<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="669">
<package pkgid="23943d887379d7f6271b99a63c014f6bbf1f658861e242d06852386f8388e08a" name="Judy" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="42.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-37" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-38" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-39" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-41" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-42" date="1769774400">- Start providing the lower-case 'judy-devel' name for compatibility with
  other RPM based distributions (rhbz#2435466)</changelog>
</package>
<package pkgid="87c5a6be468fe75cad6f060948c6b0640337324692ce78189c06d07909bf830a" name="Judy-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="42.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-37" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-38" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-39" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-41" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-42" date="1769774400">- Start providing the lower-case 'judy-devel' name for compatibility with
  other RPM based distributions (rhbz#2435466)</changelog>
</package>
<package pkgid="93733aad5fce6837431cffc2f2af0d3f22127877df5890704255951527d14809" name="ansible-collection-community-libvirt" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="1.fc37"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-5" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.1-1" date="1734436800">- Update to 1.3.1 (rhbz#2332772)
  - libvirt_lxc: add configuration for libvirt_lxc_noseclabel</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.0-1" date="1748260800">- Update to 1.4.0 (rhbz#2368572)
  - virt: implement basic check mode functionality (GH#98)
  - virt: implement the gathering of Dom UUIDs (GH#187)
  - virt: implement the gathering of Dom interface names and MAC addresses
    (GH#189)
  - virt: implement the removal of volumes for a Dom (GH#177)
  - New module community.libvirt.virt_volume: manage libvirt volumes inside a
    storage pool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0.0-1" date="1753099200">- Update to 2.0.0 (rhbz#2382300)
  - This is a major release of the community.libvirt collection
  - Many changes for virt_volume: see CHANGELOG.rst for details
  - New module community.libvirt.virt_install to provision new virtual machines
    using the virt-install tool</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-4" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1.0-1" date="1771243200">- Update to 2.1.0 (rhbz#2440142)
  - This is a minor release of the community.libvirt collection
  - virt_install:
    - Added support for memoryBacking source type configuration, including
      memfd for shared memory (GH#228)
    - Added support for primary value attribute (_value or value) in dynamic
      dict options that require a primary value alongside additional attributes
    - Enhanced cloud_init configuration handling for sub-options (meta-data,
      user-data and network-config) to support both string and dictionary inputs
    - Refactored common virt-install functionality into module_utils and
      doc_fragments to enable code reuse between modules
    - Fixed cloud_init configuration handling for meta-data, user-data and
      network-config
    - Fixed the dict-based options handling for events, resource and sysinfo
      options
  - virt_volume:
    - New return key/value pairs 'Type', 'Capacity' and 'Allocation' were added
      to command 'list_volumes' (GH#187)
    - Added ability to resize volumes if defined capacity is different; if
      volume already exists and defined capacity in XML differs, a resize is
      attempted
  - New module community.libvirt.virt_cloud_instance: Provision new virtual
    machines from cloud images via libvirt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.0-1" date="1774872000">- Update to 2.2.0 (rhbz#2452926)
  - This is a minor release of the community.libvirt collection
  - virt_cloud_instance: Added command's return field to provide visibility
    into executed commands during VM provisioning
  - virt_install: Added command's return field to provide visibility into
    executed commands during VM provisioning
  - libvirt_qemu: Vendor '_parse_clixml' locally to fix 'ImportError' on
    ansible-core devel (2.21+)</changelog>
</package>
<package pkgid="87a6a703711e3806b06a2104def4b20b45610e7703a12e5a66cd0e77cd1f2c55" name="bluefish" arch="x86_64">
  <version epoch="0" ver="2.2.16" rel="3.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-5" date="1702468800">- Fix use of incompatible pointer types (upstream rev 8991)
- Fix improper use of pointer: https://sourceforge.net/p/bluefish/tickets/80/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-7" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-1" date="1710763200">- Update to 2.2.15 (rhbz#2269978)
  - Bluefish 2.2.15 is a minor maintenance release
  - New feature: it can highlight the indenting level with a vertical line,
    which is very useful during python programming and helps with a lot more
    programming languages
  - Fix zencoding for python releases newer than 3.12
  - Add a retry button when opening files from a remote location
  - Tiny performance improvement when scrolling
  - Fix a bug in the bookmarks function and the visible indenting function
    that potentially could lead to a crash
  - The perl syntax detection has been greatly improved
  - YAML syntax detection has been added
  - The code has several fixes to make it compile on modern Mac OSX releases
    and to make it compile with the clang compiler
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-2" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-4" date="1726833600">- Switch from enchant to enchant2 for spell checking where it's available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-1" date="1727006400">- Update to 2.2.16 (rhbz#2314037)
  - Bluefish 2.2.16 is mostly a maintenance release
  - New feature: Bookmarks can now be generated from external commands such as
    ctags
  - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
  - The old built-in javascript beautifier has been removed; Bluefish now uses
    the jsbeautify from your system (if available)
  - The word-wrap function has been fixed
- Add fix for type issue causing FTBFS with gcc 14
  (https://sourceforge.net/p/bluefish/tickets/95/)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-3" date="1737028801">- Fix for gcc 15</changelog>
</package>
<package pkgid="08a792d1ca2dac5b6aedef45f68c2622c48901526f1c201bbb4088920ceea07e" name="bluefish-shared-data" arch="noarch">
  <version epoch="0" ver="2.2.16" rel="3.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-5" date="1702468800">- Fix use of incompatible pointer types (upstream rev 8991)
- Fix improper use of pointer: https://sourceforge.net/p/bluefish/tickets/80/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.14-7" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-1" date="1710763200">- Update to 2.2.15 (rhbz#2269978)
  - Bluefish 2.2.15 is a minor maintenance release
  - New feature: it can highlight the indenting level with a vertical line,
    which is very useful during python programming and helps with a lot more
    programming languages
  - Fix zencoding for python releases newer than 3.12
  - Add a retry button when opening files from a remote location
  - Tiny performance improvement when scrolling
  - Fix a bug in the bookmarks function and the visible indenting function
    that potentially could lead to a crash
  - The perl syntax detection has been greatly improved
  - YAML syntax detection has been added
  - The code has several fixes to make it compile on modern Mac OSX releases
    and to make it compile with the clang compiler
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-2" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.15-4" date="1726833600">- Switch from enchant to enchant2 for spell checking where it's available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-1" date="1727006400">- Update to 2.2.16 (rhbz#2314037)
  - Bluefish 2.2.16 is mostly a maintenance release
  - New feature: Bookmarks can now be generated from external commands such as
    ctags
  - The 2.2.16 code has a lot of small fixes and improvements for Mac OSX
  - The old built-in javascript beautifier has been removed; Bluefish now uses
    the jsbeautify from your system (if available)
  - The word-wrap function has been fixed
- Add fix for type issue causing FTBFS with gcc 14
  (https://sourceforge.net/p/bluefish/tickets/95/)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.16-3" date="1737028801">- Fix for gcc 15</changelog>
</package>
<package pkgid="c80dc6e781a83ab110309d14ac7c773ce6d7aed2deeb707f5db5e0ceb65009be" name="btcflash" arch="x86_64">
  <version epoch="11" ver="1.1" rel="2.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="f59e079a86d900250bbee87b3b1a5fd9af82739c455f15c10a815be53aff75fa" name="btcflash" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="35207c5bd7964ae3b2e39acfa198dd3557a7afbd4747a07e888e3c3167bec962" name="cdda2wav" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="89da5d9d43a84d1409c118c14527da934a11ea86e3048297bad2cf89b9ec4ffd" name="cdda2wav" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="ae4f1e24e77f234198662d2391b10811e285687eb65200c80a92b268861debf6" name="cdrecord" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="b04b3a80878486b5eb85887bf6fae57bcee75855c5289f1de609e13d88beb854" name="cdrecord" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="e81d0867fec4cbdb0b852f15f0ba9b3a41130cd2d50ad098c19253a1dad3bcae" name="cdrtools-devel" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="69ee4156489e03cf458156e6f08591a6e2a9b9d2426e248833c0733494812f4b" name="cdrtools-devel" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="b4b22638aab8616a61de1e33167c85f6335841808713c75ceb19adcbc3a17317" name="cdrtools-libs" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="6807e6cff672591cbffdfcb80afc17599c0215779ffdbd6859dcf6485d389851" name="cdrtools-libs" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="064cf7b034e49e0facd788f18c111453baeebee396e9c9cc08a0412badb01d9f" name="check" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="d16c0a952bb3736adc35a1c5238b7ebf1f596e2b594a614cf3318908432bf57e" name="check-checkmk" arch="noarch">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="f491abcae18b703d468b2ff887fcbaebe68c7845fc9124411650541e809591ba" name="check-devel" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="01ac131365a14b5dc247c705b3137bf47decc902c49a871c270d1300a5616d4c" name="check-static" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="fa8fc117e312b8f70cceeb8fa083799f91992e40332cb5a6c3d2a5b5ba966e78" name="city-fan.org-release" arch="noarch">
  <version epoch="0" ver="3" rel="22.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-13" date="1723809600">- Fedora 41 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-14" date="1723809601">- Add support for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-15" date="1730289600">- Fedora 41 rebuild complete and released</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-16" date="1738843200">- Fedora 42 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-17" date="1745236800">- Fedora 42 rebuild complete and released
- Drop support for EOL distros prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-18" date="1751889600">- Include GPG key for Fedora 43 in package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-19" date="1755086400">- Fedora 43 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-20" date="1761739200">- Fedora 43 rebuild complete and released</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-21" date="1770379200">- Fedora 44 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-22" date="1771502400">- Fedora 44 rebuild complete</changelog>
</package>
<package pkgid="28ef0b8a0105e3d1537258c71399694d543ed705d7148bba8e63b0c8aacc2b90" name="contagged" arch="noarch">
  <version epoch="0" ver="0.8.0" rel="6.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8.0-5" date="1642507200">- Rebase code using actively-maintained fork at https://github.com/bob4os/contagged
- Drop support for old distributions prior to Fedora 19
  - Drop support for Apache httpd 2.2
  - Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8.0-6" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="cdf00ebdfc5ad38e3f98fa5695516f395d3f997e66782e9b42aa7265d0a4a757" name="curl" arch="i686">
  <version epoch="0" ver="8.19.0" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-2.0.cf" date="1763035200">- Remove bundled wcurl utility that was added in 8.14.0~rc1; use wcurl package
  instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-3.0.cf" date="1763121600">- Either require wcurl or obsolete it, depending on how recent the
  distribution's own wcurl package is</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
</package>
<package pkgid="3fd046c79aab4bc82d5cb156121c2ff821be28e79cc3dda4c84e2d81d1c6b341" name="curl" arch="x86_64">
  <version epoch="0" ver="8.19.0" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-2.0.cf" date="1763035200">- Remove bundled wcurl utility that was added in 8.14.0~rc1; use wcurl package
  instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-3.0.cf" date="1763121600">- Either require wcurl or obsolete it, depending on how recent the
  distribution's own wcurl package is</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
</package>
<package pkgid="3342264870ac93c21880b0e7b14cdba6ad8265be6e72ec2c1d119de9b72b04d6" name="curl-minimal" arch="i686">
  <version epoch="0" ver="8.19.0" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-2.0.cf" date="1763035200">- Remove bundled wcurl utility that was added in 8.14.0~rc1; use wcurl package
  instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-3.0.cf" date="1763121600">- Either require wcurl or obsolete it, depending on how recent the
  distribution's own wcurl package is</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
</package>
<package pkgid="d76e22eab97de5d0609dbe9866236d3a47e3e4bb31693e2b600f1e6597f1f2cd" name="curl-minimal" arch="x86_64">
  <version epoch="0" ver="8.19.0" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-2.0.cf" date="1763035200">- Remove bundled wcurl utility that was added in 8.14.0~rc1; use wcurl package
  instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-3.0.cf" date="1763121600">- Either require wcurl or obsolete it, depending on how recent the
  distribution's own wcurl package is</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
</package>
<package pkgid="221efbe844755e5b36da76dec7f43ec9fc99384a602b83f2b36069aa449f9faf" name="davfs2" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.0-7.0.cf" date="1730289600">- Add support for building with neon version 0.33</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-1.0.cf" date="1732276800">- Update to 1.7.1
  - The project has been moved to github, which will make it easier to track
    issues, receive PR requests, implement CI, etc.
