLY
    flag appropriately based on {ipv}
  - Honour {ipv6_package} preference, if specified
  - Fix to work without deprecated "Socket6.pm" module (IO::Socket::IP can
    handle everything now)
  - Fix {reverse_lookups} with {udp_true}
  - Fix tests where "localhost" is not listed as IPv6 loopback
  - Add more various {ipv} and NO_IPV6 tests
  - Fix comments, wordings, messages, and POD (CPAN RT#85052)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.016-1" date="1769688000">- Update to 2.016
  - Honour platform-provided IPV6_V6ONLY value
  - Fix $xflags NIx_* logic emulation
  - Make stub honour wantarray context invocation
  - Don't require ipv6_package to run routines
  - Show correct line number if stub routine dies
  - Warn clean safe_* routines
  - Avoid "string" eval
  - Allow caller to import any Proto routine
  - Allow to import all exportable Socket macros</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.017-1" date="1770638400">- Update to 2.017
  - Address IO::Socket rudely force-importing random symbols
  - Warn-clean IO::Socket::INET6 "Subroutine redefined" spewage
  - Various patches generated with the help of Grok4 xAI
  - Various test suite framework improvements
    - Make test suites return non-zero upon failure
    - Fix IPv6 pre-check for tests
    - Timeout test server if client crashes, instead of rudely mooching on the
      listen port forever in the background
  - Warn-clean for older MakeMaker, such as 6.30
  - Fix POD errors
  - Allow static Proto methods to be imported as normal routines
  - Create Net::Server::IP compatibility wrapper module
  - Honour {ipv6_package} config preference more reliably
  - GetAddrInfoFlags compatibility patch for systems with spoofed networks on
    loopback interfaces using IO::Socket::IP
    - Now IPv4 and IPv6 finally work with OpenVZ or fake loopback or venet0 or
      even on IPv6-only machines even without public routability for that AF_*
      Address Family (these used to fail)
  - Handle special IPv6 behaviours, like OpenBSD and WinXP
  - Emulate IO::Socket::IP {V6Only} behaviour for IO:Socket::INET6
  - Fall back to IO::Socket::INET if no IPv6 module available
  - Various SSLEAY fixes:
    - Add more SSLEAY tests to help with debugging
    - Fixed errors on older Net::SSLeay &lt; 1.49
    - Fix tied SYSREAD $scalar input syntax instead of only ref \$scalar
      sysread FILEHANDLE,SCALAR,LENGTH,OFFSET
    - Fix SSLEAY-&gt;read_until logic
    - Fixed some errors with newer Net::SSLeay &amp; OpenSSL 3.x:
      167772454. error:0A000126:SSL routines::unexpected eof while reading
      167772567. error:0A000197:SSL routines::shutdown while in init
  - Get test suite to pass cleanly on all variations tested:
    - Linux Kernel: 2.6.18, 3.10.0, 4.18.0, 5.14.0, 6.2.16, 6.8.0
    - Flavour: Ubuntu 24.04, Debian 12, Fedora 42, RHEL5/6/7/8/9
    - Windows: Cygwin, MinGW64, WinXP, Win7, Win10, Win11, GitBash
    - Other OS: OpenBSD, Darwin, MacOSX, FreeBSD
    - OpenSSL 0.9.8e, 1.0.1e, 1.0.2k, 1.1.1k, 3.2.2, 3.5.1
    - Hypervisor: OpenVZ, KVM, VirtualBox, VirtIO, VMWare, Docker
    - Dual-Stack Networks: IPv4, IPv6, IPv*, IPv4-Only, IPv6-Only
    - Perl: 5.8.8 5.10.1 5.16.3 5.26.3 5.32.1 5.34.1 5.36.0 5.38.2 5.40.2
    - Net::SSLeay: 1.30, 1.35, 1.55, 1.88, 1.94
    - Socket: 1.78, 1.82, 1.97, 1.99, 2.010, 2.027, 2.031, 2.040
    - Socket6: None, 0.19, 0.23, 0.28, 0.29
    - IO::Socket::IP: None, 0.21, 0.38, 0.41
    - IO::Socket::INET6: None 2.51 2.56 2.66 2.67 2.69 2.72 2.73</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.018-1" date="1771416000">- Update to 2.018
  - Add more ipv6_package tests
  - Fix t/Options.t to expect 0.0.0.0 on IPv4-only systems
  - Get rid of requires_ipv6() sniffing
  - Make Proto-&gt;object always return a single object
  - Honour {ipv6_package} config preference even for IPv*</changelog>
</package>
<package pkgid="39cbd5b97eae78fa4cecbda6d064f7e4920e5bcca8b168b7304862e5d8ef5428" name="perl-Net-Telnet" arch="noarch">
  <version epoch="0" ver="3.05" rel="6.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.05-6" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f23110d5a802bc42f6431f571244a880f058a1c52b32631f71adac27413a23de" name="perl-NetAddr-IP" arch="x86_64">
  <version epoch="0" ver="4.079" rel="26.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-20" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-23" date="1686139200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-24" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-26" date="1705233600">- Socket6 will be dropped by Fedora from Fedora 40 onwards</changelog>
</package>
<package pkgid="87c09a8c0f100dc49b8f4dd6a23cca9c993ec68ee6ffbcedbe7801d0353092a9" name="perl-Number-Compare" arch="noarch">
  <version epoch="0" ver="0.03" rel="35.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-35" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b2e2e6c0c7fded0c59fd5d6a4ccabb239c9bcfaa6dd9cb751c7272c5c1456484" name="perl-Object-HashBase" arch="noarch">
  <version epoch="0" ver="0.016" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1724846400">- Update to 0.014
  - Add extra init() functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1725278400">- Update to 0.015
  - Fix double-import bug</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-3" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-4" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.016-1" date="1778587200">- Update to 0.016
  - Add [PruneCruft] to dist.ini so build artifacts (blib/, pm_to_blib,
    MYMETA.*) no longer leak into release tarballs
  - Add '@Class::Name' parent prefix to import (shortcut for `use parent`)
  - Add '&amp;Role::Name' role prefix to import (compose Role::Tiny role)
  - Skip 'new' injection when Object::HashBase is imported into a Role::Tiny
    role
  - Role::Tiny is a soft requirement, loaded only when '&amp;' prefix used
  - '&amp;' prefix requires Perl 5.10+</changelog>
</package>
<package pkgid="a2e33ec0752ed6c3523188818cad1cba7613a33da7c92271b8d377e3f59fa408" name="perl-Object-HashBase-tools" arch="noarch">
  <version epoch="0" ver="0.016" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1724846400">- Update to 0.014
  - Add extra init() functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1725278400">- Update to 0.015
  - Fix double-import bug</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-3" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-4" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.016-1" date="1778587200">- Update to 0.016
  - Add [PruneCruft] to dist.ini so build artifacts (blib/, pm_to_blib,
    MYMETA.*) no longer leak into release tarballs
  - Add '@Class::Name' parent prefix to import (shortcut for `use parent`)
  - Add '&amp;Role::Name' role prefix to import (compose Role::Tiny role)
  - Skip 'new' injection when Object::HashBase is imported into a Role::Tiny
    role
  - Role::Tiny is a soft requirement, loaded only when '&amp;' prefix used
  - '&amp;' prefix requires Perl 5.10+</changelog>
</package>
<package pkgid="3b914c4b44a4451d18d0fe913c645ba0b5f01df033abf434b5f01e145ec11b7e" name="perl-Object-ID" arch="noarch">
  <version epoch="0" ver="0.1.2" rel="28.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.2-28" date="1683288000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1afd2db5f1d91e847331b3dc8a0489a6f04c3b76d19a47d3537a7da3a592050a" name="perl-PAR-Dist" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1683460800">- Update to 0.52
  - Change bug tracker to GitHub issues
  - Quote all version numbers in META.yml files in test *.par files
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1718798400">- Update to 0.53
  - PAR::Dist::blib_to_par quoted the version number of the dist when making
    the PAR file (GH#2)
  - Quote value of "version" in generated META.yml (if there is no (MY)META.yml)</changelog>
</package>
<package pkgid="716d6f546b0e1c9b96859293a1aab98830468554a6ccb58584e671cb07046c6d" name="perl-PPI" arch="noarch">
  <version epoch="0" ver="1.279" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.276-3" date="1683547200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.277-1" date="1695384000">- Update to 1.277
  - Parse prototypes as literal quotes: enables parens and newlines in protos
  - Fix false positive detection of labels (GH#289)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.278-1" date="1710158400">- Update to 1.278
  - Add support for new octal number syntax (GH#295)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.279-1" date="1724414400">- Update to 1.279
  - Implemented a cache to speed up sibling iteration (GH#287)</changelog>
</package>
<package pkgid="a7105f0ba431086794ef1c531dead72720d978582e86fc5ee697f8c4b8747b19" name="perl-PPIx-QuoteLike" arch="noarch">
  <version epoch="0" ver="0.023" rel="3.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1634904000">- Update to 0.018
  - Argument postderef is now fatal
  - Correct generation of 'provides' metadata
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.019-1" date="1637064000">- Update to 0.019
  - Add CONTRIBUTING file
  - Try to quell weird Win32 test failures that seem to occur only in tests
    where I am using 'use open' to put the standard handles into UTF-8 mode;
    the fix (hopefully) is to do this to the Test::Harness handles at run time
    instead of to the standard handles at compile time</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.020-1" date="1647518400">- Update to 0.020
  - Correct and optimize the computation of logical column position (the one
    that takes account of tabs)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.021-1" date="1648987200">- Update to 0.021
  - Recognize postfix deref in '@{[ ... ]}' for determining minimum Perl
    version; this recognizes all forms of postfix dereference, including -&gt;%*,
    -&gt;&amp;*, and -&gt;** (NOTE: for now, this remains a
    PPIx::QuoteLike::Token::Interpolation)
  - Require PPI 1.238 for postfix deref support, and prune code that dealt with
    PPI's old behaviour
  - Postfix %*, &amp;*, and ** do not interpolate
  - Correct perl_version_introduced() for interpolated postfix scalar deref</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.022-1" date="1650110400">- Update to 0.022
  - Remove 'postderef' argument to new(); postfix dereference is always
    recognized</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-1" date="1663329600">- Update to 0.023
  - Update discouragement notice for variables(), and add a TODO in
    t/variables.t for why
  - Correct normalization of ${^FOO} for PPI: if the caret is present the
    braces are not removed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-2" date="1663416000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-3" date="1689681600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="c6f63f69924e23359a58897cf5b35620f2563614494a3e96da3fa76b5bde5f29" name="perl-PPIx-Regexp" arch="noarch">
  <version epoch="0" ver="0.091" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.088-4" date="1714737600">- Add workaround for "Subroutine name is a homonym for builtin keyword class"
  in Critic test</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.089-1" date="1747656000">- Update to 0.089
  - The /x modifier should not affect the parse of the replacement string in a
    substitution operator, i.e. the '#' in s/x/#/x does NOT introduce a comment
  - Correct POD link in PPIx::Regexp::Token::Literal
  - Annotate sub class(), since with Perl 5.38 it is a built-in
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.090-1" date="1758542400">- Update to 0.090
  - Explain s///eee... more than 2 'e' modifiers are permitted, and cause the
    result of the expression to be eval-ed n-1 times, where n is the number of
    'e' modifiers
  - Fix typo in comment
- Package new SECURITY policy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.091-1" date="1759924800">- Update to 0.091
  - Avoid "Possible attempt to escape whitespace" warning, which is emitted in
    perl-5.43.2 and forward
  - Revise internal usage of 'PPI::Document'</changelog>
</package>
<package pkgid="41050af45abc61ba1cc50d144433377c139f7dbd5a8c59744b899eed0c9e2cdc" name="perl-PPIx-Utilities" arch="noarch">
  <version epoch="0" ver="1.001000" rel="48.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001000-48" date="1683547200">- Use SPDX-format license tag
- Extra tests no longer include spell checks
- Use %license unconditionally</changelog>
</package>
<package pkgid="894b1486020db2afe87ba48ed33c6b20d101d2c0404bfa53b0482b8d93e64b3c" name="perl-PPIx-Utils" arch="noarch">
  <version epoch="0" ver="0.004" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-9" date="1688731200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-1" date="1746360000">- Update to 0.004
  - Update LICENSE text
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="c6cd50c84fa3bb041551491a99741a4e26cc8b0dbff082a58511bf5199a32133" name="perl-Package-Anon" arch="x86_64">
  <version epoch="0" ver="0.05" rel="34.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-29" date="1621771200">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-32" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-34" date="1683547200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="23ddaefcb01c00a3f336a39c259b11de5bea2fff1082bbecf812a830edf9e842" name="perl-Package-Constants" arch="noarch">
  <version epoch="1" ver="0.06" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.06-27" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="e7cf05776c3c48fd50c89e576034d748fc4241c38eab153c56d25de5995d3228" name="perl-Package-DeprecationManager" arch="noarch">
  <version epoch="0" ver="0.18" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-1" date="1676894400">- Update to 0.18
  - Use Sub::Util instead of Sub::Name, which is part of Scalar-List-Utils,
    which itself is already a dependency (GH#3)
- Use SPDX-format license tag
- Use %license unconditionally
- Package CODE_OF_CONDUCT.md
- Drop support for building with List::Util &lt; 1.33 since we require Sub::Util,
  which became available at the same time as List::Util 1.33</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="003220707941521d8f1a2c10c6f04a6b79cd31b18a91d9708624887e7e5697f5" name="perl-Package-Generator" arch="noarch">
  <version epoch="0" ver="1.106" rel="28.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.106-28" date="1680264000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f7710494a9f4914fa8ae53828b4e7dacccb0c5981ef92c1081f96b37a6ce8be2" name="perl-Package-Stash" arch="noarch">
  <version epoch="0" ver="0.40" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.40-1" date="1645444800">- Update to 0.40
  - Update bundled version of ExtUtils::HasCompiler, for new new Apple include
    paths
- Drop support for EOL distributions prior to EL-7:
  - BR: optional test dependency perl(Package::Anon) unconditionally
  - Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.40-4" date="1683547200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4183f23e3c4f161d97fcfce0530372e41c3b331dd1160d977d2edf336abcb565" name="perl-Package-Stash-XS" arch="x86_64">
  <version epoch="0" ver="0.30" rel="3.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-10" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-13" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.30-1" date="1655121600">- Update to 0.30
  - Miscellaneous tooling updates
  - Fixed redundant argument in sprintf in tests (CPAN RT#143205)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.30-3" date="1683547200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0c85f373cc28ae4f8cd7053c813e15d7de36f76a34d999f4d7f3a7160d627ff1" name="perl-PadWalker" arch="x86_64">
  <version epoch="0" ver="2.5" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-6" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-8" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7bd326dfd2cfd13af2af4a812ce0d9014a5103eb5cbb08a79bfd5db8e8fcc20f" name="perl-Parallel-Runner" arch="noarch">
  <version epoch="0" ver="0.014" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-30" date="1681128000">- Use SPDX-format license tag
- Use https:// source URL
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1714132800">- Update to 0.014
  - Move to Dist::Zilla
  - Switch to Test2::V0</changelog>
</package>
<package pkgid="2393bfb2ec4c00e39cb1af5eb7c36457f123aaaf0927f5bb9c22ed59f0a7238e" name="perl-Params-Check" arch="noarch">
  <version epoch="1" ver="0.38" rel="491.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.38-491" date="1684843200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c07bf59454822c22cf70920014f2304e61d919ea92ecb9a5bdb241ae39fbca18" name="perl-Params-Classify" arch="x86_64">
  <version epoch="0" ver="0.015" rel="18.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-13" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-16" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-18" date="1681214400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2722c2c0426f19604ebd6b01559e43c85291e2ad439a82765a71b42a48859415" name="perl-Params-Coerce" arch="noarch">
  <version epoch="0" ver="0.15" rel="9.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-9" date="1679918400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="db8ff0ea489b2f1703d5762c186ce7c478d3a2f5bc9bb7311d6e9a1290315404" name="perl-Params-Util" arch="x86_64">
  <version epoch="0" ver="1.102" rel="11.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.102-7" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.102-11" date="1689076800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="592aef87d9d482c79d9482f4beb9ed8138b9f2c3bc2569c08f4529d51929110b" name="perl-Params-Validate" arch="x86_64">
  <version epoch="0" ver="1.31" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-3" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-6" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1666526400">- Update to 1.31
  - Include Devel::PPPort 3.68 for compatibility with Perls ≤ 5.8.5 (GH#25)
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="138ded1009b83c5236a0b6b06a8a15a08d7dcbcac45c0304278667b4466a76cb" name="perl-Params-ValidationCompiler" arch="noarch">
  <version epoch="0" ver="0.31" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-1" date="1673179200">- Update to 0.31
  - Require Class::XSAccessor 1.17+ when trying to load it; earlier versions
    cause test failures (GH#27)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="d8e00e158eb83eb3ab1e3fec6c04f8a6184b73637d0fc2ded163b29244add181" name="perl-Parse-Distname" arch="noarch">
  <version epoch="0" ver="0.05" rel="5.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-1" date="1649419200">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-2" date="1651147200">- Incorporate feedback from package review (#2073377)
  - perl(strict) is a run-time dependency, not just a test dependency
  - Don't package the tests as documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-5" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8ae786e056733893941257f268e3ba02ea7f9fdf8300c89977e5502b2da29bbd" name="perl-Parse-RecDescent" arch="noarch">
  <version epoch="0" ver="1.967015" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.967015-19" date="1689681600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with ExtUtils::MakeMaker &lt; 6.58</changelog>
</package>
<package pkgid="2f7bf401c5dac131bacbd6f0d9ba522a8a95ab643d1920746b536fe0b2d1b42b" name="perl-Path-Class" arch="noarch">
  <version epoch="0" ver="0.37" rel="24.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-24" date="1683633600">- Use SPDX-format license tag
- Switch to ExtUtils::MakeMaker flow
- Use %license unconditionally</changelog>
</package>
<package pkgid="ff2e2a14085ac477dfd231889cdef8ad0aa432e08e2eb215f9013f975e44f2a1" name="perl-Path-FindDev" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5.3-19" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4bf7c359142873e206557967fd912ffddc3a608da4f130612ca3664186fb5f51" name="perl-Path-IsDev" arch="noarch">
  <version epoch="0" ver="1.001003" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001003-19" date="1688990400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="652c0489ca1518b2d9839ce8be4a9a35c67b76eb7808f65b3ab9f71580ac8511" name="perl-Path-Tiny" arch="noarch">
  <version epoch="0" ver="0.150" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.146-1" date="1715342400">- Update to 0.146
  - Improved error message spewing to a file in a non-existent directory</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.148-1" date="1742212800">- Update to 0.148
  - Invalid arguments when hash references are expected throw exceptions
  - Fixed problems with exceptions
  - Cross-referenced slurp and lines in documentation
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.150-1" date="1753099200">- Update to 0.150
  - Released with newest Dist::Zilla to avoid xattrs in the tarball</changelog>
</package>
<package pkgid="97ef6b3f8e749a0500ad674b9255b8e2f73db5becede8e4ecbccb63e8041fbde" name="perl-Perl-Critic" arch="noarch">
  <version epoch="0" ver="1.156" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-2" date="1688990400">- Use SPDX-format license tag for perl-Test-Perl-Critic-Policy sub-package
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-4" date="1695643200">- Fix for Perl::Critic::Policy::Subroutines::RequireArgUnpacking with PPI 1.277
  (GH#1048)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-1" date="1697544000">- Update to 1.152 (rhbz#2244582)
  - Fix a test failure for Subroutines::RequireArgUnpacking (GH#1048)
  - Fix a test failure in t/06_violation.t on Perl 5.39.1 or above (GH#1037)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-3" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-4" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-1" date="1729512000">- Update to 1.154 (rhbz#2320114)
  Enhancements
  - ProhibitedUnusedCapture now recognizes %+, %-, %{^CAPTURE} and
    %LAST_PAREN_MATCH (GH#1065)
  - Fixed a deprecation warning in the extras/perlcritic.el Emacs script
    (GH#1067)
  - RequireExplicitPackage now accepts a use VERSION as the first line
    (GH#1070)
  Fixes
  - Fix some false positives for function calls as a hash index (GH#1071)
  Documentation
  - Clarify package_exemptions rules (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-2" date="1729512001">- Require ExtUtils::Manifest for Perl::Critic::TestUtils::bundled_policy_names()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-1" date="1729684800">- Update to 1.156 (rhbz#2321227)
  - Subroutines::ProhibitManyArgs no longer gets confused by underscores in
    variable names (GH#1027)</changelog>
</package>
<package pkgid="4208c0f5928e14557be2443c14f5e587ad035775c65e44f8e3a07b53ff5f9f2b" name="perl-Perl-Critic-Deprecated" arch="noarch">
  <version epoch="0" ver="1.119" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-22" date="1641038400">- Dictionary aspell-en no longer needed for spelling check
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-27" date="1683720000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- No longer need to set LANG for spell check</changelog>
</package>
<package pkgid="0f1016b10f716f91df26d5549208d01d8f6de48224327ea0f8769deb69299718" name="perl-Perl-Critic-Lax" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1672574400">- Update to 0.014
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1689768000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="61854ba220c011459cf0d24e669f9ac9e10191d45b4c8daac4bf4e3c67fea16a" name="perl-Perl-Critic-More" arch="noarch">
  <version epoch="0" ver="1.003" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.003-27" date="1688990400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="2d7949e25719a9a6914d69e526ed032f04eb7864c9d1a50d27905395ff5157b1" name="perl-Perl-Critic-Pulp" arch="noarch">
  <version epoch="0" ver="100" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 100-1" date="1760356800">- Update to 100
  - ProhibitUnknownBackslash allow \F new in Perl 5.16
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="e98605e856c11b41e977c503dd1d888934d4d47e0df15cf6c2dd4887fccc13c5" name="perl-Perl-Destruct-Level" arch="x86_64">
  <version epoch="0" ver="0.02" rel="35.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-30" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-33" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-35" date="1683720000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="74354f543ff375420bf66454900533496e68d385b478b793cdeca164d7d58de0" name="perl-Perl-MinimumVersion" arch="noarch">
  <version epoch="0" ver="1.44" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.40-9" date="1688990400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1" date="1746360000">- Update to 1.44
  - Remove detection for Perl versions older than 5.008, which means that 5.006
    is now the minimum required version that will be reported (GH#7)
  - Fix formatting of the summary printed by the perlver script (GH#14)
  - Recognize the minimum required version for the tr///r flag (GH#25) and
    indented heredocs (GH#27)
  - Recognize the minimum required Perl versions for:
    - The "use re '/flags'" pragma (GH#29)
    - Postfix dereferences (GH#30)
    - The &lt;&lt;&gt;&gt; operator (GH#31)
  - Update LICENSE text
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="1ae13c1fa778db75ad3159732245d10d931094625d7af5017fb90743c8a20448" name="perl-Perl-OSType" arch="noarch">
  <version epoch="0" ver="1.010" rel="491.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.010-491" date="1683720000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="eecb87798049f74f873d8464385cacac9afdbe453ed2b90db5caca92bbc13ad2" name="perl-Perl-PrereqScanner-NotQuiteLite" arch="noarch">
  <version epoch="0" ver="0.9918" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.9918-1" date="1775390400">- Update to 0.9918</changelog>
</package>
<package pkgid="6123f84a209b67c48874d223975ba661da6a7466e2b6e658e55a7c8b5e34cf8d" name="perl-Perl-Tidy" arch="noarch">
  <version epoch="0" ver="20260204" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250105-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250214-1" date="1739448000">- Update to 20250214 (see CHANGES.md for details) (rhbz#2345575)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250311-1" date="1741780800">- Update to 20250311 (see CHANGES.md for details) (rhbz#2351446)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250616-1" date="1750075200">- Update to 20250616 (see CHANGES.md for details)
- Use %{make_build} and %{make_install}
- Drop workaround for issue with EL-7 dependency generator</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250711-1" date="1752494400">- Update to 20250711 (see CHANGES.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250711-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250912-1" date="1757764800">- Update to 20250912 (see CHANGES.md for details) (rhbz#2394876)
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260109-1" date="1767873600">- Update to 20260109 (see CHANGES.md for details) (rhbz#2428067)
- Change Pod::Html dependency to Pod::Simple::XHTML, which is now the preferred
  back-end option for HTML generation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260109-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260204-1" date="1770120000">- Update to 20260204 (see CHANGES.md for details) (rhbz#2436356)</changelog>
</package>
<package pkgid="043dd31be2c141dc102609839b62bb919f5483a643d2c69833f89d44551cd36b" name="perl-Perl6-Caller" arch="noarch">
  <version epoch="0" ver="0.100" rel="28.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100-28" date="1683806400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="71a475bacd1efe5d924d07fa301856bcb86de3a249e3b79fc3269f76ffcfdb16" name="perl-Perl6-Junction" arch="noarch">