  - Hide password prompt when -o username=myname is specified
  - Fix segfault on prop query on backup node
  - Fix autoload fuse module</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-1.1.cf" date="1733486400">- Add support for building with neon version 0.34</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-3.0.cf" date="1753876800">- Add sysusers.d config file to allow rpm to create users/groups automatically
  from Fedora 43 onwards
- Add support for building with neon version 0.35</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-4.0.cf" date="1753876801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.2-1.0.cf" date="1756209600">- Update to 1.7.2 (rhbz#2391098)
  - Add support for libneon 34, 35
  - Increase buf read size to 64 (fixes read issue on linux 6.16)
  - Allow setting a mount password via DAVFS_PASSWORD
  - Introduce sync_on_lookup option (off by default)
  - Don't compress man pages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.2-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.3-1.0.cf" date="1773403200">- Update to 1.7.3 (rhbz#2447065)
  - Add musl support
  - Fix macro-substitution in manual pages
  - Remove hardcoded neon versions from configure.ac
- Use %{make_build} and %{make_install}
- Consider AUTHORS as a license file rather than just documentation</changelog>
</package>
<package pkgid="eb1f8975d99cee99181f82c79ecc9e72ba81ae49d0dd8d2e18293ce4ca752be9" name="demoroniser" arch="noarch">
  <version epoch="0" ver="1" rel="3.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1-2" date="1651060800">- Modernize spec and add dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1-3" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="56204e1d27c3f7f18d7a1cbe86fce6a260e19508dc0075523b10a76b4d971a6d" name="dovecot" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="7f166abd8098db66c49784bdcb8b1dc4bcc6e247682ab9cdb042528038d807ae" name="dovecot-devel" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="6bc5dd57b1461371db5d4259f70bce33530c50030d7a19e318976dec877d33fd" name="dovecot-mysql" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="4545cfe83ed68c9a5f29657cf0faa8e83fd081c45ee9afe17320d3799bca339a" name="dovecot-pgsql" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="86194ec180ccce5d32d0c18c63a1198f8716b1c7f24ece5454e16dab2935bfa7" name="dovecot-pigeonhole" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="6686f0691df7b8e736843f0747af012f92dce34aea7489e4e6f90b3605d082ea" name="drive-google" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="1.a42ab82.fc37"/>
  <changelog author="Vaughan &lt;devel at agrez dot net&gt; - 0.3.9.1-3.52aed62" date="1558958400">- Rebuild for f30</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.9.1-4.52aed62" date="1577793600">- Local f31 build as upstream is unresponsive
  https://github.com/agrez/drive-google/issues/5
- Use %license
- Drop legacy %defattr</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-1.a42ab82" date="1617710400">- New release
- Update to git commit: a42ab82225d2c9cc370926d6f0055a7039979e66</changelog>
</package>
<package pkgid="d44ecc682175bb058cd90d3a56bd7c399b46d88631878adb2f3c716e87ca27c8" name="geoipupdate" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.1.1-1" date="1683806400">- Update to 5.1.1
  - Fixed the Docker health-check script to use the correct time of the last
    update attempt (GH#225)
  - Added new '--output' flag to print JSON to standard output describing the
    result of the run
  - Compilation with Go versions before 1.19 is no longer supported</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.1.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.0-1" date="1689854401">- Update to 6.0.0
  - 'geoipupdate' now supports configuration via environment variables: any
    configuration set this way will override any value from the config file,
    but still be overridden by any associated command line option (if any)
  - The following new environment variables are supported:
    - GEOIPUPDATE_ACCOUNT_ID
    - GEOIPUPDATE_ACCOUNT_ID_FILE
    - GEOIPUPDATE_CONF_FILE
    - GEOIPUPDATE_DB_DIR
    - GEOIPUPDATE_EDITION_IDS
    - GEOIPUPDATE_HOST
    - GEOIPUPDATE_LICENSE_KEY
    - GEOIPUPDATE_LICENSE_KEY_FILE
    - GEOIPUPDATE_LOCK_FILE
    - GEOIPUPDATE_PARALLELISM
    - GEOIPUPDATE_PRESERVE_FILE_TIMES
    - GEOIPUPDATE_PROXY
    - GEOIPUPDATE_PROXY_USER_PASSWORD
    - GEOIPUPDATE_RETRY_FOR
    - GEOIPUPDATE_VERBOSE
  - Changed the signature of 'NewConfig' in 'pkg/geoipupdate' to no longer
    accept a positional config file path argument, which can now be passed in
    using the option from 'WithConfigFile' along with the other optional
    parameters
  - 'geoipupdate' and 'NewConfig' no longer require a config file to exist
  - The '--stack-trace' flag has been removed; this flag has been broken since
    4.11.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-1" date="1704888000">- Update to 6.1.0
  - 'geoipupdate' now sets the version in the 'User-Agent' header to the
    version in the binary; while there were no issues with the version in the
    header, this makes sure it will match the binary (the header also now
    includes build information, such as OS and architecture)
  - White spaces in secret files 'GEOIPUPDATE_ACCOUNT_ID_FILE',
    'GEOIPUPDATE_LICENSE_KEY_FILE' are ignored (GH#262)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-3" date="1706097600">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-4" date="1707825600">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.0.1-1" date="1712664000">- Update to 7.0.1
  BREAKING CHANGE: Improvements to the HTTP download API
  - The client now calls two new endpoints:
    - '/geoip/updates/metadata', which is responsible for getting information
      about a database edition
    - '/geoip/databases/{edition-id}/download', which is responsible for
      downloading the content of a database edition; this new endpoint
      redirects downloads to R2 presigned URLs, so systems running
      'geoipupdate' need to be able to reach
      'mm-prod-geoip-databases.a2649acb697e2c09b632799562c076f2.r2.cloudflarestorage.com'
      in addition to 'updates.maxmind.com'
  BREAKING CHANGE: The public package API has been redesigned
  - The previous API was not easy to use and had become a maintenance burden
  - We now expose a 'Client' at 'github.com/maxmind/geoipupdate/client' with a
    'Download()' method
  - The intention is to expose less of the 'geoipupdate' internals and provide
    a simpler and easier to use package; many previously exposed methods and
    types are now either internal only or have been removed
  BREAKING CHANGE: If set, 'GEOIPUPDATE_VERBOSE' must either be '0' or '1';
  all other values will return an error
  - Setting 'GEOIPUPDATE_VERBOSE' to '1' now works as expected; in the 6.0.0
    and 6.1.0 releases, the flag was ignored (GH#298)
  - 'geoipupdate' now supports retrying on more types of errors such as HTTP2
    INTERNAL_ERROR
  - Now 'geoipupdate' doesn't require the user to specify the config file if
    all the other arguments are set via the environment variables (GH#284)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.0.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.0-1" date="1732017600">- Update to 7.1.0
  - Allow the 'Host' configuration directive and the 'GEOIPUPDATE_HOST'
    environment variable to accept a value with the scheme set; if not set, it
    will continue to default to 'https://' (GH#310)
  - Export 'HTTPError' to enable fine-grained error handling for users of
    'github.com/maxmind/geoipupdate/client' (GH#341)</changelog>
</package>
<package pkgid="b5f9e877de60ac67f0238f22f31e0568fcc155b22a2d9fb5ad81a7b3fceddf6e" name="geoipupdate-cron" arch="noarch">
  <version epoch="0" ver="7.1.0" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.1.1-1" date="1683806400">- Update to 5.1.1
  - Fixed the Docker health-check script to use the correct time of the last
    update attempt (GH#225)
  - Added new '--output' flag to print JSON to standard output describing the
    result of the run
  - Compilation with Go versions before 1.19 is no longer supported</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.1.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.0-1" date="1689854401">- Update to 6.0.0
  - 'geoipupdate' now supports configuration via environment variables: any
    configuration set this way will override any value from the config file,
    but still be overridden by any associated command line option (if any)
  - The following new environment variables are supported:
    - GEOIPUPDATE_ACCOUNT_ID
    - GEOIPUPDATE_ACCOUNT_ID_FILE
    - GEOIPUPDATE_CONF_FILE
    - GEOIPUPDATE_DB_DIR
    - GEOIPUPDATE_EDITION_IDS
    - GEOIPUPDATE_HOST
    - GEOIPUPDATE_LICENSE_KEY
    - GEOIPUPDATE_LICENSE_KEY_FILE
    - GEOIPUPDATE_LOCK_FILE
    - GEOIPUPDATE_PARALLELISM
    - GEOIPUPDATE_PRESERVE_FILE_TIMES
    - GEOIPUPDATE_PROXY
    - GEOIPUPDATE_PROXY_USER_PASSWORD
    - GEOIPUPDATE_RETRY_FOR
    - GEOIPUPDATE_VERBOSE
  - Changed the signature of 'NewConfig' in 'pkg/geoipupdate' to no longer
    accept a positional config file path argument, which can now be passed in
    using the option from 'WithConfigFile' along with the other optional
    parameters
  - 'geoipupdate' and 'NewConfig' no longer require a config file to exist