  <version epoch="0" ver="1.60000" rel="28.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60000-28" date="1683806400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b5dc28155a71ba56a26f579c585d9cc38f65fb1117ded953d15ec0710e76418e" name="perl-Perl6-Slurp" arch="noarch">
  <version epoch="0" ver="0.051005" rel="28.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.051005-28" date="1683806400">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="27ac0c261318f3d825c4b357129fdcdb5bc712fff6cfd1269155657f8714d03d" name="perl-PerlIO-gzip" arch="x86_64">
  <version epoch="0" ver="0.20" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-15" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-18" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-21" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b96abbe8bdf093041188b67a993904d46c5ecdd5aebe196d40a6aad67abd4993" name="perl-PerlIO-utf8_strict" arch="x86_64">
  <version epoch="0" ver="0.010" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-3" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1641643200">- Update to 0.009
  - Mark functions that croak as noreturn</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-3" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-1" date="1666872000">- Update to 0.010
  - Re-release with updated ppport.h for 5.8.5 compatibility
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="60eb310b0422c2b85309b55545cda31c0d9734ca587b5575268561a89dfbe996" name="perl-PlRPC" arch="noarch">
  <version epoch="0" ver="0.2020" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.2020-15" date="1674561600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.2020-16" date="1695297600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="8372d9640b005113629f672ab11e1b0ff638f3c8affab24148c9878c75c7cbd3" name="perl-Pod-Coverage" arch="noarch">
  <version epoch="0" ver="0.23" rel="29.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-29" date="1688990400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="e1b826eb320a7f37d1c27c380324112531a3d40968cd890c6c3ea88a9cb140f2" name="perl-Pod-Coverage-Moose" arch="noarch">
  <version epoch="0" ver="0.08" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-23" date="1683720000">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Additional build requirements for optional tests
- Fix permissions of installed files
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1693051200">- Update to 0.08
  - Fix "Attempt to call undefined import method with arguments" error on
    perl 5.39.1
- Add patch to use US English spelling of LICENSE in pod</changelog>
</package>
<package pkgid="a1512db393a119ae40d7e3e2d93f9f424d64085b2a76ea542d2f5e9b9f8e41eb" name="perl-Pod-Coverage-TrustMe" arch="noarch">
  <version epoch="0" ver="0.002001" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002000-1" date="1708689600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002001-1" date="1743249600">- Update to 0.002001
  - Encode test output when needed to avoid wide character warnings
  - Fix tests when Pod::Coverage is installed but not Test::Pod::Coverage
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="90c5f51f64a08fe1b6dffe3a3d34feb54c8f7d9a0a19a42b1d97205daf653e56" name="perl-Pod-Coverage-TrustPod" arch="noarch">
  <version epoch="0" ver="0.100006" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100006-1" date="1672574400">- Update to 0.100006
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag
- Always assume we have rpm ≥ 4.9
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100006-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="5d67a37b391e1d955a050dd5f11ad9be24ae7c3c4dc203210b33b54915a05182" name="perl-Pod-Escapes" arch="noarch">
  <version epoch="1" ver="1.07" rel="490.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.07-490" date="1688731200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0d50ffd7d5fb05b99e76e681c42c7c598b1cf3d11dcdb649feaef4a1195aba9d" name="perl-Pod-Eventual" arch="noarch">
  <version epoch="0" ver="0.094003" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094003-1" date="1672574400">- Update to 0.094003
  - Update author contact info
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094003-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="7e2627eea93062128df16d090a8761e6468e4317697c25c8630a6bf5d3657f5c" name="perl-Pod-MinimumVersion" arch="noarch">
  <version epoch="0" ver="50" rel="37.fc29"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 50-37" date="1689768000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1977813048a113d5b968c5b9f5307ed1a42bbff71f7125002dbf37d7e125edf4" name="perl-Pod-Readme" arch="noarch">
  <version epoch="0" ver="1.2.3" rel="14.fc29"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 1.2.3-14" date="1683892800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="eb8da1d8c94f25a38bb0c75615c395399a0466dad422f4b40932461f31021133" name="perl-Pod-Simple" arch="noarch">
  <version epoch="1" ver="3.48" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.46-1" date="1747051200">- Update to 3.46
  - XHTML: =over without =item should render as a blockquote
  - Add support for underlined text U&lt;&gt; formatting
  - Make 'temp' name checking more succinct
  - GitHub: Fix and add tests
  - Makefile.PL: Add missing 'warnings' prereq
  - Add select method compatible with Pod::Select
  - Modernize htmlbat.t, corpus.t
  - Fix links, typos, acknowledgments
  - Add documentation on subclassing
  - Fix version checking
  - Fix version number
  - Use rel2abs instead of abs_path
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.47-1" date="1747396800">- Update to 3.47
  - No git-related files in MANIFEST (GH#183)
  - Rename method and field to avoid conflicts (GH#185)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.48-1" date="1775476800">- Update to 3.48
  - Add sections to manpage URLs (GH#193)
  - Better fallback when no HTML::Entities (GH#189)
  - Don't call each on an anonymous hash (GH#191)
  - Fix encoding of Unicode URL fragments (GH#194)</changelog>
</package>
<package pkgid="88d1e2fb3701efaad9174447cc2952fb51b0384349f41913432d527b6877c400" name="perl-Pod-Spell" arch="noarch">
  <version epoch="0" ver="1.27" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-1" date="1678795200">- Update to 1.26
  - Encode output as UTF-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1729512000">- Update to 1.27
  - Fix encoding of output as UTF-8
  - Fix link in Pod</changelog>
</package>
<package pkgid="668d6ba92b08c402ea425b908a86bc62281b6fa2a83ad95688a6fff4437576b6" name="perl-Pod-Strip" arch="noarch">
  <version epoch="0" ver="1.100" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100-8" date="1683892800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="927cb55a5de4ba1bce26f944e558ec5ff31f59ee99af632cfe5aab95280c82c5" name="perl-Pod-Wordlist-hanekomu" arch="noarch">
  <version epoch="0" ver="1.132680" rel="26.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.132680-26" date="1688731200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="bcd187c72c7497b8b5b999786d0789ecd7e40a7eb9cb2964032b076fe4b31d19" name="perl-Probe-Perl" arch="noarch">
  <version epoch="0" ver="0.03" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-27" date="1688644800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e0c612fbe752fa2b1657740b9c5b215355104b2b7dddc24e058921dd5d07ab6e" name="perl-Readonly" arch="noarch">
  <version epoch="0" ver="2.05" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-21" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop ancient obsoletes/provides for old tests sub-package</changelog>
</package>
<package pkgid="74a363fda5fd724b1b59f16588cff7a98abcbf910a17e48b95250491e8c7039d" name="perl-Readonly-XS" arch="x86_64">
  <version epoch="0" ver="1.05" rel="46.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-40" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-43" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-46" date="1683633600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="de91326d9abdac48b642f6a3152569a7cbd4510802894c9d67c99edb778da371" name="perl-Ref-Util" arch="noarch">
  <version epoch="0" ver="0.204" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.204-17" date="1683720000">- SPDX migration
- Use %license unconditionally</changelog>
</package>
<package pkgid="3ab88ff4fed9f0a6e7279fb401b51f5e9c72dabc8412e9c7c91bbe69b6af4e0f" name="perl-Ref-Util-XS" arch="x86_64">
  <version epoch="0" ver="0.117" rel="18.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-12" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-15" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-18" date="1683806400">- SPDX migration</changelog>
</package>
<package pkgid="02b74dfd05ee30d64202a95ac2c4b28fc5a4b1092a876337425578eca95d6176" name="perl-Regexp-Common" arch="noarch">
  <version epoch="0" ver="2024080801" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2017060201-21" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2024080801-1" date="1723204800">- Update to 2024080801
  + Eliminate 'use vars'
  + Update the MySQL comment pattern</changelog>
</package>
<package pkgid="7ee1d5890d1f8a5abb6246028460a9bcc8bdd5ea5dcfdd8543c0dd1bc8f19df5" name="perl-Regexp-Parser" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1774008000">- Update to 0.24
  Features:
  - Add support for Perl 5.10+ regex constructs (GH#8):
    \K (keep), \R (linebreak), \h/\H, \v/\V, named captures (?&lt;name&gt;...),
    named backrefs \k&lt;name&gt;, possessive quantifiers
  - Add \g{N} and \g{-N} backreference syntax from Perl 5.10+ (GH#16)
  - Add /a, /d, /l, /u charset modifier flags from Perl 5.14+ (GH#16)
  - Add /n no-capture flag from Perl 5.22 (GH#16)
  - Support Perl 5.14+ (?^:...) caret flag reset syntax (GH#4)
  - Add optional flags parameter to regex() method (GH#5)
  Bug Fixes:
  - Treat trailing dash in character class as literal (GH#6)
  - Compare character values numerically in range validation (GH#3)
  - Support POSIX character classes with visual method (GH#7)
  Maintenance:
  - Migrate test suite from deprecated Test.pm to Test::More (GH#15)
  - Add round-trip and error rejection test suites; tests 200 -&gt; 409 (GH#19)
  - Modernize CI: consolidate into single testsuite.yml, update actions, use
    perldocker containers (GH#17)
  - Set minimum Perl version to 5.16
  - Add CLAUDE.md for AI-assisted development (GH#19)
  - Switch to GitHub Actions for CI
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-1" date="1774180800">- Update to 0.25
  Features:
  - Add recursive pattern support: (?R), (?0), (?1), (?+1), (?-1), (?&amp;name) for
    named subpattern recursion (GH#22)
  - Add Python-compatible regex syntax: (?P&lt;name&gt;...) named capture, (?P=name)
    named backref, (?P&gt;name) named recursion (GH#22)
  - Add \o{NNN} octal escape support from Perl 5.14+ (GH#20)
  - Add (*VERB) backtracking control verbs: FAIL, F, ACCEPT, SKIP, PRUNE,
    COMMIT, THEN, MARK with optional :arg (GH#20)
  - Add (?|...) branch reset groups from Perl 5.10+ (GH#20)
  - Add (*positive_lookahead:...) and other alphabetic assertion forms from
    Perl 5.28+ (GH#20)
  - Add (*script_run:...), (*sr:...), (*atomic_script_run:...), (*asr:...)
    script run assertions from Perl 5.28+ (GH#20)
  - Add /xx flag support via (?xx:...) from Perl 5.26+ (GH#20)
  Maintenance:
  - Migrate t/08regex_flags.t and t/09backref_flags.t from deprecated Test.pm
    to Test::More - all test files now use Test::More (GH#21)
  - Update CLAUDE.md and modernize Parser.pm POD (GH#21)
  - Add CLAUDE.md and MANIFEST.SKIP to MANIFEST
  - Tests now 620 across 16 test files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-1" date="1774267200">- Update to 0.26
  Features:
  - Add \Q...\E (quotemeta) support for literal quoting in regular expressions
    (GH#23)
  - Add \b{type}/\B{type} extended boundary support including \b{gcb}, \b{wb},
    \b{sb}, and \b{lb} from Perl 5.22+ (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1774526400">- Update to 0.27
  Features:
  - Add (?(DEFINE)...) definition-only groups for defining named subpatterns
    without matching (GH#27)
  - Add (?(&lt;name&gt;)...) and (?('name')...) named capture conditions with new
    'define' and 'grouppn' object types (GH#27)
  Maintenance:
  - Replace `use base 'Exporter'` with `use parent 'Exporter'`; base is
    discouraged since Perl 5.12 (GH#25)
  - Remove unused 'use NEXT' from Objects.pm; recommend 'next::method' from mro
    (core since 5.10) instead (GH#25)
  - Remove duplicate 'use strict; use warnings;' in Parser.pm (GH#25)
  - Fix META_MERGE URLs to point to cpan-authors/Regexp-Parser with HTTPS and
    fix dead wiki.github homepage URL (GH#25)
  - Expand t/11errors.t from 17 to 240 tests covering all 28 RPe_* error codes
    in Diagnostics.pm (GH#26)
  - Add AI_POLICY.md for transparency</changelog>
</package>
<package pkgid="2105f6082c9f7b2addf7a9c6636583f7de526efb78f462c702f9a04282edd7be" name="perl-Regexp-Trie" arch="noarch">
  <version epoch="0" ver="0.02" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-15" date="1684238400">- Use SPDX-format license tag
- Drop support for building with ancient distributions prior to EL-7
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="46fa35c15fc307e001462730f905226d7e7c1c9dbc691e1bcaea02b2fb2cdd5a" name="perl-Role-Tiny" arch="noarch">
  <version epoch="0" ver="2.002005" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002005-1" date="1779105600">- Update to 2.002005 (rhbz#2478347)
  - Split role initialization from setting pragmas to allow more flexibility
    for subclasses
  - Ensure consistent internal handling of Class::C3 versus mro
  - Reduced Exporter dependency to 0 (any version)
- Use %{make-build} and %{make_install}</changelog>
</package>
<package pkgid="d48a8e6c92e3a1e0cbe207459538feb65895e39ac3a05120f3e73019a5710f15" name="perl-SQL-Statement" arch="noarch">
  <version epoch="0" ver="1.414" rel="10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.414-10" date="1688644800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e865c6523522e8af6c8b44fb2c80f596a3ef0f25a56219022106e4e295bf7342" name="perl-SUPER" arch="noarch">
  <version epoch="0" ver="1.20190531" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.20190531-14" date="1683201600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="578b11e88642561ae2b38288a484c579e1959273b47c75002d2c7a1c19f492c4" name="perl-SVN-Notify" arch="noarch">
  <version epoch="0" ver="2.87" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.87-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c0700af757164c870e24de7dbbcee2ff5ac5d3d6aca92636209ce8d7e85d0217" name="perl-Safe-Isa" arch="noarch">
  <version epoch="0" ver="1.000010" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000010-16" date="1684238400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="dab6b1675de192917d98d8d15e7f2affd499e6881554bdd1820934311ea644bb" name="perl-Scalar-Properties" arch="noarch">
  <version epoch="0" ver="1.100860" rel="34.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100860-31" date="1646913600">- Work around package note files breaking t/release-dist-manifest.t (#2062685)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100860-34" date="1683892800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="7590d402597d0ef0d3daaabe44dff9502734a50329cfdbc9a373bbddd8cf83e3" name="perl-Scope-Guard" arch="noarch">
  <version epoch="0" ver="0.21" rel="24.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-24" date="1680264000">- Use SPDX-format license tag
- Use author-indepentdent source URL</changelog>
</package>
<package pkgid="e5860bcafe1b39ce40bb9202db46ada4017975421158d597fbf9e5c47c62939d" name="perl-Search-Elasticsearch" arch="noarch">
  <version epoch="0" ver="8.12" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.717-1" date="1659009600">- Update to 7.717
  - Stable release for Elasticsearch 7.17</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.00-1" date="1672315200">- Update to 8.00
  - Stable release for Elasticsearch 8.5
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.00-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12-1" date="1706184000">- Update to 8.12
  - Stable release for Elasticsearch 8.12</changelog>
</package>
<package pkgid="d222471cb23a0dcf566337c308459cf4f3c37a9751c20ab10973cb702292d1b2" name="perl-Sendmail-AccessDB" arch="noarch">
  <version epoch="0" ver="1.04" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-4" date="1688644800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Drop support for building with ancient db4 packages
- Use %license unconditionally</changelog>
</package>
<package pkgid="958dae64195e3b397ca5f86caa721c6bbaaac359ef8db7b45de5d8bb2d0e3dbe" name="perl-Sendmail-PMilter" arch="noarch">
  <version epoch="0" ver="1.27" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.21-1" date="1657022400">- Update to 1.21
  - New maintainership (CPAN/GWHAYWOOD)
  - Test suite updates
  - Implement set multi-line reply function (CPAN RT#125090)
  - Documentation updates (CPAN RT#125040)
    - Fix POD errors
    - Add COPYRIGHT-&gt;LICENCE (file,link,=head1)
    - Remove obsolete doc/
  - SETSENDER-&gt;CHGFROM etc. (CPAN RT#115352)
  - ithread and postfork dispatcher fixes (CPAN RT#85833)
  - sig{CHLD}='DEFAULT'; (CPAN RT#85826)
  - Macro and headers fixes (CPAN RT#84941)
  - Define constant SMFIF_NONE (CPAN RT#78865)
  - Dummy functions setdbg() and settimeout() return 1 (CPAN RT#50144)
  - Fix memory leak in ithread dispatcher (CPAN RT#54794)
  - Removed requirement for Sendmail::Milter (CPAN RT#23921)
  - Full support for protocol negotiation, including support for setting milter
    data buffer sizes
  - Add get_sendmail_option() to read configuration file options
  - Propose to insist on Milter Protocol Version 6 in V1.21
  - Removed enable_chgfrom and some other some cruft
  - Partial support for negotiation
  - Comments invited via CPAN issues
  - Added file CONTRIBUTING
  - Added file COPYRIGHT
- New upstream maintainer GWHAYWOOD
- Switch upstream from search.cpan.org to metacpan.org
- Drop old obsolete of perl-Sendmail-Milter</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-1" date="1667217600">- Update to 1.23
  - Replace deprecated IO::Socket::INET6 with IO::Socket::IP (CPAN RT#144401)
  - Most callbacks were not recognized unless the appropriate flags were set
    during the negotiate callback (CPAN RT#144971, CPAN RT#144273)
  - Packaging improvements (CPAN RT#130084)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.24-1" date="1671192000">- Update to 1.24
  - Make no reply to MTA from the abort callback: such replies seem to cause
    problems for Postfix (CPAN RT#145263)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.24-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1707134400">- Update to 1.27
  - Proper handling of die (CPAN RT#150737)
  - Fix child_exit and add milter_exit (CPAN RT#150611)
  - Setconn with unix socket permissions (CPAN RT#150270)</changelog>
</package>
<package pkgid="7d728de45a3a82fcb6943e786dcde4134ced84f0b68d004a4dc23a32fda78a1d" name="perl-Set-Scalar" arch="noarch">
  <version epoch="0" ver="1.29" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-25" date="1688644800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="04f284e649283ef3619f4e4f7fda6f864ae7aa20650568df8c56443c2c2a3cae" name="perl-Socket6" arch="x86_64">
  <version epoch="0" ver="0.29" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-10" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-11" date="1625659200">- Drop support for deprecated gethostbyname2
  https://src.fedoraproject.org/rpms/perl-Socket6/pull-request/2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-14" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-17" date="1679659200">- Use SPDX-format license tag
- Aviod deprecated patch syntax</changelog>
</package>
<package pkgid="e246af1f253fbfe3fe5e1cc631dbd5e08def9b759eaefad57f1982fcb1e8728a" name="perl-Software-License" arch="noarch">
  <version epoch="0" ver="0.104007" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104003-1" date="1684497600">- Update to 0.104003
  - Add Artistic 1.0 Perl license and make Perl license use it
  - Remove extra "59" from LGPL-2.1
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104004-1" date="1684929600">- Update to 0.104004
  - Rename Perl Artistic License to avoid confusion in detecting license</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104005-1" date="1700568000">- Update to 0.104005
  - Explictly require perl v5.12.0, which was already effectively required
    because of upstream libraries
  - Update author metadata
- This release by RJBS ⇒ update source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104006-1" date="1707652800">- Update to 0.104006
  - Use valid SPDX identifier for BSD license
  - Undefine SSLeay spdx_expression
  - Update URL to SSLeay license
- This release by LEONT ⇒ update source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104007-1" date="1746360000">- Update to 0.104007 (rhbz#2363949)
  - Update GPL v1 text to current version
  - CPAN::Meta v1 "gpl" license is explicitly GPL v2
  - Improve recognition for Apache 1.1 and 2.0+
- Use %{make_build} and %{make_install}
- Drop explicit provides for support of old dependency generator</changelog>
</package>
<package pkgid="702e42be4dd21b78ffa3f1972b6a6895eb8a9464ffaa6cd861fc0049541a77ae" name="perl-Software-License-CCpack" arch="noarch">
  <version epoch="0" ver="1.11" rel="39.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-34" date="1684238400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-38" date="1706270400">- Drop test dependency Test::Vars from Fedora 39 onwards since Test::Vars is
  FTBFS with Perl 5.38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-39" date="1726574400">- Test::Vars is fixed</changelog>
</package>
<package pkgid="69c4e0118f227b83597bf45ebba527b86814fb564f186253bf41b7b839fb68a2" name="perl-Specio" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-6" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-7" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1735041600">- Update to 0.49
  - Attempting to import any structured type caused a confusing
    "Can't store CODE items" error
  - Removed the "this is alpha" warning from Specio::Library::Structured; it's
    as production-ready as it's going to get</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1739966400">- Update to 0.50
  - Fixed a bug in the Int type that caused it to accept numbers like
    124512.000000000123, which when stringified, are stringified as integers
    (GH#22)
- Drop EL-7 support
  - Always have List::Util ≥ 1.33
  - Always have Sub::Util
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1750420800">- Update to 0.51
  - Made it possible to force Specio to use only pure Perl dependencies, by
    setting the SPECIO_IMPLEMENTATION environment variable to "PP" (GH#23)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1754913600">- Update to 0.52
  - Really made it possible to force Specio to use only pure Perl dependencies;
    the changes in 0.51 were incomplete, so lots of places still loaded the
    Clone (XS) module (GH#23)
- Package new GOVERNANCE.md, SECURITY.md and SUPPORT.md files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1759924800">- Update to 0.53
  - Fixed a test failure when trying to open $^X on some platforms</changelog>
</package>
<package pkgid="5c200710a5784ad747f1d1487bbf5caf92e92ff7b03b99231a58069c10d57e16" name="perl-Spellunker" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-27" date="1683201600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="95cc066ee7cf22646df65b8a9fa14dccf070302a33e39e18d1bc9b5f61254b9b" name="perl-Spiffy" arch="noarch">
  <version epoch="0" ver="0.46" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.46-27" date="1683201600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="565533c094e5b2f99699987cf8967e1d809af2d6c4558cb13db5e427d50809e1" name="perl-String-Escape" arch="noarch">
  <version epoch="0" ver="2010.002" rel="39.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2010.002-39" date="1688472000">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0e7ef270a0483530921eef74fbd68216cfe12467d86a6172b944565a55cf8f68" name="perl-String-Format" arch="noarch">
  <version epoch="0" ver="1.18" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.18-16" date="1684584000">- Use SPDX-format license tag
- Drop support for building with ExtUtils::MakeMaker &lt; 6.5702
- Use %license unconditionally</changelog>
</package>
<package pkgid="f35e3f4d4a1f464f248a03c421eec7b7cee21e717373846b87e4afb800c01d08" name="perl-Sub-Exporter" arch="noarch">
  <version epoch="0" ver="0.991" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.989-1" date="1672574400">- Update to 0.989
  - Update author contact info
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.989-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.990-1" date="1690027200">- Update to 0.990
  - Fixes to keep working in v5.39 (GH#17, GH#18)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.991-1" date="1700827200">- Update to 0.991
  - Make the requirement for perl v5.12.0 explicit; previously, it was only
    implicit because of prerequisites</changelog>
</package>
<package pkgid="f37cee111ec308079c77a990a4a93c768ef9d63a5d2a8468c73e0e6f15b738a7" name="perl-Sub-Exporter-ForMethods" arch="noarch">
  <version epoch="0" ver="0.100055" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100055-1" date="1672574400">- Update to 0.100055
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100055-2" date="1689422400">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="2c5d1145ef83e0d039df0190df5f81f1160a3a29d6239a2a837204e01bf20f40" name="perl-Sub-Exporter-Progressive" arch="noarch">
  <version epoch="0" ver="0.001013" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.001013-21" date="1683892800">- Spec tidy-up
  - Use SPDX-format license tag
  - Use %license unconditionally</changelog>
</package>
<package pkgid="5b08a5c484fc0d1cdf636e85a626cfeb9e8b83b34e6283bc18e8efb4908a876a" name="perl-Sub-Identify" arch="x86_64">
  <version epoch="0" ver="0.14" rel="22.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-16" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-19" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-22" date="1680523200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4513edb362c26fe20a3e5527c4b21ebb44d6f97fbd57c4199c94ed4b6ba75b97" name="perl-Sub-Info" arch="noarch">
  <version epoch="0" ver="0.002" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002-21" date="1688299200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="5b3c4fe5e40370153fbef78301355475c24a4519291e846501f775c21081a5bf" name="perl-Sub-Install" arch="noarch">
  <version epoch="0" ver="0.929" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.929-1" date="1672574400">- Update to 0.929
  - Update packaging and metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.929-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="bfe39f9379454a353d863db96cfe3931d028b5d55fa1cc99409117e488d943c5" name="perl-Sub-Name" arch="x86_64">
  <version epoch="0" ver="0.28" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-12" date="1678104000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1682769600">- Update to 0.27
  - Skip quote-separator tests on newer perls that deprecate this behaviour</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-2" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-6" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.28-1" date="1734350400">- Update to 0.28
  - Fix version comparison logic for forward compatibility
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
</package>