  - The '--stack-trace' flag has been removed; this flag has been broken since
    4.11.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-1" date="1704888000">- Update to 6.1.0
  - 'geoipupdate' now sets the version in the 'User-Agent' header to the
    version in the binary; while there were no issues with the version in the
    header, this makes sure it will match the binary (the header also now
    includes build information, such as OS and architecture)
  - White spaces in secret files 'GEOIPUPDATE_ACCOUNT_ID_FILE',
    'GEOIPUPDATE_LICENSE_KEY_FILE' are ignored (GH#262)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-3" date="1706097600">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-4" date="1707825600">- Rebuild for golang 1.22.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.0.1-1" date="1712664000">- Update to 7.0.1
  BREAKING CHANGE: Improvements to the HTTP download API
  - The client now calls two new endpoints:
    - '/geoip/updates/metadata', which is responsible for getting information
      about a database edition
    - '/geoip/databases/{edition-id}/download', which is responsible for
      downloading the content of a database edition; this new endpoint
      redirects downloads to R2 presigned URLs, so systems running
      'geoipupdate' need to be able to reach
      'mm-prod-geoip-databases.a2649acb697e2c09b632799562c076f2.r2.cloudflarestorage.com'
      in addition to 'updates.maxmind.com'
  BREAKING CHANGE: The public package API has been redesigned
  - The previous API was not easy to use and had become a maintenance burden
  - We now expose a 'Client' at 'github.com/maxmind/geoipupdate/client' with a
    'Download()' method
  - The intention is to expose less of the 'geoipupdate' internals and provide
    a simpler and easier to use package; many previously exposed methods and
    types are now either internal only or have been removed
  BREAKING CHANGE: If set, 'GEOIPUPDATE_VERBOSE' must either be '0' or '1';
  all other values will return an error
  - Setting 'GEOIPUPDATE_VERBOSE' to '1' now works as expected; in the 6.0.0
    and 6.1.0 releases, the flag was ignored (GH#298)
  - 'geoipupdate' now supports retrying on more types of errors such as HTTP2
    INTERNAL_ERROR
  - Now 'geoipupdate' doesn't require the user to specify the config file if
    all the other arguments are set via the environment variables (GH#284)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.0.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.0-1" date="1732017600">- Update to 7.1.0
  - Allow the 'Host' configuration directive and the 'GEOIPUPDATE_HOST'
    environment variable to accept a value with the scheme set; if not set, it
    will continue to default to 'https://' (GH#310)
  - Export 'HTTPError' to enable fine-grained error handling for users of
    'github.com/maxmind/geoipupdate/client' (GH#341)</changelog>
</package>
<package pkgid="a04752328c60757ed2f7af492347848e6c52058743f9acc447db27e3df9fbdd1" name="getmail" arch="noarch">
  <version epoch="0" ver="5.16" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.16-1" date="1635768000">- Update to 5.16
  - Add new use_netrc and netrc_file configuration options to support reading
    username/password from a .netrc file
  - Documentation updates
- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.16-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="ffcd11dbbb9ad2184285ab14b5ecfb30d45b4d0a6c10b763c8271a00b7f1baae" name="grepmail" arch="noarch">
  <version epoch="0" ver="5.3111" rel="22.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-16.0.cf" date="1674129600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-17.0.cf" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-18.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-20.0.cf" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-22.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="a7b9cbb0b077f0157a9281a17cc3077346bdf9081faae2cb6419077b40726a90" name="gtkwave" arch="x86_64">
  <version epoch="0" ver="3.3.127" rel="1.fc37"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 3.3.121-5" date="1738584000">- Rebuild for tcl/tk</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.121-6" date="1740830400">- Add dependency on gdk-pixbuf2-modules-extra, needed for XPM support on
  F-41, EL-10 onwards
  (https://github.com/gtkwave/gtkwave/issues/417#issuecomment-2682344768)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.122-1" date="1745323200">- Update to 3.3.122
  - Buffer warning fix in fstVcdIDForFwrite
  - Warning fixes in vzt_read.c and fstapi.c
  - Prototype fixes for port to gcc15
  - Fixes for tcl9 compatibility
  - Added fixes for --saveonexit command line option
  - Fix for convert_real for TR_REAL traces
  - Fix for popen_san() in vcd2fst using fsdb binaries
  - Added fstWriterGetFlushContextPending() to fstapi.c/.h
  - Reenable wayland code for primary and baseline markers in wavewindow.c
  - Unnamed scope fix for fstReader
  - Opaque pointer warning fix for fstapi.c
  - Remove broken pseudo-2D array support in fst.c
  - Fix in fst.c for signals whose MSB/LSB/len mismatch
  - libfst #15: fstReaderOpen should not fail on empty FST file
  - Fix crash introduced in 3.3.120 with legacy VCD loader caused by
    "Fix case of missing newline at EOF for VCD loaders"
  - Fix fstminer not handling string transitions correctly (GH#423)
  - Fix in fst.c for duplicate string values
  - Remove duplicate string values from adjacent value changes
  - libghw: Add from upstream for ghdl_rtik_type_i64
  - Fix inconsistent handling of invalid vector bounds in VCD and FST loaders
    (GH#428)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.123-1" date="1746792000">- Update to 3.3.123
  - Fix broken autocoalesce of bitblasted vectors that fix for GH#428 in
    3.3.122 introduced
  - Fix improper autocoalesce of adjacent duplicate symbols
  - Preserve dimension on integer array element when expanded</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.124-1" date="1747224000">- Update to 3.3.124
  - Ensure type name in $var for VCD saver is &gt;0 length
  - Preserve bitblasted vector ordering with VCD saver.
  - Use full type names in VCD saver instead of abbreviations
  - Dump all bits for a bitblasted vector in VCD saver in order to ensure
    stray bit extractions do not cause a failure to reconstruct vectors in
    proper order in the extracted file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.124-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.125-1" date="1755691200">- Update to 3.3.125
  - Added json2stems to distribution to support newer versions of Verilator
  - VCD parser fix for colon in VCD variable name
  - Parameter size 0 fix for Vivado: backs out very old fix (for MTI) that
    converts 0 size signals to reals
  - Update vcd2fst so that it handles MTI 0 size conversion</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.126-1" date="1767614400">- Update to 3.3.126
  - Added -H --noheader command line option for GTK3
  - Added headerbar rc variable to disable GTK3 headerbars
  - Fix for rendering multiline string constants in dumps
  - Add warning message for missing XPM loader
  - Updated libghw to current version
  - Changed behaviour of X search in pattern search so it is matched by a
    single X bit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.126-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.127-1" date="1776081600">- Update to 3.3.127
  - Fix for fixed point shift that does not disable it on the specify value
    change menu option
  - Changed ps2pdf to pstopdf on Mac as ps removed by Sonoma
  - Warnings fix in vcd2fst for missing string.h include
  - Added FST_ST_SV_ARRAY (FST) and "sv_array" (VCD) for arrays
    (gtkwave/libfst#17)
  - Wrote replacement for gdk_pixbuf_new_from_xpm_data
  - Update FSDB to handle FST_ST_SV_ARRAY (VCS emits this),
    FSDB_ST_SV_INTERFACEPORT_REF, and FSDB_VT_STRING
  - Added "SV_ST_ARRAY" to exclude file parsing on init
  - Fix use after free of GLOBALS-&gt;entrybox_text in regexp_highlight_generic()
- Drop dependency on gdk-pixbuf2-modules-extra, XPM support now done locally</changelog>
</package>
<package pkgid="3ced97623d013831b2244b77c580186ef43df9bef3cdfa2a928f82c3a18503c2" name="libcurl" arch="i686">
  <version epoch="0" ver="8.19.0" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-2.0.cf" date="1763035200">- Remove bundled wcurl utility that was added in 8.14.0~rc1; use wcurl package
  instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-3.0.cf" date="1763121600">- Either require wcurl or obsolete it, depending on how recent the
  distribution's own wcurl package is</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
</package>
<package pkgid="491e1058410c8d309ef5b19afa7658cf8a0e9607a585c98c0f2fed2e5c906ddf" name="libcurl" arch="x86_64">
  <version epoch="0" ver="8.19.0" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-2.0.cf" date="1763035200">- Remove bundled wcurl utility that was added in 8.14.0~rc1; use wcurl package
  instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-3.0.cf" date="1763121600">- Either require wcurl or obsolete it, depending on how recent the
  distribution's own wcurl package is</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
</package>