<package pkgid="0a6d77564c3b700382685c151a8fe41d636400e8027054b7926755b5a7858abf" name="perl-Sub-Quote" arch="noarch">
  <version epoch="0" ver="2.006009" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.006009-1" date="1755777600">- Update to 2.006009
  - Fix new warning for bare \ in qw()
  - Fix documentation for hintshash option
- Use %{make_build} and %{make_install}
- Assume Sub::Util always available</changelog>
</package>
<package pkgid="0e369f8e0d7e54ba2fe1a338e9a40e8695ff941ecbf7d46a2bfceabf57ff7d87" name="perl-Sub-Uplevel" arch="noarch">
  <version epoch="1" ver="0.2800" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.2800-19" date="1683979200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally
- Package examples</changelog>
</package>
<package pkgid="5bffe4d11c1ad5636f75c95aec219869d3ef327d470084f6019735e17f18a8a4" name="perl-Symbol-Util" arch="noarch">
  <version epoch="0" ver="0.0203" rel="32.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0203-32" date="1684584000">- Use SPDX-format license tag
- Drop workaround for ancient hunspell versions prior to Fedora 14
- Use %license unconditionally</changelog>
</package>
<package pkgid="702b7b42b11d20f5123cb1bfe124eed5c96f159b0c029daf39980c79e31c9151" name="perl-Sys-HostAddr" arch="noarch">
  <version epoch="0" ver="0.993" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.993-4" date="1689768000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="4c4d82d40c74ebd5eaf78adeefc8271d16d1907550b86d5e20a7f918ef7e7cc0" name="perl-Sys-Hostname-Long" arch="noarch">
  <version epoch="0" ver="1.5" rel="26.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.5-26" date="1684670400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="bcef18264a90e1ed4cccba3b162b30747493aef53c18835018624efc12b1ae77" name="perl-Taint-Runtime" arch="x86_64">
  <version epoch="0" ver="0.03" rel="48.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-42" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-45" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-48" date="1683979200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a050077538ab1a5f07ad48c71c454b2046206cc1659593090f7e8a1923c9c29c" name="perl-Taint-Util" arch="x86_64">
  <version epoch="0" ver="0.08" rel="32.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-30" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-32" date="1684756800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- BR: Pod::Man ≥ 2.26 to avoid man page issue (#998447)</changelog>
</package>
<package pkgid="357280d65d748c2afb09e59fe8d28f7219004cc2c12f8bc8064e23ff3c555bce" name="perl-Task-Weaken" arch="noarch">
  <version epoch="0" ver="1.06" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-16" date="1684065600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4cac745b036cff61314a6827e97c9fc7d72956003431d2c243eb0b3b44c92d71" name="perl-Term-ReadKey" arch="x86_64">
  <version epoch="0" ver="2.38" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-10" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-13" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-16" date="1684065600">- Port Configure.pm to C99</changelog>
</package>
<package pkgid="2d82e6fafbb18f5e1ed178f50d63847fb81ad90f178e6a316b482a1aa2845a69" name="perl-Term-ReadLine-Gnu" arch="x86_64">
  <version epoch="0" ver="1.47" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-2" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-7" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-8" date="1737633600">- Fix for C23 compatibility (GH#32, rhbz#2341037)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.47-1" date="1751889600">- Update to 1.46
  - Add readline-8.3 support
    - New functions: rl_reparse_colors, rl_print_keybinding
    - New variables: rl_full_quoting_desired, rl_macro_display_hook,
      rl_completion_rewrite_hook
    - New state values for rl_readline_state: RL_STATE_READSTR
  - Sample code updates
    - Import almost all examples from the GNU Readline Library
    - Use "/usr/bin/env" for sh-bang
    - Add eg/README.md
  - Make the check for being in emacs to be more like bash (GH#28)
  - Add a wrap function on every function that has Keymap as an argument
  - Add some constant functions
    - Add macro functions for rl_readline_state: RL_SETSTATE(),
      RL_UNSETSTATE(), RL_ISSTATE()
    - Export READERR
  - Fix for compilation in C23 mode (GH#32)
  - POD updates
    - Fix description of add_defun() in BUGS section (GH#23)
    - Fix formatting
  - GitHub actions: update OS and perl-version matrix</changelog>
</package>
<package pkgid="5dbc8e3f4d09383c3250ed755f1c02df2315c219ae1b49359d219bf394794f71" name="perl-Term-Table" arch="noarch">
  <version epoch="0" ver="0.028" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.020-1" date="1722945600">- Update to 0.020
  - Fix use cycle between Test-Simple and Term::Table now that Test2::Suite was
    merged into Test-Simple
  - Fix test broken on Test::More</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.022-1" date="1723032000">- Update to 0.022
  - Fix warnings in HashBase.t
  - Some initial support for non-ASCII systems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-1" date="1730030400">- Update to 0.023
  - t/honor_env_in_non_tty.t requires Test2::Tools::Tiny &gt;= 1.302097; use
    Test::More if not available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-2" date="1731240000">- Don't unbundle Object::HashBase from F-41 onwards (module in Perl Core)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-1" date="1735387200">- Update to 0.024
  - Additional changes to t/honor_env_in_non_tty.t, and adding debugging</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-519" date="1751976000">- Use %{make_build} and %{make_install}
- Assume that weak dependencies are always available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.025-1" date="1756900800">- Update to 0.025
  - Typo fix in comment
  - Hide some diagnostics when tests run in perl core</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.027-1" date="1763380800">- Update to 0.027
  - Fix terminal size detection
- Run the test suite within expect so that we get usable IO handles</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.028-1" date="1764244800">- Update to 0.028
  - Replace '//' with '||' for 5.8 support</changelog>
</package>
<package pkgid="531f79310a7a26b8506c9c86a72e729b77761ad26659a896f24a944acf1fcdbd" name="perl-Test-API" arch="noarch">
  <version epoch="0" ver="0.010" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-17" date="1684756800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="db493183fbb6b4007667ce80f05a1d17e9db530bc6af195f9275216385bb821c" name="perl-Test-Assert" arch="noarch">
  <version epoch="0" ver="0.0504" rel="39.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0504-36" date="1647000000">- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0504-39" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="71f0e846f8437416244f702338449ace1b84cbf6a593e556a4ef43842e89c3f4" name="perl-Test-Base" arch="noarch">
  <version epoch="0" ver="0.89" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.89-16" date="1688212800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="686e1b807227704fcd0dd340910003cd16f7977c3e5058ca2c9dc4c7a7ca7257" name="perl-Test-CPAN-Meta" arch="noarch">
  <version epoch="0" ver="0.25" rel="33.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-33" date="1689163200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="9fbd135ce8c257218fabd0ceab069180062b8e76cd66bc1fb146fe538c1827d3" name="perl-Test-CPAN-Meta-JSON" arch="noarch">
  <version epoch="0" ver="0.16" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.16-25" date="1684065600">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Use %license unconditionally</changelog>
</package>
<package pkgid="fe62dcf88e0bba4d78575def10e850ee2025e4fa9c46b8f316f410cdb7eae3ec" name="perl-Test-CPAN-Meta-YAML" arch="noarch">
  <version epoch="0" ver="0.25" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-25" date="1684843200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="5299af30c745cf477176776bf7c2b0c451070345f9283908f1efc4b3941705e0" name="perl-Test-CheckChanges" arch="noarch">
  <version epoch="0" ver="0.14" rel="38.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-38" date="1684843200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="88859107abfc72ece8add45fe0b630408dc47402f37376366b18ce727e9ace8a" name="perl-Test-CheckDeps" arch="noarch">
  <version epoch="0" ver="0.010" rel="37.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-37" date="1684843200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c5d09f13539e45c8ffbb5ce567b9244732b377c2fe56148b624c84e5fd5a7ecf" name="perl-Test-ClassAPI" arch="noarch">
  <version epoch="0" ver="1.07" rel="24.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.07-24" date="1688212800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3515c40f725f66f5b40f17f0753dd5ae219ca6cd944bfc1024ab4966e4008306" name="perl-Test-CleanNamespaces" arch="noarch">
  <version epoch="0" ver="0.24" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-19" date="1684065600">- Use SPDX-format license tag
- Weaken dependency on Role::Tiny where possible
- Use %license unconditionally</changelog>
</package>
<package pkgid="bb307a76ab44b5febb3d6ad595ab39ae8525793098a63f28a9e382f27d9d9ab2" name="perl-Test-Deep" arch="noarch">
  <version epoch="0" ver="1.205" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.204-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.205-1" date="1743508800">- Update to 1.205
  - Add "use v5.12" to Test::Deep, just for clarity
  - Fix a test so that if an "A" module is in @INC, the tests still pass
- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker &lt; 6.78</changelog>
</package>
<package pkgid="96d78b4a686fa1a02595e4c043a030517f993f0b844f34a9fb1d908a417c7924" name="perl-Test-Differences" arch="noarch">
  <version epoch="0" ver="0.7200" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7100-1" date="1697198400">- Update to 0.71
  - Stop pointless use of taint mode in tests, so tests pass when perl is
    built without taint support
  - Document and test different behaviour regarding Booleans in perl 5.38.0
    compared to earlier versions (GH#21)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7100-5" date="1724155200">- Fix version handling for build with different locales set</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7200-1" date="1751889600">- Update to 0.72
  - Changes to tests only, so tests pass when you have a new perl that supports
    bools, but an old Data::Dumper that doesn't
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="cb435bddab5494e4dd5fa57393a6a3f45f16aa5f4bf79ca963adb556f92bbf7f" name="perl-Test-Directory" arch="noarch">
  <version epoch="0" ver="0.052" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.052-1" date="1677499200">- Update to 0.052
  - Fix error message on failure to remove directory in 'clean'
    (GH#2, CPAN RT#130570)
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0cbebab5ca10155f30a5da9d16fc569ff1d27bf547b4a8c4be8e8ac5de5f4ca1" name="perl-Test-DistManifest" arch="noarch">
  <version epoch="0" ver="1.014" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-23" date="1646136000">- Work around package note files breaking t/02manifest.t (#2059504)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-25" date="1662465600">- Drop workaround for package note files from Fedora 37 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-27" date="1688126400">- Use SPDX-format license file</changelog>
</package>
<package pkgid="1d38f88d2bc8f30bb65af7db9fa627ae4907d3392d37ec3572ff123902abe329" name="perl-Test-Distribution" arch="noarch">
  <version epoch="0" ver="2.00" rel="42.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.00-42" date="1684929600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="2c1ab6ec6b1af1746299020601ff75882e29f0493528bfa215503c7da38b1b61" name="perl-Test-EOL" arch="noarch">
  <version epoch="0" ver="2.02" rel="8.fc29"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 2.02-8" date="1684929600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="337a6061b67c24741db876b8c0536f91df0642f3f3c111e153dbad9cfbf87447" name="perl-Test-Exception" arch="noarch">
  <version epoch="0" ver="0.43" rel="23.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.43-23" date="1684152000">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="225bf53bf673d385a650b80da72b8bc4625370192d07abf002f9c3185a93e567" name="perl-Test-FailWarnings" arch="noarch">
  <version epoch="0" ver="0.008" rel="30.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-30" date="1685620800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="5a3ca08f5c78714a6d89d43c6771129d3fa3f3532d17bd310049972e235e33d5" name="perl-Test-Fatal" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1762516800">- Update to 0.018
  - Now requires perl v5.12.0
  - Now tolerant of false exceptions coming from a boolean-overloaded object
- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker &lt; 6.78</changelog>
</package>
<package pkgid="ee71a2d8bcf2d00ae73b851ac2324654070a9bb4edbd2e8b7ac6efe0cd44f945" name="perl-Test-File" arch="noarch">
  <version epoch="0" ver="1.99.5" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.3-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.3-4" date="1691496000">- Fix FTBFS in Rawhide due to %rpmversion macro becoming an rpm built-in
  (rhbz#2229872)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.4-1" date="1735905600">- Update to 1.994
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.5-1" date="1744632000">- Update to 1.995
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="bd2bb809987129445fd718895ba50f39a353b1ba85d8450b45e1939bb79f623d" name="perl-Test-File-ShareDir" arch="noarch">
  <version epoch="0" ver="1.001002" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001002-19" date="1688126400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="bbf0ea5b1015147a452125d42d34705b84041b0565ce6a57ca07b01ca027aaa4" name="perl-Test-HTML-Lint" arch="noarch">
  <version epoch="0" ver="2.32" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-10" date="1627128000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-11" date="1643198400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-12" date="1654603200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-13" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-14" date="1669809600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-15" date="1674475200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-16" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="bf262533f1dd4f8060957e9b2d6e1b723b0f997b14a5ae951c1c513b4c4c579a" name="perl-Test-HTML-Tidy" arch="noarch">
  <version epoch="0" ver="1.00" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.00-15" date="1688040000">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9df03b42ef3f996ff3af55d80270dc2002c46f4ef6ae7eff6bb6525811fba34c" name="perl-Test-Harness" arch="noarch">
  <version epoch="1" ver="3.52" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.44-491" date="1688126400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.46-1" date="1691496000">- Update to 3.46
  - Colour the "ok"s as well
  - Skip symlink tests on msys2
  - Use absolute path for executable tests
  - Space-quote executable if it has spaces
  - Avoid using Errno::EINTR directly for platforms without it
  - Stop calling import on App::Prove plugins</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.47-1" date="1691928000">- Update to 3.47
  - Add missing negation in EINTR check
  - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.48-1" date="1696334400">- Update to 3.48
  - Accept TAP version 14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.50-1" date="1723636800">- Update to 3.50
  - Simplify runtests for easier extension
  - Tidy up core dump file
  - Simplify injecting of @INC paths
  - Prevent double summary on bail-out
  - Prevent bail_out summary when no handler for it is defined
  - Better check for t/ directory in Perl handler</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.52-1" date="1746360000">- Update to 3.52
  - Support additional indicators on block scalars in YAML
  - Fix string comparisons with $] to use numeric comparison instead
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="b72745acf0612ed7e02a73b70ff36b42d553a1096168fb85a50c934cac174a92" name="perl-Test-HasVersion" arch="noarch">
  <version epoch="0" ver="0.014" rel="27.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-22" date="1685016000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-27" date="1725624000">- Add manpage for test_version</changelog>
</package>
<package pkgid="c499cb139a2a7e0a9cc877ed7223ad340fb0a8606b1fc112f45e0074a573ae0f" name="perl-Test-InDistDir" arch="noarch">
  <version epoch="0" ver="1.112071" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.112071-21" date="1689768000">- Use %license unconditionally</changelog>
</package>
<package pkgid="6b4bd9d4cf2b83ec36f4989614936b1c25b6ce9943dcc5f704523fe881f26224" name="perl-Test-Kwalitee" arch="noarch">
  <version epoch="0" ver="1.28" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-13" date="1685016000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-14" date="1727956800">- Avoid pulling in aspell</changelog>
</package>
<package pkgid="af5f2478d5f0681c9431c56da9b5fd57ec30e6f3b50437748436ba7631931a21" name="perl-Test-Kwalitee-Extra" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="20.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-20" date="1685016000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="391f7c8bc91031bd9f5a6eac4f640be1afa9901ad3957ca868a564cbf992a62b" name="perl-Test-LeakTrace" arch="x86_64">
  <version epoch="0" ver="0.17" rel="11.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-7" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-11" date="1680264000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2e52c417a177c8eed5713cfe4a5e53fe590c8610c5404b9dbd74390aa87b1725" name="perl-Test-LongString" arch="noarch">
  <version epoch="0" ver="0.17" rel="26.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-26" date="1688040000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="1d705ad8ef9546e52c99e0eee3f1974dbf35d55dec8bdce92d2f9130fd5cde22" name="perl-Test-Manifest" arch="noarch">
  <version epoch="0" ver="2.026" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.023-5" date="1684152000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.024-1" date="1704801600">- Update to 2.024
  - Refresh distro</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.025-1" date="1736078400">- Update to 2.025
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.026-1" date="1744632000">- Update to 2.026
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="6a4482d523d726f39020900d732d0e0dcab9556ed69594ee6553b057d8201f8d" name="perl-Test-Memory-Cycle" arch="noarch">
  <version epoch="0" ver="1.06" rel="23.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-23" date="1684152000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f2e584563f5bd3c22b9c924f2481bba8d81a62ac08ac047eb65a7253c7f9439a" name="perl-Test-MinimumVersion" arch="noarch">
  <version epoch="0" ver="0.101083" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101083-1" date="1672574400">- Update to 0.101083
  - Update packaging and metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101083-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="46fe1420c1be0a843b6d7dce9718e76f5f69ea07638872733927794ca73f564f" name="perl-Test-MockModule" arch="noarch">
  <version epoch="0" ver="0.185.0" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.179.0-1" date="1725019200">- Update to 0.179.0
  - Bump Module::Build requirement (GH#65)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.180.0-1" date="1751544000">- Update to 0.180.0
  - Remove Software::License from runtime dependencies (GH#67, GH#68)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.182.0-1" date="1777636800">- Update to 0.182.0
  - See https://github.com/geofffranks/test-mockmodule/releases for details
  - Highlight: Moose and Mouse meta-class aware mocking (GH#55)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.183.0-1" date="1777809600">- Update to 0.183.0
  - Drop unused weaken import
  - Fix: new() returns distinct objects per package (GH#48)
  - Fix: Correct stacking edge cases in mock-layer restore (follow-up to GH#48)
  - Refactor: integrate stacking with Moose/Mouse meta layer and re-mock
    corners (follow-up to GH#77)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.184.0-1" date="1778068800">- Update to 0.184.0
  - Fix: Restore noop() to return 1 for backward compatibility (GH#80)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.185.0-1" date="1778155200">- Update to 0.185.0
  - Revert to pre-v0.181.0 behaviour: new() returns singleton-per-package by
    default again; pass distinct =&gt; 1 for v0.181's fresh-object-per-call
    behaviour (GH#83)
  - New: Test::MockModule-&gt;original_for($pkg, $sub): Call the original sub from
    inside a mock closure without capturing $mock</changelog>
</package>
<package pkgid="86ca0a19c9cabf735384715ca0c44bdb57fd8247b173e75dad891f2dfe258b14" name="perl-Test-Modern" arch="noarch">
  <version epoch="0" ver="0.013" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-25" date="1685016000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="2663b0198b3f9d5e57ce9704f59ef5ddf86e734ce81141caff1098b8a47c8e08" name="perl-Test-Mojibake" arch="noarch">
  <version epoch="0" ver="1.3" rel="32.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-27" date="1685102400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-31" date="1706270400">- Drop BR: perl(Test::Vars) from Fedora 39 onwards as Test::Vars is FTBFS with
  Perl 5.38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-32" date="1726574400">- Test::Vars is fixed</changelog>
</package>
<package pkgid="b6a29374c814c3a7756b9c88511538c2fdb22c4371bd29a2e5e2722b942b1a50" name="perl-Test-Moose" arch="x86_64">
  <version epoch="0" ver="2.4000" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2203-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2205-1" date="1690113600">- Update to 2.2205 (rhbz#2224800)
  Tests
  - Adjust the expected list of UNIVERSAL methods, to account for changes in
    perl 5.39.1: some things, like the import method, could end up existing
    based on the perl version or based on a prerequite loading UNIVERSAL.pm
    (GH#183)
- Revert test change for Perl 5.39 if our perl is older than 5.22</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2206-1" date="1690113601">- Update to 2.2206
  - Fix parsing error in test in 2.2205 release</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-1" date="1705838400">- Update to 2.2207
  - Remove test dependency on Test::CleanNamespaces (GH#184)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-2" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-5" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6.1" date="1745150400">- Add provide for Moose::Conflicts, used in test suite for MooseX-Types
- Use %{make_build} and %{make_install}
- Drop Obsoletes/Provides for perl-Class-MOP, merged into perl-Moose in Fedora
  15 (2011)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4000-1.0" date="1751889600">- Update to 2.4000
  Documentation
  - Clarified some wording regarding the interactions between attribute
    configuration options "init_arg" and "required" (GH#187)
  Other
  - The release schedule and numbering scheme has changed; see
    Moose::Manual::Support</changelog>
</package>
<package pkgid="f8f188bbafb3273a1c3edd68af4a4c5aef110294892d98ab835eb86a07c41aef" name="perl-Test-More-UTF8" arch="noarch">
  <version epoch="0" ver="0.05" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-2" date="1687867200">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="3c5f69c036f155de8fe507bf672e68574b9f857f5ac1780f770c0af30a75ef7f" name="perl-Test-Most" arch="noarch">
  <version epoch="0" ver="0.42" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.41-1" date="1777550400">- Update to 0.41
  - Prevent strange import behaviour caused by @EXPORT twiddling
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.42-1" date="1778241600">- Update to 0.42 (rhbz#2467785)
  - Restore support for 'use Test::Most import =&gt; [...]' to select which
    symbols to export; the 0.39 export rework broke it (GH#18)</changelog>
</package>
<package pkgid="15c2d5a606719e1e4be874101d297548f741b1bcb36022aa7aad10096960140a" name="perl-Test-Mouse" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-21" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-22" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-1" date="1722772800">- Update to 2.5.11
  - Use Devel-PPPort 3.59 (GH#113)
  - Mark "builtin" as foreign (GH#123)
- Update bundled ppport.h to version 3.62</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-4" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-5" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.0-1" date="1761825600">- Update to 2.6.0 (rhbz#2407306)
  - Update minimum perl version from 5.8 =&gt; 5.10 (GH#112)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-1" date="1766232000">- Update to 2.6.1 (rhbz#2424094)
  - Provide empty import on Mouse::Deprecated for imported Moose test
    (GH#120, GH#127)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.2-1" date="1775390400">- Update to 2.6.2 (rhbz#2455030)
  - Fix the conversion from floating point number to string with quadmath Perl
    (GH#126)</changelog>
</package>
<package pkgid="8f3c59fe7ae6d6ac559778e12e1c86805521d9f18db7db9dc57097c6f3dce4d4" name="perl-Test-Needs" arch="noarch">
  <version epoch="0" ver="0.002010" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002009-1" date="1622030400">- Update to 0.002009
  - Fix tests when @INC includes directories that shouldn't have their archname
    or version subdirectories added
  - Fix test compatibility with Windows
  - Fix warnings from Test::Builder if Test::Needs is loaded first, and is used
    to check for a Test module
  - Fix location in code reported when a module check fails
  - Support short forms of perl versions
  - Support perl versions greater than 5
  - Fix handling of v-string versions on perl 5.6</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002010-1" date="1674475200">- Update to 0.002010
  - Split main test into three separate scripts
  - Avoid outputting multiple plans if used with no_plan
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1c1da0db7a4b29f9afcedb96effbbc1d33e52115dd23889b18bae9d354277001" name="perl-Test-NoTabs" arch="noarch">
  <version epoch="0" ver="2.02" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.02-17" date="1685102400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1abde69e0e10deac3aa385813fff30b486a3b795f03a51f2035677230bd74394" name="perl-Test-NoWarnings" arch="noarch">
  <version epoch="0" ver="1.06" rel="5.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-1" date="1627473600">- Update to 1.06
  - Clarify docs around tests without a plan
  - Documentation cleanups and typo fixes
  - Minor code cleanups
  - use warnings in tests
  - Skip fork test if perl can't fork
  - Note conflicts with Carp::Always in documentation
  - Made had_no_warnings turn off the checking at END time for use with
    done_testing based tests with no test count; also added docs
- Use %license unconditionally
- Distribution no longer includes Extra Tests
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-5" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a8bf2a572e7dfd1da03b60d95e6aee2b5ce58a749299b3ef83997e0d2361c672" name="perl-Test-Object" arch="noarch">
  <version epoch="0" ver="0.08" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-17" date="1687867200">- Use SPDX-format license tag