<package pkgid="003eeed0e52ccd3f84f9a1bcd5f954bef8c0ea54dd613d298d59ca0bce37a265" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="8.19.0" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-2.0.cf" date="1763035200">- Remove bundled wcurl utility that was added in 8.14.0~rc1; use wcurl package
  instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-3.0.cf" date="1763121600">- Either require wcurl or obsolete it, depending on how recent the
  distribution's own wcurl package is</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
</package>
<package pkgid="ae194e0fa0256bd4fd07f42336cdf2a1a40a299478344b693e17de971856c4fc" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.19.0" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-2.0.cf" date="1763035200">- Remove bundled wcurl utility that was added in 8.14.0~rc1; use wcurl package
  instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-3.0.cf" date="1763121600">- Either require wcurl or obsolete it, depending on how recent the
  distribution's own wcurl package is</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
</package>
<package pkgid="2d34bee4fa49e3907d4e21c0dbb2b1138f75c97198a15402be4ac9588a08b66f" name="libcurl-minimal" arch="i686">
  <version epoch="0" ver="8.19.0" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-2.0.cf" date="1763035200">- Remove bundled wcurl utility that was added in 8.14.0~rc1; use wcurl package
  instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-3.0.cf" date="1763121600">- Either require wcurl or obsolete it, depending on how recent the
  distribution's own wcurl package is</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
</package>
<package pkgid="fff5b4e61b1fc7cbd5b9bb54c265876ef4de91f1c7940718b2ecddab8b1adf5a" name="libcurl-minimal" arch="x86_64">
  <version epoch="0" ver="8.19.0" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.16.0-1.0.cf" date="1757505600">- Update to 8.16.0
  - build: Bump minimum required mingw-w64 to v3.0 (from v1.0)
  - curl: Add --follow
  - curl: Add --out-null
  - curl: Add --parallel-max-host to limit concurrent connections per host
  - curl: Make --retry-delay and --retry-max-time accept decimal seconds
  - hostip: Cache negative name resolves
  - IP happy eyeballing: Keep attempts running
  - mbedtls: Bump minimum version required to 3.2.0
  - multi: Add curl_multi_get_offt
  - multi: Add CURLMOPT_NETWORK_CHANGED to signal network changed
  - netrc: Use the NETRC environment variable (first) if set
  - smtp: Allow suffix behind a mail address for RFC 3461
  - tls: Make default TLS version be minimum 1.2
  - tool_getparam: Add support for '--longopt=value'
  - vquic: Drop msh3
  - websocket: Support CURLOPT_READFUNCTION
  - writeout: Add %time{}
  - _PROTOCOLS.md: Mention file:// is only for absolute paths
  - acinclude: --with-ca-fallback only works with OpenSSL
  - alpn: Query filter
  - ares: Destroy channel on shutdown
  - ares: Use 'ares_strerror()' to retrieve error messages
  - asyn-thrdd: Fix --disable-socketpair builds
  - asyn-thrdd: Fix Curl_async_pollset without socketpair
  - asyn-thrdd: Fix no 'HAVE_GETADDRINFO' builds
  - asyn-thrdd: Manage DEFERRED and locks better
  - autotools: Make curl-config executable
  - aws-lc: Do not use large buffer
  - BINDINGS.md: Add LibQurl
  - bufq: Add integer overflow checks before chunk allocations
  - bufq: Removed "Useless Assignment"
  - bufq: Simplify condition
  - build: Allow libtests/clients to use libcurl dependencies directly
  - build: Disable 'TCP_NODELAY' for emscripten
  - build: Enable _GNU_SOURCE on GNU/Hurd
  - build: Extend GNU C guards to clang where applicable, fix fallouts
  - build: Fix build errors/warnings in rare configurations
  - build: Fix disable-verbose
  - build: Fix mingw-w64 version guard for mingw32ce
  - build: If no perl, fix to use the pre-built hugehelp, if present
  - build: Link to Apple frameworks required by static wolfSSL
  - build: Support LibreSSL native crypto lib with ngtcp2 1.15.0+
  - build: Tidy up compiler definition for tests
  - cf-https-connect: Delete unused declaration
  - clang-tidy: Disable 'clang-analyzer-security.ArrayBound'
  - cmake: 'CURL_CA_FALLBACK' only works with OpenSSL
  - cmake: Capitalize 'Rustls' in the config summary
  - cmake: Defer building 'unitprotos.h' till a test target needs it
  - cmake: Define 'WIN32_LEAN_AND_MEAN' for examples
  - cmake: Drop redundant unity mode for 'curlinfo'
  - cmake: Enable '-Wall' for MSVC 1944
  - cmake: Fix 'ENABLE_UNIX_SOCKETS=OFF' with pre-fill enabled on unix
  - cmake: Fix setting LTO properties on the wrong targets
  - cmake: Fix to disable Schannel and SSPI for non-Windows targets
  - cmake: Fix to restrict 'SystemConfiguration' to macOS
  - cmake: Honour 'CMAKE_C_FLAGS' in test 1119 and 1167
  - cmake: Improve error message for invalid HTTP/3 MultiSSL configs
  - cmake: Keep websockets disabled if HTTP is disabled
  - cmake: Make 'runtests' targets build the curl tool
  - cmake: Make the ExternalProject test work
  - cmake: Omit linking duplicate/unnecessary libs to tests and examples
  - cmake: Re-add simple test target, and name it 'tests'
  - cmake: Set 'CURL_DIRSUFFIX' automatically in multi-config builds
  - CODE_STYLE: Sync with recent 'checksrc.pl' updates
  - config-win32.h: Do not use winsock2 'inet_ntop()'/'inet_pton()'
  - configure: If no perl, disable unity and shell completion, related tidy ups
  - configure: Tidy up internal names in ngtcp2 ossl detection logic
  - connectdata: Remove primary+secondary ip_quadruple
  - connection: Terminate after goaway
  - contrithanks: Fix for BSD 'sed' tool
  - cookie: Don't treat the leading slash as trailing (CVE-2025-9086)
  - cookie: Remove expired cookies before listing
  - curl-config: Remove X prefix use
  - curl/system.h: Fix for GCC 3.3.x and older
  - curl: Make the URL indexes 64 bit
  - curl: tool_read_cb fix of segfault
  - curl_addrinfo: Drop workaround for old-mingw
  - curl_easy_ssls_export: Make the example more clear
  - curl_fnmatch, servers: Drop local macros in favour of 'sizeof()'
  - curl_mime_data_cb.md: Mention what datasize is for
  - curl_ossl: Extend callback table for nghttp3 1.11.0
  - curl_setup.h: include 'stdint.h' earlier
  - CURLINFO_FILETIME*.md: Correct the examples
  - CURLOPT: Bump 'CURL_REDIR_*' macros to 'long'
  - CURLOPT: Bump 'CURL_SSLVERSION_*' macros to 'long'
  - CURLOPT: Bump 'CURLALTSVC_*' macros to 'long'
  - CURLOPT: Bump 'CURLFTP*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLHEADER_*' macros to 'long', drop casts
  - CURLOPT: Bump 'CURLPROTO_*' macros to 'long'
  - CURLOPT: Bump 'CURLPROXY_*' enums to 'long', drop casts
  - CURLOPT: Bump 'CURLWS_NOAUTOPONG', 'CURLWS_RAW_MODE' macros to 'long'
  - CURLOPT: Bump remaining macros to 'long'
  - CURLOPT: Drop redundant 'long' casts
  - CURLOPT: Replace '(long)' cast with 'L' suffix for 'CURLHSTS_*' macros
  - CURLOPT_HTTP_VERSION: Mention new default value
  - CURLOPT_SSL_CTX_*: Replace the base64 with XXXX
  - delta: Fix warnings, fix for non-GNU 'date' tool
  - DEPRECATE.md: Drop old OpenSSL versions
  - DEPRECATE.md: Drop support for c-ares versions before 1.16.0
  - DEPRECATE.md: Drop support for Windows XP/2003
  - DEPRECATE.md: Remove leftover "nothing"
  - DISTROS.md: Add Haiku
  - docs/cmdline-opts: The auth types are not mutually exclusive
  - docs: Add CURLOPT type change history, drop casts where present
  - docs: Add major incident section to vuln disclosure policy
  - docs: Fix link CONTRIBUTE.md link
  - docs: Fix name in curl_easy_ssls_export man page
  - docs: Fix typo (staring -&gt; starting)
  - docs: Point two broken links to archive.org
  - docs: Put '&lt;&gt;' within backticks in titles
  - doh: Rename symbols to avoid collision with mingw-w64 headers
  - easy handle: Check validity on external calls
  - examples: Drop long cast for 'CURLALTSVC_*'
  - examples: Make 'CURLPIPE_MULTIPLEX' fallback 'long'
  - examples: Remove base64 encoded chunks from examples
  - examples: Remove href_extractor.c
  - ftp: Store dir components as start+len instead of memdup'ing
  - ftp: Use 'conn' instead of 'data-&gt;conn'
  - gnutls: Fix building with older supported GnuTLS versions
  - gnutls: Some small clean-ups
  - hmac: Return error if init fails
  - hostip: Do DNS cache pruning in milliseconds
  - HTTP3.md: Avoid 'configure' issue for ngtcp2 1.14.0+ compatibility
  - http: const up readonly H2_NON_FIELD
  - http: Do the cookie list access under lock
  - http: Silence '-Warray-bounds' with gcc 13+
  - idn: Reject conversions that end up as a zero length hostname
  - inet_pton, inet_ntop: Drop declarations when unused
  - lib1560: Fix memory leak when run without UTF-8 support
  - lib1560: Replace an 'int' with 'bool'
  - lib2700: Use 'testnum'
  - lib517: Use 'LL' 64-bit literals and re-enable a test case ('time_t')
  - lib: Drop 'UNUSED_PARAM' macro
  - libcurl: Reset rewind flag in curl_easy_reset()
  - libssh: Use sftp_aio instead of sftp_async for sftp_recv
  - libtests: Update format strings to avoid casts, drop some macros
  - libtests: Use 'FMT_SOCKET_T', drop more casts
  - managen: Reset text mode at end of table marker
  - mbedtls: Check for feature macros instead of version
  - mdlinkcheck: Handle links with a leading slash properly
  - memanalyze: fIx warnings
  - memory: Make function overrides work reliably in unity builds
  - multi event: Remove only announced
  - multi: Don't insert a node into the splay tree twice
  - multi: Fix assert in multi_getsock()
  - multi: Fix bad splay management
  - multi: Process pending, one by one
  - multi: Replace remaining EXPIRE_RUN_NOW
  - multissl: Initialize when requesting a random number
  - ngtcp2: Extend callback tables for nghttp3 1.11.0 and ngtcp2 1.14.0
  - ngtcp2: Handshake timeout should be equal to --connect-timeout
  - ngtcp2: Use custom mem funcs
  - openldap: Fix '-Wtentative-definition-compat'
  - openssl: Add and use 'HAVE_BORINGSSL_LIKE' internal macro
  - openssl: Add and use 'HAVE_OPENSSL3' internal macro
  - openssl: Assume 'OPENSSL_VERSION_NUMBER'
  - openssl: Auto-pause on verify callback retry
  - openssl: Check SSL_write() length on retries
  - openssl: Clear errors after a failed 'd2i_X509()'
  - openssl: Drop more legacy cruft
  - openssl: Drop redundant 'HAVE_OPENSSL_VERSION' macro
  - openssl: Drop redundant version check
  - openssl: Drop single-use interim macro 'USE_OPENSSL_SRP'
  - openssl: Enable 'HAVE_KEYLOG_CALLBACK' for AWS-LC
  - openssl: Merge two `#if` blocks
  - openssl: Output unescaped utf8 x509 issuer/subject DNs
  - openssl: Remove legacy cruft, document macro guards
  - openssl: Save and restore OpenSSL error queue in two functions
  - openssl: Some small clean-ups
  - openssl: Split cert_stuff into smaller sub functions
  - openssl: Sync an AWS-LC guard with BoringSSL
  - openssl: Use 'RSA_flags()' again with BoringSSL
  - parallel-max: Bump the max value to 65535
  - parsedate: Make Curl_getdate_capped able to return epoch
  - processhelp.pm: Fix to use the correct null device on Windows
  - processhelp.pm: Use 'Win32::Process*' perl modules if available
  - projects: Drop unused logic from 'generate.bat'
  - projects: Fix Windows project 'clean' function
  - pytest: Add SOCKS tests and scoring
  - pytest: Fix test_17_09_ssl_min_max for BoringSSL
  - pytest: Increase server KeepAliveTimeout
  - pytest: Relax error check on test_07_22
  - resolving: DNS error tracing
  - runtests: Assume 'Time::HiRes', drop Perl Win32 dependency
  - runtests: Remove warning message
  - runtests: Replace '--ci' with '--buildinfo', show OS/Perl version again
  - runtests: Show still running tests when nothing has happened for a while
  - schannel: Add an error message for client cert not found
  - schannel: Assume 'CERT_CHAIN_REVOCATION_CHECK_CHAIN'
  - schannel: Drop fallbacks for 4 macros
  - schannel: Drop fallbacks for unused 'BCRYPT_*' macros
  - schannel: Drop old-mingw special case
  - schannel: Fix recent update for mingw32ce
  - schannel: Fix renegotiation
  - schannel: Improve handshake procedure
  - schannel: Not supported with UWP, drop redundant code
  - schannel: Use if(result) like the code style says
  - scripts: Enable strict warnings in Perl where missing, fix fallouts
  - scripts: Fix two Perl uninitialized value warnings
  - sendf: Getting less data than "max allowed" is okay
  - servers: Convert two macros to scoped static const strings
  - setopt: Refactor out the booleans from setopt_long to setopt_bool
  - setopt: Split out cookielist() and cookiefile()
  - socks: do_SOCKS5: Fix invalid buffer content on short send
  - socks_sspi: Simplify, clean up Curl_SOCKS5_gssapi_negotiate
  - spacecheck.pl: When detecting unicode, mention line number
  - spacecheck: Warn for 3+ empty lines in a row, fix fallouts
  - spelling: File system
  - test1148: Drop redundant 'LC_NUMBER=' env setting
  - test1557: Pass 'long' type to 'multi_setopt()'
  - test1560: Set locale/codeset with 'LC_ALL' (was: 'LANG'), test in CI
  - test1560: Skip some URLs if UTF-8 is not supported
  - test1: Raise alloc limits
  - test428: Re-enable for Windows
  - test436: Fix running on Windows with '_curlrc' present
  - test: Add 'cygwin' feature and use it (test 1056, 1517)
  - tests/ech_tests.sh: Indent, if/for style, inline ifs
  - tests: constify command-line arguments
  - tests: Delete unused commands
  - tests: Drop unused 'BLANK' envs, unset 'CURL_NOT_SET'
  - tests: Drop unused 'CURL_FORCEHOST' envs
  - tests: Fix perl warnings in http2-server, http3-server
  - tests: Fix prechecks to call the bundle libtest tool
  - tests: Fix UTF-8 detection, per-test 'LC_*' settings, CI coverage
  - tests: Merge clients into libtests, drop duplicate code
  - tests: Remove the QUIT filters
  - tests: Set 'CURL_ENTROPY' per test, not globally
  - tests: Unset some envs instead of blanking them
  - threaded-resolver: Fix shutdown
  - tidy-up: 'Curl_thread_create()' callback return type
  - tidy-up: Move literal to the right side of comparisons
  - tidy-up: Prefer 'ifdef'/'ifndef' for single checks
  - tls: CURLINFO_TLS_SSL_PTR testing
  - TODO: Remove session export item
  - TODO: Remove the expand ~ idea
  - tool_cb_wrt: Stop alloc/free for every chunk windows console output
  - tool_filetime: Accept setting negative filetime
  - tool_getparam: Let --trace-config override -v
  - tool_getparam: Warn on more unicode prefixes
  - tool_operate: Avoid superfluous strdup'ing output
  - tool_operate: Use stricter curl_multi_setopt() arguments
  - tool_operate: Use the correct config pointer
  - tool_paramhlp: Fix secs2ms()
  - tool_parsecfg: Use dynbuf for quoted arguments
  - tool_urlglob: Add integer overflow protection
  - tool_urlglob: Polish, clean-ups, improvements
  - typecheck-gcc: Add type checks for curl_multi_setopt()
  - unit-tests: Build the unitprotos.h from here
  - unit2604: Avoid 'UNCONST()'
  - URL-SYNTAX.md: Drop link to codepoints.net to pass linkcheck
  - urlapi: Allow more path characters "raw" when asked to URL encode
  - urldata: Reduce two long struct fields to unsigned short
  - urlglob: Only accept 255 globs
  - vquic-tls: Fix SSL backend type for QUIC connections using gnutls
  - vquic: Replace assert
  - vquic: Use curl_getenv
  - vtls: Set seen http version on successful ALPN
  - websocket example: Cast print values to unsigned int
  - websocket: Handling of PONG frames
  - websocket: Improve handling of 0-len frames
  - websocket: Reset upload_done when sending data
  - windows: Assume 'ADDRESS_FAMILY', drop feature checks
  - windows: Document toolchain support for 'CERT_NAME_SEARCH_ALL_NAMES_FLAG'
  - windows: Document toolchain support for some macros
  - windows: Drop 'CRYPT_E_*' macro fallbacks, limit one to mingw32ce
  - windows: Drop two interim, single-use macros
  - windows: Drop unused 'curlx/version_win32.h' includes
  - windows: Fix 'if_nametoindex()' detection with autotools, improve with cmake
  - windows: include 'wincrypt.h' before 'iphlpapi.h' for mingw-w64 &lt;6
  - windows: Target version macro tidy-ups
  - wolfssl: Rename ML-KEM hybrids to match IETF draft
  - write-out.md: header_json is not included the json object
  - ws: Avoid NULL pointer deref in curl_ws_recv
  - ws: Get a new mask for each new outgoing frame (CVE-2025-10148)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-1.0.cf" date="1762344000">- Update to 8.17.0
  - build: Drop Heimdal support
  - build: Drop the winbuild build system
  - krb5: Drop support for Kerberos FTP
  - libssh2: Up the minimum requirement to 1.9.0
  - multi: Add notifications API
  - progress: Expand to use 6 characters per size
  - ssl: Support Apple SecTrust configurations
  - tool_getparam: Add --knownhosts
  - vssh: Drop support for wolfSSH (addresses CVE-2025-10966)
  - wcurl: Import v2025.11.04
  - write-out: Make %header{} able to output *all* occurrences of a header
  - ares: Fix leak in tracing
  - asyn-ares: Remove wrong comment about the callback argument
  - asyn-ares: Use the duped hostname pointer for all calls
  - asyn-thrdd resolver: Clear timeout when done
  - asyn-thrdd: Drop pthread_cancel
  - autotools: Add support for libgsasl auto-detection via pkg-config
  - autotools: Capitalize Rustls in the log output
  - autotools: Drop detection of ancient OpenSSL libs RSAglue and rsaref
  - autotools: Fix duplicate UNIX and BSD flags in buildinfo.txt
  - autotools: Fix silly mistake in clang detection for buildinfo.txt
  - autotools: Make --enable-code-coverage support llvm/clang
  - autotools: Merge 'if's in GnuTLS/OpenSSL feature detection
  - aws-lc: Re-enable large read-ahead with v1.61.0 again
  - base64: Accept zero length argument to base64_encode
  - build: Address some -Weverything warnings, update picky warnings
  - build: Avoid overriding system open and stat symbols
  - build: Avoid overriding system symbols for fopen functions
  - build: Avoid overriding system symbols for socket functions
  - build: Show llvm/clang in platform flags and buildinfo.txt
  - c-ares: When resolving failed, persist error
  - cf-h2-proxy: Break loop on edge case
  - cf-ip-happy: Mention unix domain path, not port number
  - cf-socket: Always check Curl_cf_socket_peek() return code
  - cf-socket: Check params and remove accept procondition
  - cf-socket: Make set_local_ip void, and remove failf()
  - cf-socket: Set FD_CLOEXEC on all sockets opened
  - cf-socket: Tweak a memcpy() to read better
  - cf-socket: Use the right byte order for ports in bindlocal
  - cfilter: Unlink and discard
  - cfilters: Check return code from Curl_pollset_set_out_only()
  - checksrc: Allow disabling warnings on FIXME/TODO comments
  - checksrc: Catch banned functions when preceded by (
  - checksrc: Fix possible endless loop when detecting BANNEDFUNC
  - checksrc: Fix possible endless loops in the banned function logic
  - checksrc: Fix to handle ) predecing a banned function
  - checksrc: Reduce directory-specific exceptions