-0 Use %license unconditionally</changelog>
</package>
<package pkgid="01e62532b3b468119c4266a6c279ebb8ce51bf5235823087d9c9d6ddc9fefe83" name="perl-Test-Output" arch="noarch">
  <version epoch="0" ver="1.036" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.034-1" date="1688558400">- Update to 1.034
  - Remove unnecessary -T from pod tests: now that v5.38 allows you to compile
    without taint support and those perls won't run if they see a -T, these
    tests needlessly fail there
  - Correct spelling mistakes (GH#10)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.034-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.035-1" date="1735905600">- Update to 1.035
  - Distro refresh and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.036-1" date="1744718400">- Update to 1.036
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="c32388204f5423c7db50857241803a937a57f7630bccb521c16e76dd50b36f9b" name="perl-Test-Perl-Critic" arch="noarch">
  <version epoch="0" ver="1.04" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-14" date="1640952000">- Use %license unconditionally
- No spell checking done in package build</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-19" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="db93f5b1fd39dbcefbad712c35951dc85004d1b34e1c8b91cde5bf0927512667" name="perl-Test-Perl-Critic-Policy" arch="noarch">
  <version epoch="0" ver="1.156" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-2" date="1688990400">- Use SPDX-format license tag for perl-Test-Perl-Critic-Policy sub-package
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-4" date="1695643200">- Fix for Perl::Critic::Policy::Subroutines::RequireArgUnpacking with PPI 1.277
  (GH#1048)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-1" date="1697544000">- Update to 1.152 (rhbz#2244582)
  - Fix a test failure for Subroutines::RequireArgUnpacking (GH#1048)
  - Fix a test failure in t/06_violation.t on Perl 5.39.1 or above (GH#1037)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-3" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-4" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-1" date="1729512000">- Update to 1.154 (rhbz#2320114)
  Enhancements
  - ProhibitedUnusedCapture now recognizes %+, %-, %{^CAPTURE} and
    %LAST_PAREN_MATCH (GH#1065)
  - Fixed a deprecation warning in the extras/perlcritic.el Emacs script
    (GH#1067)
  - RequireExplicitPackage now accepts a use VERSION as the first line
    (GH#1070)
  Fixes
  - Fix some false positives for function calls as a hash index (GH#1071)
  Documentation
  - Clarify package_exemptions rules (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-2" date="1729512001">- Require ExtUtils::Manifest for Perl::Critic::TestUtils::bundled_policy_names()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-1" date="1729684800">- Update to 1.156 (rhbz#2321227)
  - Subroutines::ProhibitManyArgs no longer gets confused by underscores in
    variable names (GH#1027)</changelog>
</package>
<package pkgid="d5f52b51a0349b6434a2b238481b5cec14ef771644ac1bae512147f4091b9a7d" name="perl-Test-Pod" arch="noarch">
  <version epoch="0" ver="1.52" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-16" date="1687867200">- Use SPDX-format license tag
- Switch upstream from search.cpan,org to metacpan.org</changelog>
</package>
<package pkgid="389404e5d19a62773c52de9539a89774ec4433505920b79f5a82a27b7879b5b4" name="perl-Test-Pod-Coverage" arch="noarch">
  <version epoch="0" ver="1.10" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10-25" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7718e99ad9c07bb84b61c86dccabd9b775cc5da9ed683739ab1e5e0669985a22" name="perl-Test-Portability-Files" arch="noarch">
  <version epoch="0" ver="0.10" rel="18.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-15" date="1687780800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-18" date="1714737600">- Test::Vars unavailable after Fedora 39</changelog>
</package>
<package pkgid="7480f02db3d4b33d4e9f18e3b8513592d04a7c7363f0d1985c7a77f1b3def2b9" name="perl-Test-Prereq" arch="noarch">
  <version epoch="0" ver="2.005" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.003-11" date="1685102400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.005-1" date="1735905600">- Update to 2.005
  - Refresh distro
  - Move to BRIANDFOY user
  - Add SECURITY.md policy
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="211c4a037a00ad0ff31a433bcacd29649ed013be86d0ca9f82708bd803da23d9" name="perl-Test-Regexp" arch="noarch">
  <version epoch="0" ver="2017040101" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2017040101-21" date="1684152000">- SPDX migration</changelog>
</package>
<package pkgid="76f51378feda82f3641cc92238e3ea153d0001f456cfdac650a05ffcefd8bd37" name="perl-Test-Requires" arch="noarch">
  <version epoch="0" ver="0.11" rel="11.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-11" date="1678104000">- Use SPDX-format license tag
- Drop decade-old obsoletes/provides for old tests sub-package
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="2fb4a8e89ceb977758fba084a69b7a913aed02a502de6b3e57339cca972095ce" name="perl-Test-RequiresInternet" arch="noarch">
  <version epoch="0" ver="0.05" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-25" date="1684238400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b70d1b8011c009057519e3adcb3dc38f1dd7678581046a04ad4a9c83c285b797" name="perl-Test-Script" arch="noarch">
  <version epoch="0" ver="1.31" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-1" date="1754395200">- Update to 1.30
  - Documentation improvements (GH#42)
  - Fix bug where implicit function export would happen regardless of which
    functions were explicitly exported (GH#45, GH#46)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1755000000">- Update to 1.31
  - Fix bug introduced in 1.30 where exports were not happening correctly in
    legacy mode (GH#47)</changelog>
</package>
<package pkgid="a5471d49b0b027b0f8379de080d4694d394c0580d21c91af4d9450047244a3b9" name="perl-Test-Signature" arch="noarch">
  <version epoch="0" ver="1.11" rel="29.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-26" date="1647000000">- Work around FTBFS triggered by package note feature</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-29" date="1685102400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="a46fbdd296b29b4fde7d9c2ceeca2389822c4c1a546c6c87d105d1698a3fb608" name="perl-Test-Simple" arch="noarch">
  <version epoch="3" ver="1.302219" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302209-1" date="1737633600">- Update to 1.302209
  - Don't use base as much (GH#1021)
  - Use PerlIO::get_layers without loading PerlIO.pm (GH#1022)
  - Move try_sig_mask to separate file to avoid always loading POSIX (GH#1023)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302210-1" date="1743336000">- Update to 1.302210
  - Fix typo in Test2::Util::Trace docs
  - Documentation fixes throughout for affect vs. effect
  - Test2::Tools::Warnings warns called in void context
  - Remove unnecessary empty list assignments
  - Calculate CAN_SIGSYS when called rather than as a constant
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302211-1" date="1746187200">- Update to 1.302211
  - Fix broken links in pod for Test2::Event and Test2::Event::Generic (GH#1035)
  - Fix broken link in pod for Test2::Manual::Tooling::TestBuilder (GH#1033)
  - Better error message if you use done_testing twice
  - Test2::Compare: Link to base class for Test2::Compare::* (GH#1038)
  - Test2::Manual::Anatomy::Event: Small typo in link (GH#1037)
  - Test2::EventFacet::Info::Table: Fix link to Test2::API::Context (GH#1036)
  - Test2::Manual::Anatomy::Context: Fix link to test2_stack function (GH#1034)
  - Spelling correction (GH#1042)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302212-1" date="1747569600">- Update to 1.302212
  - Add a workaround for Test::Class::Moose</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302213-1" date="1747656000">- Update to 1.302213
  - Fix duplicate words in Changes file (GH#1044)
  - Fix spelling issue (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302214-1" date="1748174400">- Update to 1.302214
  - Fix typo in documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302214-2" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302216-1" date="1763294400">- Update to 1.302216
  - Fix typos
  - Fix undef string bug in Test::Tester</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302218-1" date="1765195200">- Update to 1.302218
  - Add Test2::V1 bundle</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302219-1" date="1765368000">- Update to 1.302219
  - Fix downstream test not to install Test2::Suite
  - Fix documentation mistakes</changelog>
</package>
<package pkgid="634f84eb4b9a51f8a119569e024d327c58bec591285930493d4f32b9cbd27981" name="perl-Test-Specio" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-6" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-7" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1735041600">- Update to 0.49
  - Attempting to import any structured type caused a confusing
    "Can't store CODE items" error
  - Removed the "this is alpha" warning from Specio::Library::Structured; it's
    as production-ready as it's going to get</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1739966400">- Update to 0.50
  - Fixed a bug in the Int type that caused it to accept numbers like
    124512.000000000123, which when stringified, are stringified as integers
    (GH#22)
- Drop EL-7 support
  - Always have List::Util ≥ 1.33
  - Always have Sub::Util
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1750420800">- Update to 0.51
  - Made it possible to force Specio to use only pure Perl dependencies, by
    setting the SPECIO_IMPLEMENTATION environment variable to "PP" (GH#23)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1754913600">- Update to 0.52
  - Really made it possible to force Specio to use only pure Perl dependencies;
    the changes in 0.51 were incomplete, so lots of places still loaded the
    Clone (XS) module (GH#23)
- Package new GOVERNANCE.md, SECURITY.md and SUPPORT.md files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1759924800">- Update to 0.53
  - Fixed a test failure when trying to open $^X on some platforms</changelog>
</package>
<package pkgid="eceb2f2d3deeb9ad26adb52f8649c3ee3e1ba99b4ad801115729935455260161" name="perl-Test-Spelling" arch="noarch">
  <version epoch="0" ver="0.25" rel="13.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-13" date="1685102400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="98d42ebe091402ef63ae073968c6ab96c1c579cfdb17960cae4cfae3b92f89db" name="perl-Test-SubCalls" arch="noarch">
  <version epoch="0" ver="1.10" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10-17" date="1685188800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="11e71195e757d874fa912e1022b990d3f3edc35760ed361a3fe1d867c86ca1ca" name="perl-Test-Synopsis" arch="noarch">
  <version epoch="0" ver="0.17" rel="7.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-1" date="1639396800">- Update to 0.17
  - Mention related module Test::Synopsis::Expectation in docs (GH#22)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-3" date="1647000000">- Work around FTBFS triggered by package note feature</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-7" date="1684238400">- Use SPDX-format license tag
- Bump Test::Spelling version requirement to 0.12 as per upstream</changelog>
</package>
<package pkgid="48bce9cde3398b03ca6b0b4060b1740a8de08fbac05ce98bf614de410d9d3c59" name="perl-Test-Taint" arch="x86_64">
  <version epoch="0" ver="1.08" rel="13.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-10" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-13" date="1687780800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="98a0afa1d1801c65937f9d283b286e0bb29684401251cd11c1c1128aa747ba4f" name="perl-Test-TrailingSpace" arch="noarch">
  <version epoch="0" ver="0.0601" rel="6.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-1" date="1630065600">- Update to 0.0601
  - Split File::TreeCreate off to its own distribution
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-6" date="1685361600">- SPDX migration</changelog>
</package>
<package pkgid="d1a0d41abbfa1887512c5b921d9bd1b7baf6f4816f77b269b88ce678264a98a6" name="perl-Test-TypeTiny" arch="noarch">
  <version epoch="0" ver="2.010001" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.0" date="1744804800">- Update to 2.008001
  Bug Fixes:
  - The Optional type constraint on its own, will now be treated the same as
    Optional[Any]; previously, when used for named parameters, it would fail to
    generate predicate methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.1" date="1745496000">- Fix test compatibility with MooseX-Types 0.51 (GH#176)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-1.0" date="1746100800">- Update to 2.008002
  Bug Fixes:
  - MooseX-Types 0.51 broke Type::Tiny's ability to reliably detect if Moose
    types were being used; this release fixes that</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-2.0" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008003-1.0" date="1756814400">- Update to 2.008003
  Bug Fixes:
  - Make sure methods fake-inherited from Moose (if it's loaded) are a last
    resort
  Other:
  - Slightly streamlined `Type::Tiny::can` and `Type::Tiny::AUTOLOAD`
  - When dumping structures via Data::Dumper (mostly in error messages),
    suppress any warnings Data::Dumper would emit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008004-1.0" date="1760702400">- Update to 2.008004
  Documentation:
  - Type::Tiny pod syntax fix
  Other:
  - Added: Type::Tiny::Duck (used by HasMethods) now includes a
    new_intersection constructor</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008005-1.0" date="1763726400">- Update to 2.008005
  - Minor optimization for Type::Params: sometimes it would construct an
    arrayref of hashref from the slurpy arguments to a function and then check
    that the arrayref it created was an arrayref, or check the hashref it
    created was a hashref; those checks seem unnecessary - if they had ever
    failed it would indicate something deeply wrong with Perl itself, so these
    superfluous checks are now avoided
  - Minor optimization for Type::Params: sometimes it would wrap a 'goto' in a
    'do' block for no reason, which could potentially slow down the call as
    Perl might create a new lexical context unnecessarily; it is unlikely to
    make a measurable difference</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008006-1.0" date="1764244800">- Update to 2.008006
  - Minor optimization for non-XS type check code for Enum types: if there are
    only a small number of valid strings (five or under), check using 'eq' and
    'or' operators instead of compiling a regexp to check against them all at
    once; this can be controlled by passing the 'use_eq' attribute to the
    Type::Tiny::Enum constructor, but is otherwise automatic</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010000-1.0" date="1767182400">- Update to 2.010000
  Added:
  - Added: Add 'check_coerce' method to Type::Coercion
  - Added: Add 'check_coerce' method to Type::Tiny
  - Added: Add environment variables to affect how 'signature_for' checks
    appear in stack traces, debugging, and profiling
  - Added: Type::Params args objects now provide __TO_LIST__, __TO_ARRAYREF__,
    and __TO_HASHREF__ methods
  - Added: Type::Params now provides hooks for the event of wrapping a sub in a
    signature
  Documentation:
  - Update NEWS file
  - Update Type::Tiny::Manual::Policies with planned changes for Type::Tiny 3
  - Add security policy to Type::Tiny::Manual::Policies
  - Fix syntax in some of the documentation for Type::Params
  - Update documentation to potential future changes to coercions in
    Types::Standard
  - Document that Type::Tiny::Enum defines its own sorter
  Test Suite:
  - Skip t/20-modules/Type-Tie/06clone.t on very old Perls
  - Add test suggestion dependencies on Devel::Hide and namespace::clean
  Other:
  - If you lexically import 't' from Type::Registry, then it will no longer be
    tied to the caller's per-package type registry
  - Type::Tiny::Enum now throws an exception if you try to pass a sorter
    coderef to the constructor
  - Minor optimization to avoid wrapping certain inlined checks in do {...}
    blocks</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010001-1.0" date="1767787200">- Update to 2.010001
  - Fix for $LIST_SEPARATOR changes breaking Type::Coercion, Types::Common,
    Types::Standard</changelog>
</package>
<package pkgid="0b35616bc965bdd28ebc38543eb8af86d4e17e0b7f108a2ddbb749b1ce8e0b48" name="perl-Test-Unit-Lite" arch="noarch">
  <version epoch="1" ver="0.12.02" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.12.02-1" date="1665144000">- Make rpm version reflect upstream version better (rhbz#2132720)
- Assume build with rpm ≥ 4.9
- Use SPDX-format license tag
- Use %license unconditionally
- Use mktemp to create GNUPGHOME</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.12.02-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="76c6fb311e07a01f7ccaed5fd9d031eb7d06150ad426d3f9c12d17242caa4c2c" name="perl-Test-UseAllModules" arch="noarch">
  <version epoch="0" ver="0.17" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-25" date="1685448000">- Use SPDX-format license tag
- Line endings don't need fixing</changelog>
</package>
<package pkgid="3216212afed3d3ec604faa29fa3b86708cffa488aa5347fbc3bbdd9a314ebe27" name="perl-Test-Valgrind" arch="noarch">
  <version epoch="0" ver="1.19" rel="23.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-22" date="1684324800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-23" date="1690718400">- Fix FTBFS in Fedora 39 due to failing t/20-bad.t (rhbz#2222854)</changelog>
</package>
<package pkgid="ff86c0179adef815b07f0f5b8b0df2e1096d9e15c841f2a2edbbb0b65a35fdde" name="perl-Test-Vars" arch="noarch">
  <version epoch="0" ver="0.017" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-9" date="1685448000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1726574400">- Update to 0.017
  - Support new opcodes introduced in 5.37 development cycle: PADSV_STORE
    and AELEMFASTLEX_STORE (GH#52)
  - Return build system to ExtUtils::MakeMaker (GH#54)
- Switch to ExtUtils::MakeMaker flow</changelog>
</package>
<package pkgid="c1e2cadf5a11db40929fc15ff2f13d4fde80a616e274165d0a359ca92ebb8130" name="perl-Test-Version" arch="noarch">
  <version epoch="0" ver="2.09" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.09-21" date="1685534400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f20cdd4c58b96977718cb15416a07146684465c0ca9b3a9f06d81426225a90b0" name="perl-Test-Warn" arch="noarch">
  <version epoch="0" ver="0.37" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-1" date="1660392000">- Update to 0.37
  - Allow duplicate warnings when using warnings_exist (GH#8)
- Use author-independent source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-2" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="ac68c3ce8c3a9f8a73d9f68907bda02517099b74a54e801f83178699d929c675" name="perl-Test-Warnings" arch="noarch">
  <version epoch="0" ver="0.038" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.031-6" date="1684324800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.032-1" date="1696161600">- Update to 0.032
  - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
    temporarily turning failures into reports</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.033-1" date="1706011200">- Update to 0.033
  - Add Test2 compatibility in the test triggered by done_testing()
  - New long-awaited feature (!!!) "allow_patterns", to either
    temporarily or globally exempt particular warning patterns</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.034-1" date="1735905600">- Update to 0.034
  - Fix Test2 compatibility for done_testing()
  - Test2::Warnings added as a simple wrapper (for now)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.036-1" date="1736078400">- Update to 0.036
  - Allow tests to pass even when Import::Into is not installed (CPAN RT#158296)
  - Add backcompat shim for cases where Test::More is loaded in tests after
    Test::Warnings
  - Avoid redefinition warnings when $^W is enabled in tests (CPAN RT#158297)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.037-1" date="1736164800">- Update to 0.037
  - Remove unneeded use of Import::Into
  - Fix for tests that invoke Test::Warnings-&gt;import directly</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.038-1" date="1738497600">- Update to 0.038
  - Refrain from swapping out done_testing method if :no_end_test is configured</changelog>
</package>
<package pkgid="c58e24e5eea69c67b5e8483614032758834f45001e40738b478e97425e9032b9" name="perl-Test-Without-Module" arch="noarch">
  <version epoch="0" ver="0.23" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-1" date="1670846400">- Update to 0.21
  - Harden test suite against changed error message coming with 5.38
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-1" date="1720267200">- Update to 0.22
  - Fix test suite to not skip a failing test
- License changed to Artistic-2.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1721044800">- Update to 0.23
  - Lower minimum required Perl version back to 5.006 (GH#5)</changelog>
</package>
<package pkgid="ff1ad9e361c22f8ad4c9c99786dcaa74f4eba777cea45056f56180c798e70ae5" name="perl-Test-WriteVariants" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1687694400">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="01a7c6c2a363a7ab3b0cd2baeeec53c204dd5139c256be1fdcde47b8accab21c" name="perl-Test-YAML" arch="noarch">
  <version epoch="0" ver="1.07" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.07-16" date="1685534400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="6c2dd8a7d4172cfff4cca14028f7f27deb861e22731a8028dbf5ca5a95dd481b" name="perl-Test-YAML-Valid" arch="noarch">
  <version epoch="0" ver="0.04" rel="39.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-39" date="1685534400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="d9f7ab416258a51c0a344f09f59d427db08592201f64f6a75b622d04bf3961e2" name="perl-Test-utf8" arch="noarch">
  <version epoch="0" ver="1.03" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-10" date="1687780800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-1" date="1731672000">- Update to 1.03
  - Fix tests to adapt to Perl removing apostrophe as package separator
    (CPAN RT#154915)
  - Upgraded distro files like packaged Module::Install version and META.yml,
    to avoid other looming Perl deprecation issues
- Switch source URL from cpan.metacpan.org to www.cpan.org to work around
  ongoing issues with metacpan</changelog>
</package>
<package pkgid="d20adf4596e31fd5dda99c83db693f1fc0692d124532ac5dad739542f0573618" name="perl-Test2-Plugin-NoWarnings" arch="noarch">
  <version epoch="0" ver="0.10" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-9" date="1684324800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-1" date="1712491200">- Update to 0.10
  - Previously, when tests were run via prove without the verbose flag and
    there was a warning that caused a test failure, there was no output
    indicating that a warning caused the failure; this has now been corrected
    and you'll see output that includes "Unexpected warning"</changelog>
</package>
<package pkgid="56a4ec0f978ed11de7bdca115f94378e6872dc0f7df6fe334e22d9cd068501bf" name="perl-Test2-Tools-Explain" arch="noarch">
  <version epoch="0" ver="0.02" rel="12.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-12" date="1685534400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f8d9dd84326555acd2020414ab5d26a279e9f76d94ee1e4156f07297149d86bc" name="perl-Text-CSV_XS" arch="x86_64">
  <version epoch="0" ver="1.62" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-2" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1" date="1718712000">- Update to 1.55 (rhbz#2292859)
  - More fixes for strict under bind_columns (GH#54)
  - Strict won't hide previous error (GH#56)
  - Update to Devel::PPPort-3.72</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1" date="1723377600">- Update to 1.56 (rhbz#2303862)
  - Yet another strict/comment_str conflict (GH#57)
  - Strict affected by column_names</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1" date="1731412800">- Update to 1.57 (rhbz#2325504)
  - Add on_error callback to csv()
  - Retain runtime error from csv()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1" date="1735560000">- Update to 1.58 (rhbz#2334923)
  - Add strict_eol (warnings default in csv())
  - Add XS line number in errors
  - Add streaming support (not set in stone)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1" date="1736078400">- Update to 1.59 (rhbz#2335660)
  - Fixed EOL test for Windows with crnl layer
  - It is 2025</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1" date="1738324800">- Update to 1.60 (rhbz#2343165)
  - Add SECURITY.md
  - CR/NL/CRNL inside quoted fields not affected by strict_eol
  - Fix incorrect error 2014 (GH#62)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-2" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1753617600">- Update to 1.61 (rhbz#2383739)
  - Add love letter to CSV from xan project with reference
  - Bugtracker to Github (long overdue) (GH#63)
  - Update to Devel::PPPort-3.73</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.62-1" date="1777464000">- Update to 1.62 (rhbz#2463743)
  - It is 2026
  - Fix possible stack corruption (GH#65, CVE-2026-7111)</changelog>
</package>
<package pkgid="247cb3fbce20c80b344efda16ac5f78a3817d880a368bb1bec64a4679833d12e" name="perl-Text-Diff" arch="noarch">
  <version epoch="0" ver="1.45" rel="18.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-18" date="1686225600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="7e17937293a73f78c6b98395d0cd118ced2aa790d7d6d1eaffa522e72ff9ff60" name="perl-Text-Glob" arch="noarch">
  <version epoch="0" ver="0.11" rel="20.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-20" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5e50f12c44295ff089d2a272a4d053d6b1e7d4facba4ec2676ee8bc000ab444f" name="perl-Text-Haml" arch="noarch">
  <version epoch="0" ver="0.990118" rel="21.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.990118-21" date="1689595200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="cb1a407e7e08cc3abd44edeb0395731e4a5278959b770bac462dc86f566ded7d" name="perl-Text-Hunspell" arch="x86_64">
  <version epoch="0" ver="2.16" rel="3.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.14-25" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.16-1" date="1657886400">- Update to 2.16
  - Documentation improvements (GH#16, GH#18)
  - Add LICENSE file (GH#14)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.16-3" date="1685534400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with ExtUtils::MakeMaker &lt; 6.52</changelog>
</package>
<package pkgid="459c64d4dff1c3bd83dda838a44c9b88410be5131b37a3563d1775e2fe763b20" name="perl-Text-Template" arch="noarch">
  <version epoch="0" ver="1.61" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1" date="1630843200">- Update to 1.60
  - Fix another POD syntax error
- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-2" date="1647604800">- Work around package note files breaking t/author-signature.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1651233600">- Update to 1.61
  - Skip taint tests if perl was compiled with taint disabled (GH#20)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-2" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7f74b991af9fd9888286904bfd864a8ed27e5e819499998374c01cef4c60ee4c" name="perl-Text-Trac" arch="noarch">