  - CI.md: Refresh
  - cmake/FindGSS: Dedupe pkg-config module strings
  - cmake/FindGSS: Drop wrong header check for GNU GSS
  - cmake/FindGSS: Fix pkg-config fallback logic for CMake &lt;3.16
  - cmake/FindGSS: Simplify/de-dupe lib setup
  - cmake/FindGSS: Whitespace/formatting
  - cmake: Add and use local FindGnuTLS module
  - cmake: Add CURL_CODE_COVERAGE option
  - cmake: Build the "all" examples source list dynamically
  - cmake: Clang detection tidy-ups
  - cmake: Drop exclamation in comment looking like a name
  - cmake: Fix 'HAVE_GNUTLS_SRP' detection after adding local FindGnuTLS module
  - cmake: Fix building docs when the base directory contains .3
  - cmake: Fix Linux pre-fill 'HAVE_POSIX_STRERROR_R' (when '_CURL_PREFILL=ON')
  - cmake: Fix Linux pre-fills for non-glibc (when '_CURL_PREFILL=ON')
  - cmake: Minor Heimdal flavour detection fix
  - cmake: Pre-fill three more type sizes on Windows
  - cmake: Say 'absolute path' in option descriptions and docs
  - cmake: Support building some complicated examples, build them in CI
  - cmake: Use modern alternatives for get_filename_component()
  - cmake: Use more COMPILER_OPTIONS, LINK_OPTIONS / LINK_FLAGS
  - cmdline-docs: Extended, clarified, refreshed
  - cmdline-opts/_PROGRESS.md: Explain the suffixes
  - configure: Add "-mt" for pthread support on HP-UX
  - conn: Fix hostname move on connection reuse
  - conncache: Prevent integer overflow in maxconnects calculation
  - connect: For CONNECT_ONLY, CURLOPT_TIMEOUT does not apply
  - connect: Remove redundant condition in shutdown start
  - cookie: Avoid saving a cookie file if no transfer was done
  - cookie: Only count accepted cookies in Curl_cookie_add
  - cookie: Remove the temporary file on (all) errors
  - cpool: Make bundle-&gt;dest an array; fix UB
  - curl.h: Remove incorrect comment about CURLOPT_PINNEDPUBLICKEY
  - curl_easy_getinfo: Error code on NULL arg
  - curl_easy_setopt.md: Add missing CURLOPT_POSTFIELDS
  - curl_mem_undef.h: Limit to CURLDEBUG for non-memalloc overrides
  - curl_ngtcp2: Fix '-Wunreachable-code' with H3 !verbose !unity clang
  - curl_osslq: Error out properly if BIO_ADDR_rawmake() fails
  - curl_path: Make sure just whitespace is illegal
  - Curl_resolv: Fix comment: 'entry' argument is not optional
  - curl_slist_append.md: Clarify that a NULL pointer is not acceptable
  - curl_threads: Delete WinCE fallback branch
  - CURLINFO_FTP_ENTRY_PATH.md: This is for SFTP as well
  - CURLOPT_COOKIEFILE.md: Clarify when the cookies are loaded
  - CURLOPT_COPYPOSTFIELDS.md: Used with MQTT and RTSP as well
  - CURLOPT_HEADER/WRITEFUNCTION.md: Drop '* size' since size is always 1
  - CURLOPT_MAXLIFETIME_CONN: Make default 24 hours
  - CURLOPT_POSTFIELDSIZE*: These also work for MQTT and RTSP
  - CURLOPT_SERVER_RESPONSE_TIMEOUT*: Add default and see-also
  - CURLOPT_SSL_VERIFYHOST.md: Add see-also to two other VERIFYHOST options
  - CURLOPT_TIMECONDITION.md: Works for FILE and FTP as well
  - cw-out: Fix EAGAIN handling on pause
  - cw-out: Unify the error handling pattern in cw_out_do_write
  - digest_sspi: Fix two memory leaks in error branches
  - dist: Do not distribute CI.md
  - docs/cmdline-opts: Drop double quotes from GLOBBING and URL examples
  - docs/libcurl: Clarify some timeout option behaviour
  - docs/libcurl: Remove ancient version references
  - docs/libcurl: Use lowercase must
  - docs: Expand on quoting rules for file names in SFTP quote
  - docs: Fix/tidy code fences
  - doh: Clean up resources on error paths
  - doswin: CloseHandle the thread on shutdown
  - easy_getinfo: Check magic, Curl_close safety
  - ECH.md: Make OpenSSL branch clone instructions work
  - examples/chkspeed: Portable printing when outputting curl_off_t values
  - examples/http2-serverpush: Fix file handle leaks
  - examples/sessioninfo: Cast printf string mask length to int
  - examples/sessioninfo: Do not disable security
  - examples/synctime: Fix null termination assumptions
  - examples/synctime: Make the sscanf not overflow the local buffer
  - examples/usercertinmem: Avoid stripping const
  - examples/websocket: Fix use of uninitialized rlen
  - examples: Call curl_global_cleanup() where missing
  - examples: Check more errors, fix cleanups, scope variables
  - examples: Drop unused curl/mprintf.h includes
  - examples: Fix build issues in 'complicated' examples
  - examples: Fix more potential resource leaks, and more
  - examples: Fix two build issues surfaced with WinCE
  - examples: Fix two issues found by CodeQL
  - examples: Fix two more cases of stat() TOCTOU
  - examples: Improve global init, error checks and returning errors
  - examples: Replace casts with 'curl_off_t' printf masks
  - examples: Return curl_easy_perform() results
  - firefox-db2pem.sh: Add macOS support, tidy-ups
  - form.md: Drop reference to MANUAL
  - ftp: Add extra buffer length check
  - ftp: Check errors on remote ip for data connection
  - ftp: Fix ftp_do_more returning with *completep unset
  - ftp: Fix port number range loop for PORT commands
  - ftp: Fix the 213 scanner memchr buffer limit argument
  - ftp: Improve fragile check for first digit &gt; 3
  - ftp: Reduce size of some struct fields
  - ftp: Remove 'newhost' and 'newport' from the ftp_conn struct
  - ftp: Remove misleading comments
  - ftp: Remove the retr_size_saved struct field
  - ftp: Remove the state_saved struct field
  - ftp: Replace strstr() in ;type= handling
  - ftp: Simplify the 150/126 size scanner
  - gnutls: Check conversion of peer cert chain
  - gnutls: Fix re-handshake comments
  - gssapi: Make channel binding conditional on GSS_C_CHANNEL_BOUND_FLAG
  - gtls: Avoid potential use of uninitialized variable in trace output
  - gtls: Check the return value of gnutls_pubkey_init()
  - header.md: See-also --proxy-header and vice versa
  - hmac: Free memory properly on errors
  - hostip: Don't store negative resolves due unrelated errors
  - hostip: Fix infof() output for non-ipv6 builds using IPv6 address
  - hostip: Remove leftover INT_MAX check in Curl_dnscache_prune
  - http2: Check push header names by length first
  - http2: Clean up pushed newhandle on fail
  - http2: Ingress handling edge cases
  - HTTP3: Clarify the status for "old" OpenSSL, not current
  - http: Check the return value of strdup
  - http: Fix '-Wunreachable-code' in !websockets !unity builds
  - http: Fix '-Wunused-variable' in !alt-svc !proxy !ws builds
  - http: Handle user-defined connection headers
  - http: Look for trailing 'type=' in ftp:// without strstr
  - http: Make Content-Length parser more WHATWG
  - http: Only accept ';' as a separator for custom headers
  - http: Return error for a second Location: header
  - http_aws_sigv4: Check the return value of curl_maprintf()
  - http_proxy: Fix adding custom proxy headers
  - httpsrr: Free old pointers when storing new
  - httpsrr: Send HTTPS query to the right target
  - imap: Fix custom FETCH commands to handle literal responses
  - imap: Parse and use UIDVALIDITY as a number
  - imap: Treat capabilities case insensitively
  - INSTALL-CMAKE.md: Add manual configuration examples
  - INSTALL-CMAKE.md: Document useful build targets
  - INSTALL-CMAKE.md: Fix descriptions for LDAP dependency options
  - INSTALL: Update the list of known operating systems
  - INTERNALS: Drop Winsock 2.2 from the dependency list
  - ip-happy: Do not set unnecessary timeout
  - ip-happy: Prevent event-based stall on retry
  - kerberos: Bump minimum to 1.3 (2003-07-08), drop legacy logic
  - kerberos: Drop logic for MIT Kerberos &lt;1.2.3 (pre-2002) versions
  - kerberos: Stop including gssapi/gssapi_generic.h
  - krb5: Fix output_token allocators in the GSS debug stub (Windows)
  - krb5: Return appropriate error on send failures
  - krb5_gssapi: Fix memory leak on error path
  - krb5_sspi: The chlg argument is NOT optional
  - ldap: Avoid null ptr deref on failure
  - ldap: Do not base64 encode zero length string
  - ldap: Do not pass a \n to failf()
  - ldap: Tidy-up types, fix error code confusion
  - lib1514: Fix return code mixup
  - lib: Delete unused crypto header includes
  - lib: Drop unused include and duplicate guards
  - lib: Fix build error with verbose strings disabled
  - lib: Remove newlines from failf() calls
  - lib: Remove personal names from comments
  - lib: SSL connection reuse
  - lib: Stop NULL-checking conn-&gt;passwd and -&gt;user
  - lib: Upgrade/multiplex handling
  - libcurl-multi.md: Added curl_multi_get_offt mention
  - libcurl-security.md: Mention long-running connections
  - libssh/libssh2: Reject quote command lines with too much data
  - libssh/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp: Fix resume corruption by avoiding O_APPEND with rresume
  - libssh2/sftp_realpath: Change state consistently
  - libssh2: Avoid risking using an uninitialized local struct field
  - libssh2: Bail out on chgrp and chown number parsing errors
  - libssh2: Clarify that sshp-&gt;path is always at least one byte
  - libssh2: Drop two redundant null-terminations
  - libssh2: Error check and null-terminate in ssh_state_sftp_readdir_link()
  - libssh2: Fix EAGAIN return in ssh_state_auth_agent
  - libssh2: Fix return code for EAGAIN
  - libssh2: Use sockindex consistently
  - libssh: Acknowledge SSH_AGAIN in the SFTP state machine
  - libssh: Catch a resume point larger than the size
  - libssh: Clarify myssh_block2waitfor