  <version epoch="0" ver="0.24" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-2" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="a16c2519a4982895263f289b2bd4747fa01ed918e0068516afcd47197dec2402" name="perl-Tie-IxHash" arch="noarch">
  <version epoch="0" ver="1.23" rel="35.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-35" date="1686225600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9c815f3191972b13ddb400d8c3a43dd210d1ea8b363fcaa774a5c29e61bd2225" name="perl-Tie-RefHash-Weak" arch="noarch">
  <version epoch="0" ver="0.09" rel="41.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-41" date="1685620800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1fcf0c912c4f17ad0bed1e4b95ad83e76c696ffba7401f4ec9ef6e74a19c97a9" name="perl-Tie-ToObject" arch="noarch">
  <version epoch="0" ver="0.03" rel="44.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-44" date="1682596800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c4689a76df82b66d7097c068b1c2bc29a294741efb2a8c3ff7f2f83fc1ffc5a0" name="perl-Time-y2038" arch="x86_64">
  <version epoch="0" ver="20100403" rel="31.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20100403-29" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20100403-31" date="1685620800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0243ca86da9c1694bcd39287854bd8e40ed1dad3737fb4ab0c2b23046a6e76b2" name="perl-TimeDate" arch="noarch">
  <version epoch="1" ver="2.35" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.34-1" date="1772366400">- Update to 2.34
  - Increase coverage in documentation
  - Refactor: Extract _build_lookups helper, remove hash-building duplication
  - Correct language data bugs and minor code review fixes
  - Fix up utf8 and add tests
  - Use Dist::Zilla for the distro
  - Rebase: Apply review feedback on GH#49 and GH#52
  - Fix: Uncomment Indian Standard timezone (IST)
  - Feature: Support boost C++ timestamp format (%Y-%b-%d %H:%M:%S.%f)
  - Correct typos across documentation and comments
  - Stop using 'use vars'
  - Remove limitation from Date::Parse
  - Create Arabic.pm
- Use %{make_build} and %{make_install}
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.35-1" date="1774180800">- Update to 2.35
  - Test: Document and pin CPAN RT#84075/GH#12 fix in regression suite
  - Fix: Add NST, NFT, and NDT (Newfoundland) timezone support
  - Fix: Add ICT and PHT timezone support
  - Fix: Restore rebase regressions and clarify first-century limitation
  - Fix: Normalize two-digit years in str2time to avoid Time::Local windowing
    mismatch
  - Fix: Use standard 2-letter German weekday abbreviations
  - Fix: Detect timegm/timelocal overflow for far-future dates (CPAN RT#88777)
  - Test: Add regression tests for CPAN RT#88777 (negative epoch for far-future
    dates)
  - Fix: Use stored epoch in format_Z/format_z to fix DST fall-back timezone
    name
  - Fix: Document MSK timezone history and add regression test (CPAN RT#98949)
  - Fix: strftime %s with timezone now returns correct epoch (CPAN RT#52387)
  - Test: Add POD validity regression test for CPAN RT#53557
  - Fix: Include day in year-inference for dates without an explicit year
  - Fix: Document MSK timezone history and add regression test (CPAN RT#81350)
  - CI: Install Pod::Checker via cpm in Linux CI
  - Docs: Add SECURITY.md with vulnerability reporting policy
  - Test: Add regression tests for CPAN RT#57800/GH#3 (numeric m/d/yyyy
    pre-1970 dates)
  - Fix: Normalize year offset for dates before 1901 in strptime
    (CPAN RT#106105)
  - Fix: Reject timezone-only inputs in strptime (CPAN RT#70650)
  - Test: Add failing tests for CPAN RT#70650 (ludicrous date parsing)
  - Fix: Prevent negative month from strptime for 6-digit inputs like '199001'
  - Test: Add Portuguese format and round-trip tests from GH#61
  - Fix: Treat number &gt; 31 after month name as year, not day (GH#2)
  - Fix: Translate timezone abbreviations (%Z) in language-specific formatting
  - Fix: tz_name() offset in seconds was treated as minutes (CPAN RT#59298)
  - Docs: Fix ISO-8601 example date in Date::Parse POD (GH#6)
  - Feat: Add optional LANGUAGE parameter to time2str()
  - Feat: Allow str2time() to accept a custom reference epoch (CPAN RT#64789)
  - Docs: Clarify strptime() return format for ISO 8601 dates (GH#44)
  - Feat: Add Portuguese language module
  - Fix: Prefer CEST over MEST as canonical Central European Summer Time name
  - Fix: Add ICT and PHT timezone abbreviations to Time::Zone (CPAN RT#123247)
  - Fix: Standardize Greek.pm to use native Unicode instead of \x{} escapes
  - Test: Add regression test for CPAN RT#105031/GH#17 (1965-12-31 maps to 2065)
  - Fix: Declare Carp as runtime prerequisite in Makefile.PL
  - Fix: Infer current year for future months when no year given (CPAN RT#92611)
  - Test: Add regression tests for CPAN RT#53413 (4-digit year mangling)
  - Fix: Handle leap day in year-only date parsing test
  - Fix: Support IANA timezone names in tz2zone and tz_offset (CPAN RT#76968)
  - Fix: Preserve comma as ISO 8601 decimal separator in strptime
  - Fix: Add French day ordinal suffix in format_o
  - Fix: Make tz_name tests deterministic across DST transitions</changelog>
</package>
<package pkgid="c3a761776b538b425e27624c0f0645916b5cf13765ec3f410f85a56103dc359a" name="perl-Tree-DAG_Node" arch="noarch">
  <version epoch="0" ver="1.35" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32-7" date="1685620800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33-1" date="1743336000">- Update to 1.33
  - Replace the discouraged File::Slurp::Tiny with File::Slurper
  - Add a security policy file SECURITY.md
  - Update Makefile.PL to include both ExtUtils::MakeMaker and perl
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34-1" date="1745841600">- Update to 1.34
  - Fix test failures due to line endings on Windows (GH#4)
  - The 2 test files t/tree.with*.txt ship as ISO-8859-1, while
    t/tree.utf8.attributes.txt ships as UTF-8; so...
    - Don't explicitly use UTF-8 encoding in DAG_Node.pm's sub read_tree();
      rather, use a regexp to standardize line endings after reading, and
      likewise, in t/read.tree.t, do the same
    - Un-comment the 2 extra tests at the end of t/read.tree.t; specifically,
      line 50 was 'for (qw/utf8/)# with without/)' and now says
      'for (qw/utf8 with without/)'
    - Reformat test data files t/tree.*.attributes.txt; this was done with the
      new files share/read.write.tree.(pl, sh), and it was done because some of
      the test data files had been written by old code with slightly different
      indenting
  - Add a new test data file, t/metag.cooked.tree.txt; it's a copy of
    MarpaX::Grammar::Parser's share/metag.cooked.tree, and the test program
    t/read.tree.t was edited to include this new file
  - Patch tree::DAG_Node.format_node() to output 'Attributes: {}' and not just
    'Attributes:' when the user does not want attributes reported; this makes
    the code match the sample trees shipped in t/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.35-1" date="1747051200">- Update to 1.35
  - Change sub hashref2string() so it does not generate an error or warning when
    the node or node name is '' (empty string), undef or 0 (zero)
  - Change test data so that when stringifying a tree, node names without
    attributes are output as (e.g.) 'lexeme: Attributes{}' rather than as just
    'lexeme'; this was supposed to have been done in 1.34, but was not done
    properly
  - The previous point also affects the related module Data::RenderAsTree,
    which ships with a range of test programs and sample scripts that futher
    exercise these features; the point of these latter samples is so that you
    can use them without having to fiddle about removing the test code in the
    corresponding test scripts</changelog>
</package>
<package pkgid="2d336fe95b3134038d0bfa133346a3531c4cdd65edd667f61129ac0ecf0b4b55" name="perl-Try-Tiny" arch="noarch">
  <version epoch="0" ver="0.32" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-5" date="1680523200">- Avoid use of deprecated patch syntax
- Note that license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-6" date="1689249600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.32-1" date="1723896000">- Update to 0.32
  - Skip given, when tests on perls ≥ 5.41.3 which removed these constructs</changelog>
</package>
<package pkgid="36710f62a9895d3d72ee99568bbc70b55071f2ccea1babc59dbd44dcef6b1ac7" name="perl-Type-Tiny" arch="noarch">
  <version epoch="0" ver="2.010001" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.0" date="1744804800">- Update to 2.008001
  Bug Fixes:
  - The Optional type constraint on its own, will now be treated the same as
    Optional[Any]; previously, when used for named parameters, it would fail to
    generate predicate methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.1" date="1745496000">- Fix test compatibility with MooseX-Types 0.51 (GH#176)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-1.0" date="1746100800">- Update to 2.008002
  Bug Fixes:
  - MooseX-Types 0.51 broke Type::Tiny's ability to reliably detect if Moose
    types were being used; this release fixes that</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-2.0" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008003-1.0" date="1756814400">- Update to 2.008003
  Bug Fixes:
  - Make sure methods fake-inherited from Moose (if it's loaded) are a last
    resort
  Other:
  - Slightly streamlined `Type::Tiny::can` and `Type::Tiny::AUTOLOAD`
  - When dumping structures via Data::Dumper (mostly in error messages),
    suppress any warnings Data::Dumper would emit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008004-1.0" date="1760702400">- Update to 2.008004
  Documentation:
  - Type::Tiny pod syntax fix
  Other:
  - Added: Type::Tiny::Duck (used by HasMethods) now includes a
    new_intersection constructor</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008005-1.0" date="1763726400">- Update to 2.008005
  - Minor optimization for Type::Params: sometimes it would construct an
    arrayref of hashref from the slurpy arguments to a function and then check
    that the arrayref it created was an arrayref, or check the hashref it
    created was a hashref; those checks seem unnecessary - if they had ever
    failed it would indicate something deeply wrong with Perl itself, so these
    superfluous checks are now avoided
  - Minor optimization for Type::Params: sometimes it would wrap a 'goto' in a
    'do' block for no reason, which could potentially slow down the call as
    Perl might create a new lexical context unnecessarily; it is unlikely to
    make a measurable difference</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008006-1.0" date="1764244800">- Update to 2.008006
  - Minor optimization for non-XS type check code for Enum types: if there are
    only a small number of valid strings (five or under), check using 'eq' and
    'or' operators instead of compiling a regexp to check against them all at
    once; this can be controlled by passing the 'use_eq' attribute to the
    Type::Tiny::Enum constructor, but is otherwise automatic</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010000-1.0" date="1767182400">- Update to 2.010000
  Added:
  - Added: Add 'check_coerce' method to Type::Coercion
  - Added: Add 'check_coerce' method to Type::Tiny
  - Added: Add environment variables to affect how 'signature_for' checks
    appear in stack traces, debugging, and profiling
  - Added: Type::Params args objects now provide __TO_LIST__, __TO_ARRAYREF__,
    and __TO_HASHREF__ methods
  - Added: Type::Params now provides hooks for the event of wrapping a sub in a
    signature
  Documentation:
  - Update NEWS file
  - Update Type::Tiny::Manual::Policies with planned changes for Type::Tiny 3
  - Add security policy to Type::Tiny::Manual::Policies
  - Fix syntax in some of the documentation for Type::Params
  - Update documentation to potential future changes to coercions in
    Types::Standard
  - Document that Type::Tiny::Enum defines its own sorter
  Test Suite:
  - Skip t/20-modules/Type-Tie/06clone.t on very old Perls
  - Add test suggestion dependencies on Devel::Hide and namespace::clean
  Other:
  - If you lexically import 't' from Type::Registry, then it will no longer be
    tied to the caller's per-package type registry
  - Type::Tiny::Enum now throws an exception if you try to pass a sorter
    coderef to the constructor
  - Minor optimization to avoid wrapping certain inlined checks in do {...}
    blocks</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010001-1.0" date="1767787200">- Update to 2.010001
  - Fix for $LIST_SEPARATOR changes breaking Type::Coercion, Types::Common,
    Types::Standard</changelog>
</package>
<package pkgid="41a95c45e71e6c38d0090d29bdf8b2bba1b71504336528838f3be4e4a04569a4" name="perl-Types-Path-Tiny" arch="noarch">
  <version epoch="0" ver="0.006" rel="17.fc29"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.006-12" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-13" date="1636977600">- Import from Fedora</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-17" date="1689768000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="22bc28174a9952b94656ac1624ee8f9f339b1d3f3752b73035112364ff09885f" name="perl-Types-Serialiser" arch="noarch">
  <version epoch="0" ver="1.01" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.01-8" date="1684324800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="916d256d937d8fc50768ecf668c4bd03bf682dab7c798e0eea6dcc1dbfde75ec" name="perl-UNIVERSAL-require" arch="noarch">
  <version epoch="0" ver="0.19" rel="7.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.19-7" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="d935697debddab27382f9d32f35b77c494da33b0a5d97a4f1b119c85dffd4928" name="perl-URI-cpan" arch="noarch">
  <version epoch="0" ver="1.009" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-1" date="1640088000">- Update to 1.008
  - Fix prereqs to rely on URI, not the unindexed URI::_generic
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-4" date="1685620800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.009-1" date="1693742400">- Update to 1.009
  - Updates to dist metadata only</changelog>
</package>
<package pkgid="5dfe2e32bc282bb421f7b671dfb0a6064d0710b104e6234790aca86ae35e81d5" name="perl-Unicode-CheckUTF8" arch="x86_64">
  <version epoch="0" ver="1.03" rel="42.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-37" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-39" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-41" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-42" date="1726574400">- Correct URL
  (https://src.fedoraproject.org/rpms/perl-Unicode-CheckUTF8/pull-request/1)
- Use SPDX-format license tag
  (https://src.fedoraproject.org/rpms/perl-Unicode-CheckUTF8/pull-request/2)</changelog>
</package>
<package pkgid="eeae7e05fc54e3f145c05cafbdb9f1bab9e78aa159af375cc952c75146b8836d" name="perl-Unicode-Map" arch="x86_64">
  <version epoch="0" ver="0.112" rel="59.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-57" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-59" date="1685620800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="d4da7611316a89a3fe785ac367ee318f456315ad3fa8e2ae94e2b213b09d941e" name="perl-Unicode-Map8" arch="x86_64">
  <version epoch="0" ver="0.13" rel="43.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-41" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-43" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b9c4401463b6aa6e347c8a6fdbb18836a79f29b82984f9228334183874240bda" name="perl-Unicode-MapUTF8" arch="noarch">
  <version epoch="0" ver="1.14" rel="10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.14-10" date="1685707200">- SPDX license migration</changelog>
</package>
<package pkgid="ce09702dbe0d08f3ee5c93a58f3ad7da52a4ce3fc38aa7cf992aee4a1d82e342" name="perl-Unicode-String" arch="x86_64">
  <version epoch="0" ver="2.10" rel="22.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.10-20" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.10-22" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="0d9a39c14c8789e273265dbca777bf479593b104b823f75fe1cfdea44980a516" name="perl-Unicode-UTF8" arch="x86_64">
  <version epoch="0" ver="0.70" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-25" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-28" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-1" date="1766404800">- Update to 0.63
  - Remove the non-portable tests for Perl's "super" code points; testing
    values beyond 0x7FFF_FFFF isn’t necessary
  - Documentation typo corrections</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-1" date="1771848000">- Update to 0.64
  - Unicode::UTF8 now allows noncharacters; they receive no special handling
    and are processed like any other code point
  - According to Corrigendum #9, noncharacters (the values U+nFFFE and U+nFFFF
    (where n is from 0 to 10^16) and the values U+FDD0..U+FDEF) are permanently
    reserved but should be allowed in interchange:
    https://www.unicode.org/versions/corrigendum9.html</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.65-1" date="1771934400">- Update to 0.65
  - C99-compliant compiler is now required for Unicode::UTF8
  - Scan 16 bytes at a time to detect non-ASCII bytes, falling back to sequence
    validation for non-ASCII input; this approach resulted in a 900% throughput
    improvement on English text and a 200% improvement on Swedish text compared
    with Encode.pm</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-1" date="1772020800">- Update to 0.66
  - Rewrote the UTF-8 validator using a shift-based DFA from
    https://github.com/chansen/c-utf8-valid by the same author; benchmarks show
    up to 10x faster decoding compared with Encode.pm</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.68-1" date="1772452800">- Update to 0.68
  - Fix SIMD feature gating for x86; avoid SSE2 intrinsics on non-SSE2 i686
    builds
  - Use Dist::Zilla for the distro
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.70-1" date="1774008000">- Update to 0.70
  - Update the c-utf8 library code: improved GCC code generation, including
    with -O2, resulting in higher throughput
  - Use utf8_check_ascii with a 16-byte ASCII fast path</changelog>
</package>
<package pkgid="8368c8d3f82acc2cb558db6475029bc941158bd3da62a96b19cf8c47923caeb1" name="perl-Unix-Syslog" arch="x86_64">
  <version epoch="0" ver="1.1" rel="45.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-40" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-43" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-45" date="1684411200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="600e862cbb291ac05c663383ab269f5144d96ebdf72f5d7d4a1f5ce0cb796d01" name="perl-Variable-Magic" arch="x86_64">
  <version epoch="0" ver="0.64" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-16" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-1" date="1663761600">- Update to 0.63
  - Add support for 5.37.3's PADSV_STORE optimization; B.pm-related tests have
    been taught about this new thing (CPAN RT#144052)
  - Updated contact information
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-3" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-1" date="1710849600">- Update to 0.64
  - This is a maintenance release; the code contains no functional change
  - Contributing guidelines are now listed in the new CONTRIBUTING file
  - Fix for t/18-opinfo.t broken under blead (CPAN RT#151104)</changelog>
</package>
<package pkgid="23cd33c7d1c4195166096d35490ebe5d6aac20650c35387aad20ca75870bccef" name="perl-Variable-OnDestruct" arch="x86_64">
  <version epoch="0" ver="0.09" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-1" date="1709121600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1711540800">- Update to 0.08
  - Revert not catching exceptions from destruct handlers
  - Restore functionality on perl ≤ 5.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-1" date="1711800000">- Update to 0.09
  - Further fix on older perls</changelog>
</package>
<package pkgid="c0bda6bc2707e8f49834589896515b3cf819a313c77e722bd6f137ffb37f3ffd" name="perl-Version-Requirements" arch="noarch">
  <version epoch="0" ver="0.101023" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101023-25" date="1685707200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="8b03abdf703870e6ae4d2f2319a99194c34c964b4dcadc7b1c5d8073a65bd271" name="perl-WeakRef" arch="x86_64">
  <version epoch="0" ver="0.01" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-24" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-25" date="1687521600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="861de3c631b9f91ce6faa1f3f382df6bd59706e826c56679434e9091f5e2c03b" name="perl-XML-DTDParser" arch="noarch">
  <version epoch="0" ver="2.01" rel="34.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.01-34" date="1687521600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f1ac6601187ef9ca42116d5583b96ec7546ea3c8b2a42e6cf132a6c4eb14871a" name="perl-XML-LibXML" arch="x86_64">
  <version epoch="1" ver="2.0213" rel="1.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0210-2.0" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0210-5.0" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0212-1.0" date="1779278400">- Update to 2.0212
  Security/Bug Fixes:
  - Prevent out-of-bounds UTF-8 read in domParseChar by replacing it with
    libxml2's xmlValidateName; truncated multi-byte sequences could cause heap
    reads past the NUL terminator across five DOM entry points (createElement,
    createAttribute, setNodeName, etc.) (GH#146, GH#149)
  - Enforce no_network even when a global externalEntityLoader is set;
    previously, XML_PARSE_NONET was silently ignored once a global callback was
    installed, enabling SSRF in multi-module applications that combine a
    third-party entity loader with no_network parsers (GH#133, GH#143)
  - Prevent integer overflow in SAX CBuffer length tracking; total character
    data exceeding INT_MAX (~2GB) overflowed the accumulator causing xmlMalloc
    to under-allocate and the subsequent memcpy to write past the buffer
    (GH#135, GH#142)
  - Proper lifecycle management for externalEntityLoader: the global loader can
    now be cleared or replaced safely, the previous handler SV is no longer
    leaked, the returned value is a safe copy rather than the internal global
    SV, and per-parser ext_ent_handler state is separated from the global slot
    (GH#138)
  - Add NULL checks after xmlMalloc returns in SAX CBuffer operations,
    converting OOM segfaults into catchable Perl exceptions (GH#136, GH#140)
  - Add NULL check after xmlCopyNamespace in _domReconcileNs, matching the
    existing guard in _domReconcileNsAttr (GH#137, GH#139)
  - Plug 11 memory leaks across XS/C code, including setBaseURI,
    URI/documentURI accessors, load_catalog, PSaxCharactersFlush,
    createAttributeNS, XPathContext::_find, _newForIO, _toStringC14N,
    lookupNamespacePrefix, _setNamespace, and the generic XPath extension
    function dispatcher (GH#131, GH#132)
  - Handle Apple's local libxml2 patch where xmlSAX2ResolveEntity throws on a
    NULL URI, so t/13dtd.t no longer dies on macOS (GH#94)
  - Skip t/50devel.t when mem_used() reports 0 bytes, which happens on Apple's
    libxml2 (system malloc bypasses the tracking wrappers)
    (CPAN RT#165193, GH#94)
  - Ship POD files in the CPAN tarball
    - The per-class .pod files generated from docs/libxml.dbk were gitignored,
      and nothing in the dist chain was producing them, so recent tarballs
      shipped without POD
    - The .pod files are now tracked in git (bison-style), so 'make dist'
      includes them via MANIFEST and the documentation reaches CPAN consumers
      again
    - Also eliminates the bootstrap problem of needing XML::LibXML installed to
      build XML::LibXML's docs, and silences the "kit incomplete" warning from
      'perl Makefile.PL' on a fresh checkout
  Improvements:
  - Resolve Windows CI test failures and compiler warnings: use the file size
    (-s) for the byteConsumed test instead of a hardcoded 488 (CRLF inflates
    the file to 507 bytes), use Perl UV/PTR2UV in PmmRegistryName to avoid
    pointer truncation under Win64 LLP64, and use const xmlError* for
    xmlCtxtGetLastError to match the libxml2 2.12+ API (GH#122)
  - Silence macOS build warnings cleanly by gating the libxml2 memory tracking
    API behind a HAVE_LIBXML_MEMORY_DEBUG feature macro
    - The deprecated calls are no longer compiled on systems where the API is
      gone (Apple SDK, libxml2 &gt;= 2.14), mem_used is only exported when
      actually defined, and t/50devel.t skips with a clear reason
    - Also strip the bogus "-L/lib" entries Alien::Base::Wrapper injects into
      LDFLAGS on macOS (GH#127)
  - Add a minimal hello-world HTML example (example/hello-world.pl) and add
    createInternalSubset("html", ...) to both HTML examples so they emit a
    proper &lt;!DOCTYPE html&gt; declaration (GH#66, GH#121)
  - Standardize XPath parameter naming to $xpath_expression throughout the
    DocBook source, matching the XML::LibXML::XPathExpression class name
    (GH#64, GH#125)
  - Update outdated and dead references in README.md: point repository URLs at
    the canonical cpan-authors/XML-LibXML home, drop the defunct ActiveState
    mailing list, replace the long Windows nmake recipe with a Strawberry Perl
    note, refresh the macOS section, and bring the Package History up to date
  - Remove the stale "Known Issues" note about push-parser leaks; the leaks it
    referenced were fixed by Nick Wellnhofer in 2014
  - Point distribution metadata at the cpan-authors GitHub repo and add an
    explicit bugtracker entry so MetaCPAN's "Issues" link goes to GitHub Issues
    instead of falling back to rt.cpan.org
  - Add NamedNodeMap.pod to MANIFEST so the generated POD ships in the CPAN
    tarball; the L&lt;XML::LibXML::NamedNodeMap&gt; link in Node.pod now resolves on
    MetaCPAN (GH#115, GH#118)
  - Update ppport.h and adopt its suggestions to reduce build issues
  - Fix test suite with libxml2 2.13.0 and 2.14.0
  - Remove tests that disable line numbers (always enabled since libxml2 2.15.0)
  - Use 'our $VERSION' instead of 'use vars'
  - Fix formatting in docs/libxml.dbk (GH#85)
  Maintenance:
  - Modernize the CI workflow with a dynamic Perl version matrix, centralized
    cpanfile, and updated action versions (GH#108)
  - Use cpanm instead of cpm for the Linux CI matrix so jobs on Perl &lt; 5.24
    (down through 5.8) no longer fail to install dependencies (GH#117, GH#119)
  - Expand CI platform coverage: FreeBSD 14.2, OpenBSD 7.6, NetBSD 10.1,
    Strawberry Perl on Windows, Fedora 43 container, AddressSanitizer,
    Devel::Cover + Codecov coverage upload, and a downstream XML::LibXSLT
    compatibility job (GH#120)
  - Fix BSD CI: use the correct OpenBSD package name ('libxml', not 'libxml2')
    and install Perl dependencies explicitly instead of relying on META.json
    autodiscovery (GH#124)
  - Parallelize 'make' compilation across CI jobs with platform-appropriate CPU
    detection (GH#128)
  - Temporarily disable OpenBSD 7.6 CI due to unreliable runners (GH#130)
  - Re-enable OpenBSD CI on version 7.8 once the runner situation stabilized
    (GH#144)
  - Add a CLAUDE.md describing project layout, build/test commands, libxml2
    version landscape, and coding conventions (GH#116)
  - Add contributing guidelines covering CI, scope, MANIFEST, and
    version/release handling (GH#126)
  - Add AI_POLICY.md documenting how AI tools are used (and not used) in this
    project
  - Add MANIFEST.SKIP so local files (.hgignore, .tidyallrc, CLAUDE.md, etc.)