  - libssh: Drop two unused assignments
  - libssh: Error on bad chgrp number
  - libssh: Error on bad chown number and store the value
  - libssh: Fix range parsing error handling mistake
  - libssh: Make atime and mtime cap the timestamp instead of wrap
  - libssh: React on errors from ssh_scp_read
  - libssh: Return out of memory correctly if aprintf fails
  - libssh: Return the proper error for readdir problems
  - Makefile.example: Bump default example from FTP to HTTPS
  - Makefile.example: Fix option order
  - Makefile.example: Make default options more likely to work
  - Makefile.example: Simplify and make it configurable
  - managen: Ignore version mentions &lt; 7.66.0
  - managen: Render better manpage references/links
  - managen: Strict protocol check
  - managen: Verify the options used in example lines
  - mbedtls: Add support for 4.0.0
  - mbedtls: Check result of setting ALPN
  - mbedtls: Fix building with &lt;3.6.1
  - mbedtls: Fix building with sha-256 missing from PSA
  - mbedtls: Handle WANT_WRITE from mbedtls_ssl_read()
  - md4: Drop mbedtls implementation (not available in mbedtls v3+)
  - mdlinkcheck: Reject URLs containing quotes
  - memdup0: Handle edge case
  - mime: Fix unpausing of readers
  - mime: Fix use of fseek()
  - multi.h: Add CURLMINFO_LASTENTRY
  - multi: Check the return value of strdup()
  - multi_ev: Remove unnecessary data check that confuses analysers
  - netrc: When the cached file is discarded, unmark it as loaded
  - nghttp3: Return NGHTTP3_ERR_CALLBACK_FAILURE from recv_header
  - ngtcp2: Add a comment explaining write result handling
  - ngtcp2: Adopt ngtcp2_conn_get_stream_user_data if available
  - ngtcp2: Check error code on connect failure
  - ngtcp2: Close just-opened QUIC stream when submit_request fails
  - ngtcp2: Compare idle timeout in ms to avoid overflow
  - ngtcp2: Fix early return
  - ngtcp2: Fix handling of blocked stream data
  - ngtcp2: Fix returns when TLS verify failed
  - ngtcp2: Overwrite rate-limits defaults
  - noproxy: Fix the IPV6 network mask pattern match
  - NTLM: Disable if DES support missing from OpenSSL or mbedTLS
  - ntlm: Improved error path on bad incoming NTLM TYPE3 message
  - openldap/ldap: Check for binary attribute case insensitively
  - openldap: Avoid indexing the result at -1 for blank responses
  - openldap: Check ber_sockbuf_add_io() return code
  - openldap: Check ldap_get_option() return codes
  - openldap: Do not pass newline to infof()
  - openldap: Fix memory-leak in error path
  - openldap: Fix memory-leak on oldap_do's exit path
  - openldap: Limit max incoming size
  - openssl-quic: Check results better
  - openssl-quic: Handle error in SSL_get_stream_read_error_code
  - openssl-quic: Ignore unexpected streams opened by server
  - openssl: Better return code checks when logging cert data
  - openssl: Call SSL_get_error() with proper error
  - openssl: Check CURL_SSLVERSION_MAX_DEFAULT properly
  - openssl: Clear retry flag on x509 error
  - openssl: Combine all the x509-store flags
  - openssl: Fail if more than MAX_ALLOWED_CERT_AMOUNT certs
  - openssl: Fail the transfer if ossl_certchain() fails
  - openssl: Fix build for v1.0.2
  - openssl: Fix peer certificate leak in channel binding
  - openssl: Fix resource leak in provider error path
  - openssl: Fix unable do typo in failf() calls
  - openssl: Free UI_METHOD on exit path
  - openssl: Make the asn1_object_dump name null terminated
  - openssl: Only try engine/provider if a cert file/name is provided
  - openssl: Set io_need always
  - openssl: Skip session resumption when verifystatus is set
  - os400: Document threads handling in code
  - OS400: Fix a use-after-free/double-free case
  - osslq: Set idle timeout to 0
  - pingpong: Remove two old leftover debug infof() calls
  - pop3: Check for CAPA responses case insensitively
  - pop3: Fix CAPA response termination detection
  - pop3: Function could get the -&gt;transfer field wrong
  - pytest: Skip specific tests for no-verbose builds
  - quic: Fix min TLS version handling
  - quic: Ignore EMSGSIZE on receive
  - quic: Improve UDP GRO receives
  - quic: Remove data_idle handling
  - quiche: Fix possible leaks on teardown
  - quiche: Fix verbose message when ip quadruple cannot be obtained
  - quiche: Handle tls fail correctly
  - quiche: When ingress processing fails, return that error code
  - rtsp: Use explicit postfieldsize if specified
  - runtests: Tag tests that require curl verbose strings
  - rustls: Exit on error
  - rustls: Fix clang-tidy warning
  - rustls: Fix comment describing cr_recv()
  - rustls: Limit snprintf proper in cr_keylog_log_cb()
  - rustls: Make read_file_into not reject good files
  - rustls: Pass the correct result to rustls_failf
  - rustls: Typecast variable for safer trace output
  - rustls: Use %zu for size_t in failf() format string
  - sasl: Clear cancelled mechanism instead of toggling it
  - schannel: Assign result before using it
  - schannel: Fix memory leak
  - schannel: Handle Curl_conn_cf_send() errors better
  - schannel: Lower the maximum allowed time to block to 7 seconds
  - schannel: Properly close the certfile on error
  - schannel_verify: Do not call infof with an appended \n
  - schannel_verify: Fix mem-leak in Curl_verify_host
  - schannel_verify: Use more human friendly error messages
  - scp/sftp: Fix disconnect
  - scripts: Pass -- before passing xargs
  - setopt: Accept *_SSL_VERIFYHOST set to 2L
  - setopt: Allow CURLOPT_DNS_CACHE_TIMEOUT set to -1
  - setopt: Fix unused variable warning in minimal build
  - setopt: Make CURLOPT_MAXREDIRS accept -1 (again)
  - singleuse.pl: Fix string warning
  - smb: Adjust buffer size checks
  - smb: Transfer debugassert to real check
  - smtp: Check EHLO responses case insensitively
  - smtp: Fix EOB handling
  - smtp: Return value ignored
  - socks: Advance iobuf instead of reset
  - socks: Avoid UAF risk in error path
  - socks: Deny server basic-auth if not configured
  - socks: Handle error in verbose trace gracefully
  - socks: Handle premature close
  - socks: Make Curl_blockread_all return CURLcode
  - socks: Properly maintain the status of 'done'
  - socks: Rewwork, cleaning up socks state handling
  - socks_gssapi: Also reset buffer length after free
  - socks_gssapi: Make the gss_context a local variable
  - socks_gssapi: Reject too long tokens
  - socks_gssapi: Remove superfluous releases of the gss_recv_token
  - socks_gssapi: Remove the forced "no protection"
  - socks_gssapi: Replace 'gss_release_buffer()' with curl free
  - socks_sspi: Bail out on too long fields
  - socks_sspi: Fix memory clean-up calls
  - socks_sspi: Remove the enforced mode clearing
  - socks_sspi: Restore non-blocking socket on error paths
  - socks_sspi: Use the correct free function
  - socksd: Remove --bindonly mention, there is no such option
  - spelling: Fix new finds by typos-cli 1.39.0
  - src/var: Remove dead code
  - ssl-session-cache: Check use on config and availability
  - ssl-sessions.md: Mark option experimental
  - strerror: Drop workaround for SalfordC win32 header bug
  - sws: Fix checking sscanf() return value
  - sws: Pass in socket reference to allow function to close it
  - tcp-nodelay.md: Expand the documentation
  - telnet: Ignore empty suboptions
  - telnet: Make bad_option() consider NULL a bad option too
  - telnet: Make printsub require another byte input
  - telnet: Print DISPlay LOCation in printsub without mutating buffer
  - telnet: Refuse IAC codes in content
  - telnet: Return error if WSAEventSelect fails
  - telnet: Return error on crazy TTYPE or XDISPLOC lengths
  - telnet: Send failure logged but not returned
  - telnet: Use pointer[0] for "unknown" option instead of pointer[i]
  - test1100: Fix missing '&lt;protocol&gt;' section
  - tests/libtest/cli*: Fix init/deinit, leaks, and more
  - tests/server: Drop pointless memory allocation overrides
  - tests/server: Drop unsafe open() override in signal handler (Windows)
  - tftp: Check and act on tftp_set_timeouts() returning error
  - tftp: Check for trailing ";mode=" in URL without strstr
  - tftp: Default timeout per block is now 15 seconds
  - tftp: Error requests for blank filenames
  - tftp: Handle tftp_multi_statemach() return code
  - tftp: Pin the first used address
  - tftp: Propagate expired timer from tftp_state_timeout()
  - tftp: Return error if it hits an illegal state
  - tftp: Return error when sendto() fails
  - thread: errno on thread creation
  - tidy-up: Assortment of small fixes
  - tidy-up: Avoid using the reserved macro namespace
  - tidy-up: fcntl.h includes
  - tidy-up: Update MS links, allow long URLs via checksrc
  - tidy-up: URLs
  - time-cond.md: Refer to the singular curl_getdate man page
  - TLS: IP address verification, extend test
  - TODO: Fix a typo
  - TODO: Remove already implemented or bad items
  - tool: Fix exponential retry delay
  - tool_cb_hdr: Fix fwrite check in header callback
  - tool_cb_hdr: Size is always 1
  - tool_cb_rea: Use poll instead of select if available
  - tool_cfgable: Remove superfluous free calls
  - tool_doswin: Fix to use curl socket functions
  - tool_filetime: Cap crazy file times instead of erroring
  - tool_filetime: Replace cast with the fitting printf mask (Windows)
  - tool_formparse: Rewrite the headers file parser
  - tool_getparam/set_rate: Skip the multiplication on overflow
  - tool_getparam: Always disable "lib-ids" for tracing