    are kept out of 'make manifest' output
  - Drop unused dev helper ('tester.sh') and the stale TODO file
  - Rename README to README.md and remove the obsolete Travis CI references
  - Add a 'pod-drift' CI job that runs 'make pod_docs' and fails on any diff,
    catching forgotten POD regenerations after edits to docs/libxml.dbk
  - Move xmllibxmldocs.pl from example/ to scripts/; it is a maintenance tool
    that emits source files (POD), not a usage example of XML::LibXML; scripts/
    already houses similar build/dev tooling
  - Skip t/release-kwalitee.t outside a dist tarball
    - The Test::Kwalitee 'has_meta_yml' check was failing under 'make test' in
      author mode because META.yml is only generated by 'make dist'
    - The test now skips cleanly when META.yml is absent and still runs the
      full 18-check suite under 'make disttest' against the unpacked tarball
- Re-enable threads tests</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0213-1.0" date="1779364800">- Update to 2.0213
  Security/Bug Fixes:
  - Revert GH#143 per the libxml2 author's request (GH#168)
    - GH#143 added a URL-scheme filter inside LibXML_load_external_entity and
      removed the EXTERNAL_ENTITY_LOADER_FUNC == NULL guards on the five
      Schema/RelaxNG NONET swap sites, on the premise that no_network on one
      parser should override a user-installed global externalEntityLoader
    - Nick Wellnhofer clarified that this contradicts upstream intent:
      XML_PARSE_NONET only polices libxml2's default loader; a user who
      installs a global loader is explicitly opting out of that policy, and the
      http/https/ftp allowlist was never a real security boundary
    - Reverted in full; GH#138's lifecycle/memory-safety fixes are kept
  Bug Fixes:
  - Fix latent SEGV in _externalEntityLoader
    - The XS code returned &amp;PL_sv_undef as RETVAL when no previous global
      loader existed
    - Since xsubpp auto-mortalizes SV* RETVAL, each call mortalized the
      PL_sv_undef singleton, eventually driving its refcount negative and
      producing "Attempt to free unreferenced scalar" followed by SEGV under
      repeated invocation
    - Now returns newSV(0) so RETVAL is always a fresh refcount-1 SV safe to
      mortalize
    - The bug shipped in 2.0212 with GH#138's lifecycle fixes; this is a
      single-line correction to that code path
  Maintenance:
  - Add t/49global_extent_with_no_network.t, 17 subtests locking in the
    entity-loader contract restored by the GH#168 revert: a user-installed
    global loader takes precedence over no_network across plain XML parse,
    RelaxNG, and XML Schema, while no_network without any loader still blocks
    via libxml2's default loader
  - Document the entity-loader contract in CLAUDE.md ("Entity loaders,
    no_network, and XML_PARSE_NONET") plus a "Verifying audit-flagged
    security findings" checklist to keep pattern-matched "security fixes"
    like GH#143 from shipping again</changelog>
</package>
<package pkgid="776ad3e313c97947e71a691e6081b4eb3d4248b39200c49f20c16925abea2e2a" name="perl-XML-LibXSLT" arch="x86_64">
  <version epoch="0" ver="2.003000" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-1" date="1676030400">- Update to 2.002001
  - Corrections and refactorings in Makefile.PL
- Use author-independent source URL
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-6" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.003000-1" date="1718452800">- Update to 2.003000
  - lib/XML/LibXSLT/Quick.pm:
    - Add an 'implicit' type to $dest
    - Correct a type spelling ('file' instead of 'path')</changelog>
</package>
<package pkgid="39631189757a568aa11138ce664076fa39883e1f8bf04567ded3b31a8725ed37" name="perl-XML-NamespaceSupport" arch="noarch">
  <version epoch="0" ver="1.12" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-19" date="1687435200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2b3ff99aac9854c184c7fc47404fc70de3a83aeb2e8d1879969c015d4349ea2f" name="perl-XML-Rules" arch="noarch">
  <version epoch="0" ver="1.16" rel="30.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-30" date="1687435200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="54360e152c462e97c60fc967a2118dcb1381ecbe41c45d2b02317104e2769f24" name="perl-XML-SAX" arch="noarch">
  <version epoch="0" ver="1.02" rel="12.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-12" date="1687435200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="6c307bcf62822585eeca03f749c0e019405791a7773fcc1b294baff0b7c67d83" name="perl-XML-SAX-Base" arch="noarch">
  <version epoch="0" ver="1.09" rel="19.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-19" date="1687435200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="58fcc58aef87929822e16892cf45736a673365e62951abefdde0ba9590453b11" name="perl-XML-SAX-Expat" arch="noarch">
  <version epoch="0" ver="0.51" rel="5.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-5" date="1680091200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="79bd72bfc898cd055ecda4818f5c1cb2b06f4bb6d830bafddaae78e2141171f7" name="perl-XML-Simple" arch="noarch">
  <version epoch="0" ver="2.25" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.25-17" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e4acc20f5f51667f4f1a6c19ec4f2a85a19dbb934d0b43137ac4f0afb5e63c70" name="perl-XString" arch="x86_64">
  <version epoch="0" ver="0.005" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-6" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-8" date="1684411200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e5f009715ab51ca344883ed8f1593e14efb45cbb0d4d41b5d067786d8510572d" name="perl-YAML" arch="noarch">
  <version epoch="0" ver="1.31" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-15" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for ancient distributions with rpm &lt; 4.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1703764800">- Update to 1.31 (rhbz#2255994)
  - Update docs to recommend YAML::PP
- Package description updated as per upstream documentation</changelog>
</package>
<package pkgid="0fe029a7ef3d51beece774710b55962bb20827dd90ee9764fd71f7fce163374f" name="perl-YAML-LibYAML" arch="x86_64">
  <version epoch="1" ver="0.907.0" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.89-4" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.901.0-1" date="1725883200">- Update to 0.901.0 (rhbz#2310535)
  - Change from Zilla::Dist to Dist::Zilla
  - Change version scheme
  - Fix missing linebreak in pod from Dist::Zilla conversion</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.902.0-1" date="1727092800">- Update to 0.902.0 (rhbz#2313873)
  - Loaded builtin booleans are no longer readonly for perl ≥ v5.36</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.903.0-1" date="1738584000">- Update to 0.903.0 (rhbz#2343445)
  - Security fix: use 3-arg form of open in LoadFile (GH#120. GH#121)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.904.0-1" date="1746705600">- Update to 0.904.0 (rhbz#2365093)
  - Add experimental OOP interface, YAML 1.2
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.904.0-2" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.906.0-1" date="1777291200">- Update to 0.906.0
  - Fix memory leak for trailing UTF8 octets (GH#123)
  - Fix detecting floats in YAML 1.2 Core Schema (GH#125)
- Package new document SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.907.0-1" date="1778500800">- Update to 0.907.0
  - Turn off cyclic references by default</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.907.0-2" date="1779364800">- Safely check for JSON::PP in 13-utf8.t</changelog>
</package>
<package pkgid="67ae9cb279efd95a941cfb86a93cd972907127a34b089a62189fdb46a2d4a555" name="perl-YAML-Old" arch="noarch">
  <version epoch="0" ver="1.23" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-4" date="1687435200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="ad887ccb8a912567a233c91b654bbb5c0eedaeeffdce6e20c9796e58ef3ef181" name="perl-YAML-Syck" arch="x86_64">
  <version epoch="0" ver="1.46" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.35-1" date="1760097600">- Update to 1.35
  - Address parsing error related to string detection on read for empty strings</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-1" date="1760184000">- Update to 1.36
  - Address memory corruption leading to 'str' value being set on empty keys</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1773921600">- Update to 1.37
  Features:
  - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
  Fixes:
  - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
  - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
  - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
  - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
  - Fix dumping of tied hashes (GH#31)
  - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
  - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
  - Fix double-dash YAML parsing (RT#34073, GH#35)
  - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
  - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
  - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
    (GH#40)
  - Fix growing !!perl/regexp objects in round-trips (GH#43)
  - Fix quoted '=' being transformed into 'str' (GH#45)
  - Fix backslash-space escape in double-quoted YAML strings (GH#61)
  - Fix flow sequence comma separator not recognized without trailing space
    (GH#60)
  - Fix wide character warning in DumpFile (GH#28)
  - Fix inline arrays without space after comma (GH#25)
  - Fix: quote strings matching YAML implicit types to prevent round-trip
    failures (GH#26)
  - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
  - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
  - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
  - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
  - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
  - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
  - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
  - Fix: correct $SortKeys POD default from false to true (GH#100)
  - Fix: correct POD documentation errors (GH#103)
  Maintenance:
  - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
  - Silence macOS compiler warnings (GH#92)
  - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
  - Guard stdint.h include in syck_st.h for portability (GH#24)
  - Update ppport.h to 3.68
  - Add regression tests for magical variable dumping (GH#32)
  - CI: modernize GitHub Actions workflow (GH#123, GH#124)
  - CI: add disttest job to validate MANIFEST completeness
- Use %{make_build} and %{make_install}
- Drop workaround for C23 incompatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1" date="1774180800">- Update to 1.39
  Bug Fixes:
  - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
    (GH#125, GH#130)
  - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
  - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
  - Fix: guard against NULL type from strtok in tag parsing (GH#135)
  - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
  - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
    (GH#138, GH#139)
  Improvements:
  - Resolve TODO tests for empty/invalid YAML to match actual behaviour
    (GH#127, GH#129)
  Maintenance:
  - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
  - Add comprehensive implicit type resolution test suite (GH#137)
  - Update MANIFEST to include all unit tests
  - Clean up test names to remove unnecessary numbering</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1" date="1774267200">- Update to 1.41
  Bug Fixes:
  - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
    strtod() so that floats like -3.14 are not corrupted by double-precision
    rounding artifacts (GH#140, GH#141)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1" date="1774612800">- Update to 1.42
  Bug Fixes:
  - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
    perl_syck.h (GH#145)
  - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
  - Fix: Skip %TAG and %YAML directives in document header (GH#151)
  - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
  - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
  - Fix: Remove spurious %type &lt;nodeId&gt; for indent_open in gram.y
    (GH#157, GH#158)
  - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
  Improvements:
  - Implement YAML merge key (&lt;&lt;) support (GH#149)
  Maintenance:
  - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
  - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
  - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
  - Remove unneeded TODO in t/json-basic.t (GH#154)
  - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
  - Do not require a .y file to build YAML::Syck; add brew support for bison
  - Don't ship docs/ directory in tarball</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1" date="1775131200">- Update to 1.43
  Bug Fixes:
  - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
  - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
  - Fix: Load() in list context returns empty list for empty/undef input; also
    applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
  - Fix: DumpCode serializes prototype string instead of code body (GH#168)
  - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
    (GH#170)
  - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
    (GH#175, GH#176)
  - Fix: Add TODO guard for eval_pv leak on Perl &lt; 5.14 (GH#179, GH#180)
  - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
  - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
  Improvements:
  - Modernize META_MERGE for CPANTS compliance (GH#162)
  - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
  Maintenance:
  - Restore TODO guard for Dump code leak test on Perl &lt; 5.26 (GH#167)
  - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
  - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1" date="1775217600">- Update to 1.44
  Bug Fixes:
  - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
  - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1" date="1777291200">- Update to 1.45
  Bug Fixes:
  - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
    base64 encode/decode buffers; also plugs a memory leak (GH#189)
  - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
    no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
  - Fix: Negative float#base60 values produce wrong results; strip sign before
    accumulating and avoid negative zero for portable stringification (GH#191)
  - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
  Maintenance:
  - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
  - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
  - Update README</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-1" date="1779710400">- Update to 1.46
  Bug Fixes:
  - Preserve string nature of numeric-looking values in Dump; pure strings (POK
    only, no IOK/NOK) are now quoted to maintain roundtrip fidelity
    (GH#199, GH#200)
  - Accept trailing commas in flow sequences and mappings ([a, b,] and
    {a: 1,}), valid per YAML 1.0/1.1/1.2 spec (GH#195, GH#196)
  Maintenance:
  - CI: upgrade install-with-cpm to v2 for compatibility with Perl versions
    prior to 5.24 in perldocker containers (GH#197, GH#198)
  - Clean up MANIFEST.SKIP: add #!include_default, remove redundant entries,
    exclude .claude/ from distribution</changelog>
</package>
<package pkgid="cb4961218979dbfda3b96d86786048047131aea18b0f8916c247b55b76bd2b1d" name="perl-YAML-Tiny" arch="noarch">
  <version epoch="0" ver="1.76" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.74-1" date="1679572800">- Update to 1.74
  - A few documentation tweaks
- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.75-1" date="1734350400">- Update to 1.75 (rhbz#2332503)
  - Fixed regression in %QUOTE (GH#60)
  - Fix version comparison logic for forward compatibility (GH#63)
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-1" date="1734350401">- Update to 1.76
  - Revert change from GH#60: "yes", "y", etc. are not actually booleans (GH#66)</changelog>
</package>
<package pkgid="035f2adeefa26084f7b6b099b0c113a2e9d69ba6b1543fc1ea561bbb8e8293f6" name="perl-aliased" arch="noarch">
  <version epoch="0" ver="0.34" rel="25.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.34-25" date="1683633600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="97fbd6a5f30ef52f20dfb2176cb06519d333909089ff5ee3758843928bd5b28c" name="perl-autodie" arch="noarch">
  <version epoch="0" ver="2.37" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.35-1" date="1674907200">- Update to 2.35
  - Prepare for 5.38 changes to deprecate smartmatch
  - Remove +x bit from pm and t files
  - CI - Turn off Pod coverage and critic tests below 5.12
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.36-1" date="1675166400">- Update to 2.36
  - Remove the use of ' as a package separator
  - Fix spelling errors in POD</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.37-1" date="1703851200">- Update to 2.37
  - Deprecate smartmatch handling (GH#117)
  - Remove mention of cpanratings.perl.org (GH#118)
  - Fix typo in changelog (GH#119)</changelog>
</package>
<package pkgid="030e799c65b9d6893401fbcc910df680f569d6b383159ef56e98df1f7d006598" name="perl-common-sense" arch="x86_64">
  <version epoch="0" ver="3.7.5" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-9" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-12" date="1683201600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-13" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-14" date="1691582400">- Fix FTBFS due to %rpmversion macro being built-in in rpm-4.18.92</changelog>
</package>
<package pkgid="f611c8438f1313d58a493c4e398bbea274ef52213de41ad5f576048e937e7f69" name="perl-constant-boolean" arch="noarch">
  <version epoch="0" ver="0.02" rel="37.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-37" date="1685707200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1d77d1215d7d645d2bd99eb6b100cb05a17a3f54fd1833aaf88f2d5d5161db7a" name="perl-namespace-autoclean" arch="noarch">
  <version epoch="0" ver="0.31" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-15" date="1683115200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-1" date="1728820800">- Update to 0.31
  - Switch from Sub::Identify to Sub::Util (core in modern perls), falling back
    to B.pm as needed</changelog>
</package>
<package pkgid="2999e0ad8b1a578af574b78f111662a2e93a6c1419ce3ef490e73cd7ae0c096e" name="perl-namespace-clean" arch="noarch">
  <version epoch="0" ver="0.27" rel="23.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-23" date="1683115200">- Use SPDX-format license tag
- Drop support for building with perl &lt; 5.14
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="c8ccce56cb74e14a5f0c084a08f5d324f51a2cabf4f57edea4c8b6d3384106ac" name="perl-parent" arch="noarch">
  <version epoch="1" ver="0.244" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.240-1" date="1676376000">- Update to 0.240
  - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
    deprecated, as ' isn't allowed as package separator in an upcoming version
    of Perl (GH#13)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.241-1" date="1676462400">- Update to 0.241
  - Actually include the changes documented for version 0.240</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.242-1" date="1723636800">- Update to 0.242
  - Don't test for apostrophe as package separator on Perl versions after 5.41
  - Protect against modules changing @_</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.243-1" date="1732881600">- Update to 0.243
  - Reinstate test for apostrophe as package separator, as that package
    separator is allowed again (no code change, only tests have been amended)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.244-1" date="1734091200">- Update to 0.244
  - Update (commented) comparison with $] to use quotes</changelog>
</package>
<package pkgid="3e118f5a002efad418f73901fad54add350fb373c5bb4c3aa2fa8aa681eac3f0" name="perl-perl5i" arch="x86_64">
  <version epoch="0" ver="2.13.2" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.2-8" date="1530273600">- Perl 5.28 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.2-14" date="1583755200">- This package uses English</changelog>
</package>
<package pkgid="c6b11440ecd4578b250938cadb0c8898e4d45b6462c5117f026ac8722b3a610d" name="perl-strictures" arch="noarch">
  <version epoch="0" ver="2.000006" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.000006-16" date="1688558400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f39af8717690481c480410708ff4ab40c0c14d5f2f03f8876c32a3c2b0da334f" name="perl-superclass" arch="noarch">
  <version epoch="0" ver="0.003" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-4" date="1688299200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="aff117b143000e34b5c882b1cc1ce1f18deadcbf5c58059c23315d2a030304aa" name="perl-true" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-6" date="1654257600">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-8" date="1685966400">- Use SPDX-format license tag
- Drop support for building with EOL distributions prior to EL-7</changelog>
</package>
<package pkgid="0805ead79559be22d6ccd141df31414a94212425521d26492d075564feac886d" name="perl-version" arch="x86_64">
  <version epoch="8" ver="0.99.34" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.32-1" date="1714305600">- Update to 0.9932
  - Add to_decimal and to_dotted_decimal methods
  - Add tuple and from_tuple methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.32-3" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.33-1" date="1724760000">- Update to 0.9933
  - Fix two warnings in recent code</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.33-519" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.34-1" date="1776081600">- Update to 0.9934
  - Reorder "v" check to avoid forward goto
  - Fix string comparisons with $] to use numeric comparison instead
  - Remove unnecessary shebang in version.pm</changelog>
</package>
<package pkgid="dbeac3f933d190f277b39a3159bfd4977f2b135bf905a15baa916c0c2b609134" name="php-Smarty" arch="noarch">
  <version epoch="0" ver="3.1.48" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.40-1" date="1642507200">- Update to 3.1.40 (see CHANGELOG.md for details)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.44-1" date="1642507201">- Update to 3.1.44 (see CHANGELOG.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.48-1" date="1680177600">- Update to 3.1.48 (see CHANGELOG.md for details)
- License corrected to LGPL-3.0-or-later</changelog>
</package>
<package pkgid="c3fde58fee935fcab7acf227310a705d9949f8b49e2f5c660212a5cc861ef18a" name="php4-pcntl" arch="x86_64">
  <version epoch="0" ver="4.4.9" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.3.10-3" date="1111492800">- Add flex as build requirement</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.3.11-1" date="1113220800">- Update to 4.3.11
- Revise automake patch, now partly incorporated upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.0-1" date="1121688000">- Update to 4.4.0
- Make sure all directories are owned properly
- autotools patch no longer needed
- phpextdist no longer included
- Include manpages for phpize and php-config</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.1-1" date="1131192000">- Update to 4.4.1
- Remove buildroot unconditionally in %clean and %install</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.1-2" date="1144843200">- Rename package to php4-pcntl to avoid install-time removal of the main php
  package in distributions whose main php package provides php-pcntl, such as
  Fedora Core 5
- Define %__id_u macro in a more portable way
- Add %{?dist} tag for distribution-specific build identification
- Bogus dependency filter no longer seems to be needed
- Honour %{optflags}
- Specify libdir for configure (pacify rpmlint a bit)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.8-1" date="1199448000">- Update to 4.4.8
- Tweak license tag to silence rpmlint
- Make /bin/php4-pcntl a relative symlink rather than an absolute one
- Documentation converted to UTF-8
- manpages marked as %doc and compressed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.9-1" date="1218196800">- Update to 4.4.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.9-2" date="1252324800">- Define RPM macros in global scope
- Use system PCRE library where it's at least as new as the bundled version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.9-3" date="1330603200">- Use pcre_fullinfo() instead of the long-deprecated pcre_info(), for
  compatibility with pcre ≥ 8.30
- Use a patch rather than scripted iconv to fix character encoding
- Don't use macros for commands</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.9-4" date="1521115200">- Build with -fno-strict-aliasing
- Specify all explicitly-used build requirements
- Use %license where possible
- Drop support for EOL distributions prior to F-13
  - System pcre library is always recent enough
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - Drop %defattr, redundant since rpm 4.4</changelog>
</package>
<package pkgid="d3931dd19fa22f9f5d96c1b7c63e7af99dc08d66977b5bba2d582e7347e2497b" name="php4-pcntl-devel" arch="x86_64">
  <version epoch="0" ver="4.4.9" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.3.10-3" date="1111492800">- Add flex as build requirement</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.3.11-1" date="1113220800">- Update to 4.3.11
- Revise automake patch, now partly incorporated upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.0-1" date="1121688000">- Update to 4.4.0
- Make sure all directories are owned properly
- autotools patch no longer needed
- phpextdist no longer included
- Include manpages for phpize and php-config</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.1-1" date="1131192000">- Update to 4.4.1
- Remove buildroot unconditionally in %clean and %install</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.1-2" date="1144843200">- Rename package to php4-pcntl to avoid install-time removal of the main php
  package in distributions whose main php package provides php-pcntl, such as
  Fedora Core 5
- Define %__id_u macro in a more portable way
- Add %{?dist} tag for distribution-specific build identification
- Bogus dependency filter no longer seems to be needed
- Honour %{optflags}
- Specify libdir for configure (pacify rpmlint a bit)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.8-1" date="1199448000">- Update to 4.4.8
- Tweak license tag to silence rpmlint
- Make /bin/php4-pcntl a relative symlink rather than an absolute one
- Documentation converted to UTF-8
- manpages marked as %doc and compressed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.9-1" date="1218196800">- Update to 4.4.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.9-2" date="1252324800">- Define RPM macros in global scope
- Use system PCRE library where it's at least as new as the bundled version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.9-3" date="1330603200">- Use pcre_fullinfo() instead of the long-deprecated pcre_info(), for
  compatibility with pcre ≥ 8.30
- Use a patch rather than scripted iconv to fix character encoding
- Don't use macros for commands</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.4.9-4" date="1521115200">- Build with -fno-strict-aliasing
- Specify all explicitly-used build requirements
- Use %license where possible
- Drop support for EOL distributions prior to F-13
  - System pcre library is always recent enough
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section
  - Drop %defattr, redundant since rpm 4.4</changelog>
</package>
<package pkgid="506a241a2f798c7cc85a8050404596f92972e4fc664d2d1554be84cc33ff25c2" name="php4-pcntl-gtk" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="8.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.1-2" date="1096545600">- Do not do parallel make on SMP boxen; Makefile does not support parallel
  builds properly</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.1-3" date="1113220800">- Add build requirement of autoconf</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-1" date="1121688000">- Update to 1.0.2
- Ensure all directories are owned properly
- Tarball directory stupidly named php_gtk instead of php-gtk</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-2" date="1144929600">- Rename package to php4-pcntl-gtk to match renamed underlying php package
- Remove buildroot unconditionally in %clean and %install
- Honour %{optflags}
- Define %__id_u macro in a more portable way
- Add %{?dist} tag for distribution-specific build identification
- Specify libdir for configure (pacify rpmlint a bit)
- Remove explicit library dependencies that rpm will pick up automatically</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-3" date="1199448000">- Rebuild against PHP 4.4.8
- Clarify license as GNU Lesser Public License, version 2.1 or later
- Use system libtool to avoid bogus rpaths on 64-bit architectures</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-4" date="1218196800">- Rebuild against PHP 4.4.9
- Use alternative approach to killing bogus rpaths, drop libtool buildreq</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-5" date="1252324800">- Define RPM macros in global scope</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-6" date="1330603200">- Don't use macros for commands
- Use -fno-strict-aliasing
- Provide full URL for upstream source release tarball</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-7" date="1414152000">- Fix build with -Werror=format-security
- Use %license where possible
- Drop %defattr, redundant since rpm 4.4</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-8" date="1521115200">- Specify all explicitly-used build requirements
- Drop support for EOL distributions prior to F-13
  - System pcre library is always recent enough
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section</changelog>
</package>
<package pkgid="12ff9f53dfe3c1f51aaf921a8aec79d7704fa03b342ac0ce87573f3938afc4e2" name="plusnet-fttc" arch="noarch">
  <version epoch="0" ver="0.10" rel="3.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-2" date="1651060800">- Add dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-3" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1acf9a14acc3e1db9dc92a858857b9149ee422451d573b594d6786e4b96decc7" name="pop3gwd" arch="x86_64">
  <version epoch="0" ver="1.2" rel="2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1.2-2" date="1121860800">- spec file rewritten
- changelog started</changelog>
</package>
<package pkgid="2280c6e3c933afa158f5c946730e7bc9e738125441debf91420db4cb3cbb2d13" name="ppp" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="35.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-24.0" date="1530705600">- Updated EAP-TLS patch to v1.101 (CVE-2018-11574)
- Replaced initscripts requirement by network-scripts from Fedora 29 (#1592384)
- Remove %clean section and buildroot cleaning in %install section
- Drop support for building with old distributions prior to Fedora 21
  - Always assume use of systemd
  - Always have libudev with systemd
  - systemd-units always part of systemd package now
  - Always put ephemeral files under /run rather than /var
  - Always have glibc with CLOEXEC support
  - Always package our own initscripts
  - %_tmpfilesdir macro always available
  - There's always a devel package for libpcap</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-27.0" date="1539950400">- Split out the network-scripts from Fedora 29 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-28.0" date="1542888000">- Updated EAP-TLS patch to v1.102</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-30.0" date="1547640000">- Fix some issues found by coverity scan</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-31.0" date="1558353600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-32.0" date="1573473600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-33.0" date="1573473601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-34.0" date="1582891200">- Fixed buffer overflow in the eap_request and eap_response functions
  (CVE-2020-8597)
- Changed sources to github</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-35.0" date="1587643200">- Updated EAP-TLS patch to v1.300</changelog>
</package>
<package pkgid="5be21a00d6fc44be9dda682b3a2157c0963f670764cbe581f6dde418786ca09e" name="ppp-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="35.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-24.0" date="1530705600">- Updated EAP-TLS patch to v1.101 (CVE-2018-11574)
- Replaced initscripts requirement by network-scripts from Fedora 29 (#1592384)
- Remove %clean section and buildroot cleaning in %install section
- Drop support for building with old distributions prior to Fedora 21
  - Always assume use of systemd
  - Always have libudev with systemd
  - systemd-units always part of systemd package now
  - Always put ephemeral files under /run rather than /var
  - Always have glibc with CLOEXEC support
  - Always package our own initscripts
  - %_tmpfilesdir macro always available
  - There's always a devel package for libpcap</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-27.0" date="1539950400">- Split out the network-scripts from Fedora 29 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-28.0" date="1542888000">- Updated EAP-TLS patch to v1.102</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-30.0" date="1547640000">- Fix some issues found by coverity scan</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-31.0" date="1558353600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-32.0" date="1573473600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-33.0" date="1573473601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-34.0" date="1582891200">- Fixed buffer overflow in the eap_request and eap_response functions
  (CVE-2020-8597)
- Changed sources to github</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7-35.0" date="1587643200">- Updated EAP-TLS patch to v1.300</changelog>
</package>
<package pkgid="45db3dc91595ead5c210e31a97197d47574c0a60f9322bc1077f8275f7acaed5" name="pptp" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="22.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-17.0.cf" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-18.0.cf" date="1702468800">- Rebuild to sync with Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-20.0.cf" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-22.0.cf" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="f48aad0f4e5aee0bc2f0f0cf393df11cea1b215e70bdf1c17be9da45b787b7c3" name="pptp-plusnet" arch="noarch">
  <version epoch="0" ver="0.40" rel="1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.1-1" date="1047988800">- Initial release.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.2-1" date="1048334400">- Fix to initscript to quietly delete existing default route, if any.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.3-1" date="1075291200">- Removed ip-up.local, added ip-{up,down}.plusnet instead, with
  post-install script to add call to these into ip-up.local and
  ip-down.local.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.31-1" date="1075291201">- Add "status" section to initscript.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.32-1" date="1075291202">- Fixed typo in "status" section of initscript.
- Fixed permission problem in generated /etc/resolv.conf.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.40-1" date="1115726400">- Add check that connection actually came up.
- Wait longer before deciding connection is dead.
- Change pptp-linux dependency to pptp.</changelog>
</package>
<package pkgid="6c206c0266d7b1e3af5ff76e1775ac2ea5b860093d6c0c8c06aa46fd683ce438" name="pptp-setup" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="22.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-17.0.cf" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-18.0.cf" date="1702468800">- Rebuild to sync with Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-20.0.cf" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-22.0.cf" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="1dc3ff1a767e6d0a09b32fb1b91739f22ca187cd1e9d37c5fb061296f04cab55" name="pptp-xyratex" arch="noarch">
  <version epoch="0" ver="0.4" rel="1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.1-1" date="1075291200">- Initial release</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.2-1" date="1075464000">- Permission problem with /etc/resolv.conf fixed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.3-1" date="1076414400">- Added HOWTO document</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.3-2" date="1100606400">- Tidy up spec file
- Hardcode references to /etc/ppp because the official Fedora ppp
  packages do
- Remove dependency on kernel-mppe; this will probably be part of the
  mainline kernel before much longer and it's already causing problems
  for dkms-built modules that don't provide kernel-mppe in the package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.4-1" date="1115726400">- Change pptp-linux dependency to pptp
- Check that connection is established properly in initscript</changelog>
</package>
<package pkgid="536240cee406b386431050a36c57166c7cf11938100b5333db8a17b3945d6925" name="pptpconfig" arch="noarch">
  <version epoch="0" ver="20060821" rel="2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 20040722-3" date="1094731200">- don't include usermode functions in SuSE versions
- group is Productivity/Networking/PPP in SuSE versions
- require pptp rather than pptp-linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 20040722-4" date="1096545600">- use php from /bin/php-pcntl instead of architecure-specific
  library directory
- this requires php-pcntl &gt;= 4.3.9-2, the first version with the
  required symlink in place</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 20040722-5" date="1100606400">- tweak desktop entry and add icon</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 20040722-6" date="1109073600">- tweak detection of Mandrake build system</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 20040722-7" date="1113220800">- further tweaks to desktop entries to try to get SuSE working</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 20060214-1" date="1139832000">- update to 20060214
- don't attempt to auto-detect Mandriva
- cosmetic tweak: use macros instead of variables
- remove buildroot unconditionally in %clean and %install
- don't use macros in build-time command paths, hardcode them instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 20060222-1" date="1142337600">- update to 20060222</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 20060410-1" date="1144929600">- update to 20060410
- use php4-pcntl instead of php-pcntl (virtual provides issue)
- define %__id_u macro in a more portable way
- use relative symlinks instead of absolute ones
- put xml/xpm files under %{_datadir} instead of /usr/lib
- get rid of ver, rel, rpmrel, suse_version, and mandriva_version macros
- add build options:
  --with mandriva   (for Mandrake/Mandriva)
  --with suse       (for SuSE)
  --with newpam     (for pam &gt; 0.90 or so)
- add %{?dist} tag for distribution identification
- add "provides: pptp-php-gtk" to go with the obsoletes
- try to preserve file timestamps</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 20060821-1" date="1156161600">- update to 20060821</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 20060821-2" date="1253016000">- update from CVS to address some bugs:
  - fix invalid route command on CLI interface
  - fix byte counter overflow at 10,000,000 [#1758592]
  - use explicit path in desktop
  - CLI patches [#1662620]</changelog>
</package>
<package pkgid="400bf09450858811d22ecc3cd5a214027ed534a94e6079faea178a453da38ec6" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.9a" rel="3.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
</package>
<package pkgid="a1e26e19d012c3f21019bb325a8f8585626ceb8a8aee6ab6661b4309e6237f54" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.9a" rel="3.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
</package>
<package pkgid="bcf4ef2de8151e7aaa076f0b8431e72d9420548f39cfc58a24a7d1c7dfe637a0" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.9a" rel="3.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
</package>
<package pkgid="79d0393b640206d86e241e4375f931bfc226082e3644cc9fa4078ed4fbddebca" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.9a" rel="3.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
</package>
<package pkgid="021a5194ae317d450c9554980c5292d67f5f06b121d952acdb80c5fe38cf4764" name="proftpd-postgresql" arch="x86_64">
  <version epoch="0" ver="1.3.9a" rel="3.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
</package>
<package pkgid="8053e2d464872a4473e48498809c0c4ea8e0adfca4821795c7bd924a4622aff7" name="proftpd-proxy" arch="x86_64">
  <version epoch="0" ver="1.3.9a" rel="3.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
</package>
<package pkgid="5a4f5cb5b69737bc1b829365426694bf7ce560b564cdab78d5ef310ccbdcc0e6" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.9a" rel="3.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
</package>
<package pkgid="f02c7ca7a1d929cf9f2b1fcf7ed950cdff1413fd904671ff5cdc2d0b8a729fdd" name="proftpd-utils" arch="x86_64">
  <version epoch="0" ver="1.3.9a" rel="3.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
</package>
<package pkgid="dbcea7ae747d5fe94647667235b2fe294de805854ee243e8cddad2b1bd50c72f" name="proxycheck" arch="x86_64">
  <version epoch="0" ver="0.49a" rel="1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.45a-1" date="1070020800">- Initial RPM build.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.46-1" date="1078315200">- Update to 0.46.</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.46-2" date="1078401600">- Added cookie_alarm.patch</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 0.49a-1" date="1087560000">- Update to 0.49a</changelog>
</package>
<package pkgid="a4c39a99d2a30af2f307cf38c55161685f2600ca77a208003dd87c546e97fbb0" name="python2-bcrypt" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="4.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.7-3" date="1597665600">- Create python2-bcrypt package from last python-bcrypt package version that
  supported Python 2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.7-4" date="1658836800">- Use %license unconditionally</changelog>
</package>
<package pkgid="c3942e3673230c9bede34a9e89fb4f620ee678f71ef7847f1142e2b919a91624" name="python2-libxml2" arch="x86_64">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="dce189c9275f6cdcbd19fe03a4b08bbad3a1433018817868ae24773cb94a58d6" name="python2-libxslt" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="b163f42cb07f2bf529aa8f08077ffc63d196e1f4813e3d720cfd87b4c73d8c24" name="python2-passlib" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="cc3513c4ff2735c3e450d4da14fcef6c2625c00157fec052c3716a76fdff9bd8" name="python2-py-bcrypt" arch="x86_64">
  <version epoch="0" ver="0.4" rel="22.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4-15" date="1521115200">- Rename Python 2 package to python2-py-bcrypt
  See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
- Add Python 3.4 build for EL-7
- Use %license where possible
- Update URL to reflect archiving of Google Code projects
- Drop support for EOL distributions prior to F-13
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4-16" date="1531310400">- Rebuild for Python 3.7 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4-20" date="1552046400">- BR: gcc</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4-22" date="1566820800">- Rebuild for Python 3.8 in Rawhide</changelog>
</package>
<package pkgid="b72bc7680db31a3a7cfaffeda34015f803770f1250c803eed06bde55cc58df52" name="python2-setuptools_subversion" arch="noarch">
  <version epoch="0" ver="3.1" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1-2" date="1516276800">- Create python2- and python3- packages
- Spec modernization</changelog>
</package>
<package pkgid="ee2ea4914f05613403dffdd3ff3938913de08b817216888f057aa3e1e70bc418" name="python3-bcrypt" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.7-5" date="1590926400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.2.0-1" date="1597665600">- Update to 3.2.0
  - Added typehints for library functions
  - Dropped support for Python versions less than 3.6 (2.7, 3.4, 3.5)
  - Shipped 'abi3' Windows wheels (requires pip ≥ 20)
- Drop python2 sub-package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.2.2-1" date="1651492800">- Update to 3.2.2
  - Added support for compilation on z/OS
  - The next release of 'bcrypt' with be 4.0 and it will require Rust at
    compile time, for users building from source; the minimum supported Rust
    version will be 1.56.0
  - This will be the final release for which we ship 'manylinux2010' wheels;
    going forward the minimum supported manylinux ABI for our wheels will be
    'manylinux2014'
  - Fixed packaging of 'py.typed' files in wheels so that 'mypy' works
- Use %license unconditionally
- Avoid use of "python setup.py test", which no longer works</changelog>
</package>
<package pkgid="7687523bf01299474ddf03155fda3ae28cbf59cec87753ba29330acd609b5535" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="9f3ff42a0b4db3028ad7a3d184f3e0a497923473b181b107fa220f5e623dc846" name="python3-passlib" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="8be0028554d410cbcad79b9c8f79506486d39aa3133c702ed79102961339e085" name="python3-py-bcrypt" arch="x86_64">
  <version epoch="0" ver="0.4" rel="22.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4-15" date="1521115200">- Rename Python 2 package to python2-py-bcrypt
  See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3
- Add Python 3.4 build for EL-7
- Use %license where possible
- Update URL to reflect archiving of Google Code projects
- Drop support for EOL distributions prior to F-13
  - Drop BuildRoot: and Group: tags
  - Drop explicit buildroot cleaning in %install section
  - Drop explicit %clean section</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4-16" date="1531310400">- Rebuild for Python 3.7 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4-20" date="1552046400">- BR: gcc</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4-22" date="1566820800">- Rebuild for Python 3.8 in Rawhide</changelog>
</package>
<package pkgid="675feed2b3415fac79a131e58b1a2e18872af51b14457033ed9489cdef0b07e6" name="python3-setuptools_subversion" arch="noarch">
  <version epoch="0" ver="3.1" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1-2" date="1516276800">- Create python2- and python3- packages
- Spec modernization</changelog>
</package>
<package pkgid="a307faae2030cb67d46af543deccac9dde09559abdedb4940c5f48c7eac0ce42" name="rbldnsd" arch="x86_64">
  <version epoch="0" ver="0.998b" rel="20.fc29"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-15" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-16" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.998b-17" date="1739361600">- Add sysusers.d config file to allow rpm to create users/groups automatically
  from Fedora 43 onwards</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-18" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.998b-19" date="1758888000">- Fix base template replacement issue (GH#18, GH#19, GH#22, rhbz#2398024)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-20" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="a3435910800a3693b5ab67c7be2d49b9694db7a190fea0605a9b5c466c761604" name="sendmail" arch="x86_64">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
</package>
<package pkgid="9353fb2851412e2266028a2b8bf64d7cd2709f26652f85b79c6d2ce8ed536e09" name="sendmail-cf" arch="noarch">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
</package>
<package pkgid="de87c3f6f6a6d303b38c0a355863a5d63b0f3ef793634cedf2235bb4a873fe84" name="sendmail-doc" arch="noarch">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
</package>
<package pkgid="6284c9ec4922ed377eb9060f08fa488a83fbe18f3297475321166f8409276eff" name="sendmail-milter" arch="i686">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
</package>
<package pkgid="9bed4ee6c8cc4d44ee3e36131251d1a594055c05bf988dd1e7d75216e0d3ee3e" name="sendmail-milter" arch="x86_64">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
</package>
<package pkgid="17f4ad5e5de5a8da05be948e905e911af7aeec11ebb9f71343192fcfa74a045f" name="sendmail-milter-devel" arch="i686">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
</package>
<package pkgid="dc35340208718e4eab3dc41c829f2b063b3f2f6fe6624615adf27407c393462f" name="sendmail-milter-devel" arch="x86_64">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
</package>
<package pkgid="23d6ab0a067a0c08cd55abec6ff31614f36fdd0b04022b8c5b8eb8577c701e53" name="sfcmilter" arch="x86_64">
  <version epoch="1" ver="0.62" rel="1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.51-1" date="1095249600">- first RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.51-2" date="1105963200">- incorporate suggestions from Petr Krištof (petr at kristov dot cz)
  replace _var with _localstatedir macro
  replace /etc with _sysconfdir macro
  stop sfcmilter service before removal of package
  remove /var/run/sfcmilter and contents after removal of package
  restart milter after package upgrade</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.62-1" date="1129896000">- update to 0.62
- clean up spec file
- don't delete user/group accounts on package removal
- ghost the socket and pidfile rather than removing
  /var/run/sfcmilter in %post</changelog>
</package>
<package pkgid="aaf9e69bf23fc90e18a9ce4083998fa1094cd105b171e918dd7b50b430cb0972" name="shorten" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="5.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.6.1-5" date="1680177600">- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="5cc5269753df3e1e4ed9c9d4a720caef6ec4b2cd6918429c4a0a47e75795ddca" name="smbldap-tools" arch="noarch">
  <version epoch="0" ver="0.9.11" rel="28.fc29"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-24" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-27" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-28" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="48d56699a792f88bc2f1124b79192a54ad0e0788330b1e6440706ad379f27406" name="smf-sav" arch="x86_64">
  <version epoch="0" ver="2.1" rel="7.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1-6" date="1730289600">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1-7" date="1761739200">- Build with -DSM_CONF_STDBOOL_H=1 to avoid issues with libmilter API</changelog>
</package>
<package pkgid="9430bab15a6cc6b8fb21cd8cfcafa400b13b0d10b5c92bceb3dfdb04d6ddbc7c" name="smf-spf" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="2.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.1-1" date="1690027200">- Switch upstream to https://github.com/jcbf/smf-spf/
- Update to 2.5.1 (see README.md for details)
- Don't package ChangeLog, which refers to original unmaintained version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.1-2" date="1744632000">- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)
- Build with -std=gnu17 due to issues with milter API (#2336394)</changelog>
</package>
<package pkgid="f5226981adb77b8b0af4f36990cc090f024e93a52ffa913ac26af835d9b9e48d" name="spamass-milter" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="30.fc29"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.4.0-27" date="1717848000">- Add quarantine option</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-28" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-29" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-30" date="1739534400">- Drop EL-7 support
- Drop homedir fix for upgrades from packages built in 2009 and earlier
- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)</changelog>
</package>
<package pkgid="f18f8b82fd62948e7da40dfd6c7d67984e6e2a1e7543c3c687cb8215ad5b4f08" name="spamass-milter-postfix" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="30.fc29"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.4.0-27" date="1717848000">- Add quarantine option</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-28" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-29" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-30" date="1739534400">- Drop EL-7 support
- Drop homedir fix for upgrades from packages built in 2009 and earlier
- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)</changelog>
</package>
<package pkgid="f2d67ea5f8bc1b79f2fefe0949e5148f678f7ea384eb8c55ce5c610ccfae6cd1" name="spfmilter" arch="x86_64">
  <version epoch="1" ver="0.98" rel="1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.94-1" date="1095076800">- now building from Jef's package rather than Shevek's; version
  number adjusted accordingly and epoch bumped to 1
- initscript now incorporated upstream so not included as a
  separate item in SRPM
- tweak install directories as Jef's package is a little less
  packager-friendly (no DESTDIR support)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.94-2" date="1095076801">- remove linkage to libspf if present at build time, which
  generates bogus dependencies
- build-time dependency for perl added to allow the above fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.94-3" date="1095249600">- tidy up initscript (pidfile in /var/run)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.95-1" date="1096286400">- update to 0.95</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.95-2" date="1105963200">- incorporate suggestions from Petr Krištof (petr at kristov dot cz)
  replace _var with _localstatedir macro
  replace /etc with _sysconfdir macro
  stop spfmilter service before removal of package
  remove %{_localstatedir}/run/spfmilter and contents after removal of package
  restart milter after package upgrade
- use sed instead of perl during package build</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.95-3" date="1109246400">- remove Requires: libspf2; automatic library dependencies will suffice
- improve detection of Mandrake build system</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.96-1" date="1114603200">- new upstream version 0.96
- add warning in spec file that libspf2 1.0.x is buggy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.97-1" date="1123156800">- new upstream version 0.97
- remove initscript patch, now included upstream
- use tidier bash syntax in scriptlets
- fix permissions of installed files
- add comment about file format to fallback and whitelist files
- ghost the socket and pidfile rather than removing
  %{_localstatedir}/run/spfmilter in %post
- don't remove user/group at uninstall
- run the milter in a wrapper script that restarts it if it crashes
- force non-detection of libspf to ensure build against libspf2
- fix Makefile to prevent attempted chowns in %install</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.97-2" date="1330689600">- build against compat-libspf2 rather than libspf2
- don't use macros for commands</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; 1:0.98-1" date="1405598400">- new upstream version 0.98
  - changed the regular SMTP response code used in -graylist mode
    from 451 to 421
  - added pidfile option
  - updated for clang, and general clean-up
- re-code manpage as UTF8</changelog>
</package>
<package pkgid="5379af46615887735949b845abf3d56f8eb4edd5730dc660f3e4e418733eabcf" name="svnmailer" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="0.7.20050925svn1373.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.0-0.7.20050925svn1373" date="1603627200">- Fix FTBFS due to bad metadata
- Recode as utf8</changelog>
</package>
<package pkgid="3c0726969567ad092748bd503584168ab41c1bfaa9c8dfc4d46c3ce58d4ff619" name="svnmailer-doc" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="0.7.20050925svn1373.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.0-0.7.20050925svn1373" date="1603627200">- Fix FTBFS due to bad metadata
- Recode as utf8</changelog>
</package>
<package pkgid="27c0213c517a32bf7d5a6665883db9f2068261077d5d5a4bc205f4a62d214e1d" name="symlinks" arch="x86_64">
  <version epoch="0" ver="1.7" rel="2.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-2.0.cf" date="1744632000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="31853086ad21ca4bf9ab7d42ec5a9d1fa8becd637378742af9204424bccff574" name="tidyp" arch="x86_64">
  <version epoch="0" ver="1.04" rel="15.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-11" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-12" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-13" date="1612267200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-14" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove RPATH to libdir
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-15" date="1639051200">- Run test suite with LD_LIBRARY_PATH pointing to tidyp library in the
  buildroot so that it can be found
- Fix dist tags for CentOS Stream</changelog>
</package>
<package pkgid="2c153c895b5d20675bf56d1d14fbef0d17f7bb04f71794190c395bf7da930bf9" name="tmake" arch="noarch">
  <version epoch="0" ver="1.8" rel="1"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt;" date="1112270400">- initial RPM build</changelog>
</package>
<package pkgid="9289c42a03807b9a4959ceb63896a55dc05768add8f0169cd5b37eb3af2cb372" name="trac-accountmanager-plugin" arch="noarch">
  <version epoch="0" ver="0.6" rel="0.1.r17619.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5.0-1" date="1525003200">- Update to release version 0.5.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5.0-2" date="1531742400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5.0-3" date="1549540800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.6-0.1.r17619" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="550fa32daf9ef53cdd5c1ec4c6bee352efdfc53777cdf1dcb195e46ce1f039e0" name="treescan" arch="noarch">
  <version epoch="0" ver="4.81" rel="1.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.78-1" date="1662465600">- Update to 4.78
  - Add IO::AIO::mount and IO::AIO::umount
  - Add a bunch of symbols from sys/mount.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-1" date="1664193600">- Update to 4.79
  - The autoconf result of the mount check was not used, so it failed to
    compile on most systems
  - Fix format string usage for croak in extract_stringvec function</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-2" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-1" date="1680436800">- Update to 4.8
  - Remove long-obsolete "paths must be absolute" text in aio_open/stat
    descriptions
  - Another workaround for the low-quality musl libc
  - Test for umount separately, as it is more portable
  - Some low-quality posix attempts (openbsd, osx) declare the availability of
    fexecve() but then don't even bother to implement a stub
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-4" date="1702468800">- Fix use of incompatible pointer type in configure test for fexecve()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-6" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-1" date="1708516800">- Update to 4.81
  - Work around a bug in musl w.r.t. to O_SEARCH and use EIO_O_PATH instead,
    verifying the semantics against the subset of O_PATH and O_SEARCH
  - aio_copy now tries to preallocate the destination file
  - fexecve configure test used the wrong pointer type</changelog>
</package>
<package pkgid="2e7b339b625559ce96b715cdbc208b070c366ea7d86920e340378a7dbf4fe8a0" name="tzip" arch="x86_64">
  <version epoch="0" ver="1.12" rel="14.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-14" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use distribution linker flags</changelog>
</package>
<package pkgid="2b1e73086db021f794b8e77cf95458ee95c9a41d24800427f5284b42e7a67161" name="ud" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.1-10" date="1744632000">- Drop redundant initscript patch
- Always assume signal handlers are void functions (configure test gets this
  wrong)
- Use systemd scriptlet macros</changelog>
</package>
<package pkgid="0d97af941d0b4892d64d032ce3c05ebb58fc65848351eaf8339fefc1441f04ae" name="unrar" arch="x86_64">
  <version epoch="0" ver="7.21" rel="1.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-0.1.0.cf.beta1" date="1749643200">- Update to 7.12 beta 1
- Update debian files to 7.1.7-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-1.0.cf" date="1777550400">- Update to 7.21</changelog>
</package>
<package pkgid="45afdeef7680c87942a4779a1d9072e34cfac8adadbdb13b9cd64f3494f7e2ab" name="weblint++" arch="noarch">
  <version epoch="0" ver="1.15" rel="10.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.15-10" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="491abbf63af9e960b46d3bd3de98b60a4b20d957587cbffa40938d6c2cc80314" name="weblint" arch="noarch">
  <version epoch="0" ver="1.9.3" rel="16.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9.3-16" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="172d175c61450b277036a6e58ce2059ccbe9dc57cbffdbe8fd3ee5cc006dcff8" name="xv" arch="x86_64">
  <version epoch="0" ver="3.10a" rel="43.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10a-39.0" date="1645012800">- Fix Jasper support to use proper library APIs (patch from Michael Adams,
  Jasper upstream maintainer)
- Honour LDFLAGS if present in the environment</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10a-40.0" date="1645790400">- Ignore multiple APP1 data structs; libjpeg can't write them
- Fix segfault seen with some corrupt GIF file
- Report errors from libjpeg
- In file selection box, do not move cursor if no filename is there
- Add fix for colormap in 8-bit JPEG mode
- Add more thorough version of CLK_TCK patch</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10a-41.0" date="1646308800">- Fix incorrectly applied corrupt GIF patch</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10a-42.0" date="1660046400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10a-43.0" date="1680177600">- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="fddfd648a488de6e767f8508d134a7a947e04a49789d2f834855f922da43f077" name="xv-doc" arch="noarch">
  <version epoch="0" ver="3.10a" rel="43.0.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10a-39.0" date="1645012800">- Fix Jasper support to use proper library APIs (patch from Michael Adams,
  Jasper upstream maintainer)
- Honour LDFLAGS if present in the environment</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10a-40.0" date="1645790400">- Ignore multiple APP1 data structs; libjpeg can't write them
- Fix segfault seen with some corrupt GIF file
- Report errors from libjpeg
- In file selection box, do not move cursor if no filename is there
- Add fix for colormap in 8-bit JPEG mode
- Add more thorough version of CLK_TCK patch</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10a-41.0" date="1646308800">- Fix incorrectly applied corrupt GIF patch</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10a-42.0" date="1660046400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10a-43.0" date="1680177600">- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="93e69adee43f1c599a30f233e2b418d36f82cdf018f57c7803947364a8bb0eaa" name="xz" arch="x86_64">
  <version epoch="0" ver="5.2.4" rel="8.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-6.0.cf" date="1518177600">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-7.0.cf" date="1519041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-2.0.cf" date="1526126400">- Update to 5.2.4
  liblzma:
  - Allow 0 as memory usage limit instead of returning LZMA_PROG_ERROR; now 0
    is treated as if 1 byte was specified, which effectively is the same as 0
  - Use "noexcept" keyword instead of "throw()" in the public headers when a
    C++11 (or newer standard) compiler is used
  - Added a portability fix for recent Intel C Compilers
  - Microsoft Visual Studio build files have been moved under windows/vs2013
    and windows/vs2017
  xz:
  - Fix "xz --list --robot missing_or_bad_file.xz", which would try to print an
    uninitialized string and thus produce garbage output; since the exit status
    is non-zero, most uses of such a command won't try to interpret the garbage
    output
  - "xz --list foo.xz" could print "Internal error (bug)" in a corner case
    where a specific memory usage limit had been set
- Switch to %ldconfig_scriptlets
- Drop ppc64p7 hack, per fedora devel list discussion:
  https://lists.fedoraproject.org/archives/list/
  devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
- Don't explicitly set _FILE_OFFSET_BITS; package uses AC_SYS_LARGEFILE</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-3.0.cf" date="1532174400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-4.0.cf" date="1542888000">- Fix annocheck failures on i686 (#1630650)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-5.0.cf" date="1549281600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-6.0.cf" date="1565611200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-7.0.cf" date="1566648000">- Rebuilt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-8.0.cf" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="08150c95c065eb3fc96243bf2eb3b8bf1b5d4d79088210089f913ec55bae433f" name="xz-devel" arch="i686">
  <version epoch="0" ver="5.2.4" rel="8.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-6.0.cf" date="1518177600">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-7.0.cf" date="1519041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-2.0.cf" date="1526126400">- Update to 5.2.4
  liblzma:
  - Allow 0 as memory usage limit instead of returning LZMA_PROG_ERROR; now 0
    is treated as if 1 byte was specified, which effectively is the same as 0
  - Use "noexcept" keyword instead of "throw()" in the public headers when a
    C++11 (or newer standard) compiler is used
  - Added a portability fix for recent Intel C Compilers
  - Microsoft Visual Studio build files have been moved under windows/vs2013
    and windows/vs2017
  xz:
  - Fix "xz --list --robot missing_or_bad_file.xz", which would try to print an
    uninitialized string and thus produce garbage output; since the exit status
    is non-zero, most uses of such a command won't try to interpret the garbage
    output
  - "xz --list foo.xz" could print "Internal error (bug)" in a corner case
    where a specific memory usage limit had been set
- Switch to %ldconfig_scriptlets
- Drop ppc64p7 hack, per fedora devel list discussion:
  https://lists.fedoraproject.org/archives/list/
  devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
- Don't explicitly set _FILE_OFFSET_BITS; package uses AC_SYS_LARGEFILE</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-3.0.cf" date="1532174400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-4.0.cf" date="1542888000">- Fix annocheck failures on i686 (#1630650)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-5.0.cf" date="1549281600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-6.0.cf" date="1565611200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-7.0.cf" date="1566648000">- Rebuilt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-8.0.cf" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="b156ecf7ca0a272b6e7e9e3476c05eaa82fe8005534952df25be0c67a6f991d9" name="xz-devel" arch="x86_64">
  <version epoch="0" ver="5.2.4" rel="8.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-6.0.cf" date="1518177600">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-7.0.cf" date="1519041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-2.0.cf" date="1526126400">- Update to 5.2.4
  liblzma:
  - Allow 0 as memory usage limit instead of returning LZMA_PROG_ERROR; now 0
    is treated as if 1 byte was specified, which effectively is the same as 0
  - Use "noexcept" keyword instead of "throw()" in the public headers when a
    C++11 (or newer standard) compiler is used
  - Added a portability fix for recent Intel C Compilers
  - Microsoft Visual Studio build files have been moved under windows/vs2013
    and windows/vs2017
  xz:
  - Fix "xz --list --robot missing_or_bad_file.xz", which would try to print an
    uninitialized string and thus produce garbage output; since the exit status
    is non-zero, most uses of such a command won't try to interpret the garbage
    output
  - "xz --list foo.xz" could print "Internal error (bug)" in a corner case
    where a specific memory usage limit had been set
- Switch to %ldconfig_scriptlets
- Drop ppc64p7 hack, per fedora devel list discussion:
  https://lists.fedoraproject.org/archives/list/
  devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
- Don't explicitly set _FILE_OFFSET_BITS; package uses AC_SYS_LARGEFILE</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-3.0.cf" date="1532174400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-4.0.cf" date="1542888000">- Fix annocheck failures on i686 (#1630650)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-5.0.cf" date="1549281600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-6.0.cf" date="1565611200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-7.0.cf" date="1566648000">- Rebuilt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-8.0.cf" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="e0be670a567c58eaa5627599c9b3107d364f57f111fec53a146c47ed609608cc" name="xz-libs" arch="i686">
  <version epoch="0" ver="5.2.4" rel="8.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-6.0.cf" date="1518177600">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-7.0.cf" date="1519041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-2.0.cf" date="1526126400">- Update to 5.2.4
  liblzma:
  - Allow 0 as memory usage limit instead of returning LZMA_PROG_ERROR; now 0
    is treated as if 1 byte was specified, which effectively is the same as 0
  - Use "noexcept" keyword instead of "throw()" in the public headers when a
    C++11 (or newer standard) compiler is used
  - Added a portability fix for recent Intel C Compilers
  - Microsoft Visual Studio build files have been moved under windows/vs2013
    and windows/vs2017
  xz:
  - Fix "xz --list --robot missing_or_bad_file.xz", which would try to print an
    uninitialized string and thus produce garbage output; since the exit status
    is non-zero, most uses of such a command won't try to interpret the garbage
    output
  - "xz --list foo.xz" could print "Internal error (bug)" in a corner case
    where a specific memory usage limit had been set
- Switch to %ldconfig_scriptlets
- Drop ppc64p7 hack, per fedora devel list discussion:
  https://lists.fedoraproject.org/archives/list/
  devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
- Don't explicitly set _FILE_OFFSET_BITS; package uses AC_SYS_LARGEFILE</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-3.0.cf" date="1532174400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-4.0.cf" date="1542888000">- Fix annocheck failures on i686 (#1630650)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-5.0.cf" date="1549281600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-6.0.cf" date="1565611200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-7.0.cf" date="1566648000">- Rebuilt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-8.0.cf" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="97bb91af71a315547a49be00df82dffb83a54f84f40f04b8b11358161fe4308c" name="xz-libs" arch="x86_64">
  <version epoch="0" ver="5.2.4" rel="8.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-6.0.cf" date="1518177600">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-7.0.cf" date="1519041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-2.0.cf" date="1526126400">- Update to 5.2.4
  liblzma:
  - Allow 0 as memory usage limit instead of returning LZMA_PROG_ERROR; now 0
    is treated as if 1 byte was specified, which effectively is the same as 0
  - Use "noexcept" keyword instead of "throw()" in the public headers when a
    C++11 (or newer standard) compiler is used
  - Added a portability fix for recent Intel C Compilers
  - Microsoft Visual Studio build files have been moved under windows/vs2013
    and windows/vs2017
  xz:
  - Fix "xz --list --robot missing_or_bad_file.xz", which would try to print an
    uninitialized string and thus produce garbage output; since the exit status
    is non-zero, most uses of such a command won't try to interpret the garbage
    output
  - "xz --list foo.xz" could print "Internal error (bug)" in a corner case
    where a specific memory usage limit had been set
- Switch to %ldconfig_scriptlets
- Drop ppc64p7 hack, per fedora devel list discussion:
  https://lists.fedoraproject.org/archives/list/
  devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
- Don't explicitly set _FILE_OFFSET_BITS; package uses AC_SYS_LARGEFILE</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-3.0.cf" date="1532174400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-4.0.cf" date="1542888000">- Fix annocheck failures on i686 (#1630650)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-5.0.cf" date="1549281600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-6.0.cf" date="1565611200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-7.0.cf" date="1566648000">- Rebuilt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-8.0.cf" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="e425a81c43f90a230984cf06cc75fe48d79ede5ec43a25dc8dae0cd6c11c704f" name="xz-lzma-compat" arch="x86_64">
  <version epoch="0" ver="5.2.4" rel="8.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-6.0.cf" date="1518177600">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-7.0.cf" date="1519041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-2.0.cf" date="1526126400">- Update to 5.2.4
  liblzma:
  - Allow 0 as memory usage limit instead of returning LZMA_PROG_ERROR; now 0
    is treated as if 1 byte was specified, which effectively is the same as 0
  - Use "noexcept" keyword instead of "throw()" in the public headers when a
    C++11 (or newer standard) compiler is used
  - Added a portability fix for recent Intel C Compilers
  - Microsoft Visual Studio build files have been moved under windows/vs2013
    and windows/vs2017
  xz:
  - Fix "xz --list --robot missing_or_bad_file.xz", which would try to print an
    uninitialized string and thus produce garbage output; since the exit status
    is non-zero, most uses of such a command won't try to interpret the garbage
    output
  - "xz --list foo.xz" could print "Internal error (bug)" in a corner case
    where a specific memory usage limit had been set
- Switch to %ldconfig_scriptlets
- Drop ppc64p7 hack, per fedora devel list discussion:
  https://lists.fedoraproject.org/archives/list/
  devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
- Don't explicitly set _FILE_OFFSET_BITS; package uses AC_SYS_LARGEFILE</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-3.0.cf" date="1532174400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-4.0.cf" date="1542888000">- Fix annocheck failures on i686 (#1630650)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-5.0.cf" date="1549281600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-6.0.cf" date="1565611200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-7.0.cf" date="1566648000">- Rebuilt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-8.0.cf" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="6dc820a63a7e289dd827cb40dbff03cca84fc616277a2d17a3fc8371b2bf6965" name="xz-static" arch="i686">
  <version epoch="0" ver="5.2.4" rel="8.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-6.0.cf" date="1518177600">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-7.0.cf" date="1519041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-2.0.cf" date="1526126400">- Update to 5.2.4
  liblzma:
  - Allow 0 as memory usage limit instead of returning LZMA_PROG_ERROR; now 0
    is treated as if 1 byte was specified, which effectively is the same as 0
  - Use "noexcept" keyword instead of "throw()" in the public headers when a
    C++11 (or newer standard) compiler is used
  - Added a portability fix for recent Intel C Compilers
  - Microsoft Visual Studio build files have been moved under windows/vs2013
    and windows/vs2017
  xz:
  - Fix "xz --list --robot missing_or_bad_file.xz", which would try to print an
    uninitialized string and thus produce garbage output; since the exit status
    is non-zero, most uses of such a command won't try to interpret the garbage
    output
  - "xz --list foo.xz" could print "Internal error (bug)" in a corner case
    where a specific memory usage limit had been set
- Switch to %ldconfig_scriptlets
- Drop ppc64p7 hack, per fedora devel list discussion:
  https://lists.fedoraproject.org/archives/list/
  devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
- Don't explicitly set _FILE_OFFSET_BITS; package uses AC_SYS_LARGEFILE</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-3.0.cf" date="1532174400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-4.0.cf" date="1542888000">- Fix annocheck failures on i686 (#1630650)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-5.0.cf" date="1549281600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-6.0.cf" date="1565611200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-7.0.cf" date="1566648000">- Rebuilt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-8.0.cf" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="394b581141b963d953f126636b273c388f1c85135caa5cb90d7aadd3c3fcdc34" name="xz-static" arch="x86_64">
  <version epoch="0" ver="5.2.4" rel="8.0.cf.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-6.0.cf" date="1518177600">- ldconfig scriptlets replaced by RPM File Triggers from Fedora 28</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.3-7.0.cf" date="1519041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-2.0.cf" date="1526126400">- Update to 5.2.4
  liblzma:
  - Allow 0 as memory usage limit instead of returning LZMA_PROG_ERROR; now 0
    is treated as if 1 byte was specified, which effectively is the same as 0
  - Use "noexcept" keyword instead of "throw()" in the public headers when a
    C++11 (or newer standard) compiler is used
  - Added a portability fix for recent Intel C Compilers
  - Microsoft Visual Studio build files have been moved under windows/vs2013
    and windows/vs2017
  xz:
  - Fix "xz --list --robot missing_or_bad_file.xz", which would try to print an
    uninitialized string and thus produce garbage output; since the exit status
    is non-zero, most uses of such a command won't try to interpret the garbage
    output
  - "xz --list foo.xz" could print "Internal error (bug)" in a corner case
    where a specific memory usage limit had been set
- Switch to %ldconfig_scriptlets
- Drop ppc64p7 hack, per fedora devel list discussion:
  https://lists.fedoraproject.org/archives/list/
  devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
- Don't explicitly set _FILE_OFFSET_BITS; package uses AC_SYS_LARGEFILE</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-3.0.cf" date="1532174400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-4.0.cf" date="1542888000">- Fix annocheck failures on i686 (#1630650)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-5.0.cf" date="1549281600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-6.0.cf" date="1565611200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-7.0.cf" date="1566648000">- Rebuilt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.4-8.0.cf" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
</package>
<package pkgid="005673698af03331b633460f410af5e38749b403c96fa6fb5730a8c730f6e84c" name="yum-arch" arch="noarch">
  <version epoch="0" ver="2.2.2" rel="17.fc29"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-14" date="1514894400">- rpm 4.14 onwards doesn't support the legacy argument for header unloading
- Upstream moved to http://yum.baseurl.org/
- Drop %defattr, redundant since rpm 4.4
- Use %license where possible
- Drop redundant buildroot cleaning
- Drop legacy BuildRoot: and Group: tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-15" date="1515240000">- Fix for rpm 4.14.0 on Fedora 27</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.2-17" date="1541073600">- Explicitly use Python 2</changelog>
</package>
</otherdata>