  - tool_getparam: Make --fail and --fail-with-body override each other
  - tool_getparam: Warn if provided header looks malformed
  - tool_ipfs: Check the return value of curl_url_get for gwpath
  - tool_ipfs: Simplify the ipfs gateway logic
  - tool_msgs: Make errorf() show if --show-error
  - tool_operate: Improve wording in retry message
  - tool_operate: Keep failed partial download for retry auto-resume
  - tool_operate: Keep the progress meter for --out-null
  - tool_operate: Move the checks that skip ca cert detection
  - tool_operate: Retry on HTTP response codes 522 and 524
  - tool_operate: Return error on strdup() failure
  - tool_paramhlp: Remove outdated comment in str2tls_max()
  - tool_parsecfg: Detect and error on recursive --config use
  - tool_progress: Handle possible integer overflows
  - tool_progress: Make max5data() use an algorithm
  - transfer: Avoid busy loop with tiny speed limit
  - transfer: Fix retry for empty downloads on reuse
  - transfer: Reset retry count on each request
  - unit1323: Sync time types and printf masks, drop casts
  - unit1664: Drop casts, expand masks to full values
  - url: Make Curl_init_userdefined return void
  - urldata: FILE is not a list-only protocol
  - urldata: Make 'retrycount' a single byte
  - urldata: Make redirect counter 16 bit
  - vauth/digest: Improve the digest parser
  - version: Add GSS backend name and version
  - vquic: Fix idle-timeout checks (ms&lt;--&gt;ns), 64-bit log and honour 0=no-timeout
  - vquic: Fix recvmsg loop for max_pkts
  - vquic: Handling of I/O improvements
  - vquic: Sending non-gso packets fix for EAGAIN
  - vtls: ALPN setting, check proto parameter
  - vtls: Check final cfilter node in find_ssl_filter
  - vtls: Drop duplicate 'CURL_SHA256_DIGEST_LENGTH' definition
  - vtls: Properly handle SSL shutdown timeout
  - vtls: Remove call to PKCS12_PBE_add()
  - vtls: Unify the error handling in ssl_cf_connect()
  - vtls_int.h: Clarify data_pending
  - vtls_scache: Fix race condition
  - windows: Replace _beginthreadex() with CreateThread()
  - windows: Stop passing unused, optional argument for Win9x compatibility
  - windows: Use consistent format when showing error codes
  - windows: Use native error code types more
  - wolfssl: Check BIO read parameters
  - wolfssl: Clear variable to avoid uninitialized use
  - wolfssl: Fix error check in shutdown
  - wolfssl: Fix resource leak in verify_pinned error paths
  - wolfssl: No double get_error() detail
  - ws: Clarify an error message
  - ws: Fix some edge cases
  - ws: Fix type conversion check
  - ws: Reject curl_ws_recv called with NULL buffer with a buflen</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-2.0.cf" date="1763035200">- Remove bundled wcurl utility that was added in 8.14.0~rc1; use wcurl package
  instead</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-3.0.cf" date="1763121600">- Either require wcurl or obsolete it, depending on how recent the
  distribution's own wcurl package is</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
</package>
<package pkgid="265326fb9d65634721bee2d3f8838fc74b452814921ad141ef20f1832f89d200" name="libgpg-error" arch="i686">
  <version epoch="0" ver="1.60" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1744372800">- Update to 1.53 (https://dev.gnupg.org/T7385)
  - Version 1.53 fixes a regression introduced in version 1.52
  Changes in version 1.52:
  - The KEY_WOW64_xxKEY flags can now be passed to the Registry read functions
  - In the spawn functions, care about closefrom/close call being interrupted
  - New command --getreg for gpg-error on Windows
  - New simple string list API
  - New API for name value files
  - Add a Windows Registry emulation for Unix
  Interface changes relative to the 1.51 release:
  - New function gpgrt_w32_reg_query_string (Windows only)
  - New types: gpgrt_strlist_t, gpgrt_nvc_t, gpgrt_nve_t
  - New constants: GPGRT_STRLIST_APPEND, GPGRT_STRLIST_WIPE, GPGRT_NVC_WIPE,
    GPGRT_NVC_PRIVKEY, GPGRT_NVC_SECTION, GPGRT_NVC_MODIFIED
  - New functions: gpgrt_strlist_free, gpgrt_strlist_add,
    gpgrt_strlist_tokenize, gpgrt_strlist_copy, gpgrt_strlist_rev,
    gpgrt_strlist_prev, gpgrt_strlist_last, gpgrt_strlist_pop,
    gpgrt_strlist_find, gpgrt_nvc_new, gpgrt_nvc_release, gpgrt_nvc_get_flag,
    gpgrt_nvc_add, gpgrt_nvc_set, gpgrt_nve_set, gpgrt_nvc_delete,
    gpgrt_nvc_lookup, gpgrt_nvc_parse, gpgrt_nvc_write, gpgrt_nve_next,
    gpgrt_nve_name, gpgrt_nve_value, gpgrt_nvc_get_string, gpgrt_nvc_get_bool
- Drop support for EOL distributions prior to EL-8, F-28
  - Always pull in the hostname package rather than /bin/hostname
  - Drop redundant linker and info scriptlets
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
</package>
<package pkgid="219c5704af060d7104e97ba20898e42924adf70c60302c0291f21544b2faa382" name="libgpg-error" arch="x86_64">
  <version epoch="0" ver="1.60" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1744372800">- Update to 1.53 (https://dev.gnupg.org/T7385)
  - Version 1.53 fixes a regression introduced in version 1.52
  Changes in version 1.52:
  - The KEY_WOW64_xxKEY flags can now be passed to the Registry read functions
  - In the spawn functions, care about closefrom/close call being interrupted
  - New command --getreg for gpg-error on Windows
  - New simple string list API
  - New API for name value files
  - Add a Windows Registry emulation for Unix
  Interface changes relative to the 1.51 release:
  - New function gpgrt_w32_reg_query_string (Windows only)
  - New types: gpgrt_strlist_t, gpgrt_nvc_t, gpgrt_nve_t
  - New constants: GPGRT_STRLIST_APPEND, GPGRT_STRLIST_WIPE, GPGRT_NVC_WIPE,
    GPGRT_NVC_PRIVKEY, GPGRT_NVC_SECTION, GPGRT_NVC_MODIFIED
  - New functions: gpgrt_strlist_free, gpgrt_strlist_add,
    gpgrt_strlist_tokenize, gpgrt_strlist_copy, gpgrt_strlist_rev,
    gpgrt_strlist_prev, gpgrt_strlist_last, gpgrt_strlist_pop,
    gpgrt_strlist_find, gpgrt_nvc_new, gpgrt_nvc_release, gpgrt_nvc_get_flag,
    gpgrt_nvc_add, gpgrt_nvc_set, gpgrt_nve_set, gpgrt_nvc_delete,
    gpgrt_nvc_lookup, gpgrt_nvc_parse, gpgrt_nvc_write, gpgrt_nve_next,
    gpgrt_nve_name, gpgrt_nve_value, gpgrt_nvc_get_string, gpgrt_nvc_get_bool
- Drop support for EOL distributions prior to EL-8, F-28
  - Always pull in the hostname package rather than /bin/hostname
  - Drop redundant linker and info scriptlets
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
</package>
<package pkgid="04453995d16181f48d92dbd0e8b4989dd35ac8dd6d4650f312067fab301f2c56" name="libgpg-error-devel" arch="i686">
  <version epoch="0" ver="1.60" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1744372800">- Update to 1.53 (https://dev.gnupg.org/T7385)
  - Version 1.53 fixes a regression introduced in version 1.52
  Changes in version 1.52:
  - The KEY_WOW64_xxKEY flags can now be passed to the Registry read functions
  - In the spawn functions, care about closefrom/close call being interrupted
  - New command --getreg for gpg-error on Windows
  - New simple string list API
  - New API for name value files
  - Add a Windows Registry emulation for Unix
  Interface changes relative to the 1.51 release:
  - New function gpgrt_w32_reg_query_string (Windows only)
  - New types: gpgrt_strlist_t, gpgrt_nvc_t, gpgrt_nve_t
  - New constants: GPGRT_STRLIST_APPEND, GPGRT_STRLIST_WIPE, GPGRT_NVC_WIPE,
    GPGRT_NVC_PRIVKEY, GPGRT_NVC_SECTION, GPGRT_NVC_MODIFIED
  - New functions: gpgrt_strlist_free, gpgrt_strlist_add,
    gpgrt_strlist_tokenize, gpgrt_strlist_copy, gpgrt_strlist_rev,
    gpgrt_strlist_prev, gpgrt_strlist_last, gpgrt_strlist_pop,
    gpgrt_strlist_find, gpgrt_nvc_new, gpgrt_nvc_release, gpgrt_nvc_get_flag,
    gpgrt_nvc_add, gpgrt_nvc_set, gpgrt_nve_set, gpgrt_nvc_delete,
    gpgrt_nvc_lookup, gpgrt_nvc_parse, gpgrt_nvc_write, gpgrt_nve_next,
    gpgrt_nve_name, gpgrt_nve_value, gpgrt_nvc_get_string, gpgrt_nvc_get_bool
- Drop support for EOL distributions prior to EL-8, F-28
  - Always pull in the hostname package rather than /bin/hostname
  - Drop redundant linker and info scriptlets
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
</package>
<package pkgid="598cd8ac5b1a2eb39802ef0a25932d286b4dc8c9fec2e94b27e1add8e2c1ac55" name="libgpg-error-devel" arch="x86_64">
  <version epoch="0" ver="1.60" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1744372800">- Update to 1.53 (https://dev.gnupg.org/T7385)
  - Version 1.53 fixes a regression introduced in version 1.52
  Changes in version 1.52:
  - The KEY_WOW64_xxKEY flags can now be passed to the Registry read functions
  - In the spawn functions, care about closefrom/close call being interrupted
  - New command --getreg for gpg-error on Windows
  - New simple string list API
  - New API for name value files
  - Add a Windows Registry emulation for Unix
  Interface changes relative to the 1.51 release:
  - New function gpgrt_w32_reg_query_string (Windows only)
  - New types: gpgrt_strlist_t, gpgrt_nvc_t, gpgrt_nve_t
  - New constants: GPGRT_STRLIST_APPEND, GPGRT_STRLIST_WIPE, GPGRT_NVC_WIPE,
    GPGRT_NVC_PRIVKEY, GPGRT_NVC_SECTION, GPGRT_NVC_MODIFIED
  - New functions: gpgrt_strlist_free, gpgrt_strlist_add,
    gpgrt_strlist_tokenize, gpgrt_strlist_copy, gpgrt_strlist_rev,
    gpgrt_strlist_prev, gpgrt_strlist_last, gpgrt_strlist_pop,
    gpgrt_strlist_find, gpgrt_nvc_new, gpgrt_nvc_release, gpgrt_nvc_get_flag,
    gpgrt_nvc_add, gpgrt_nvc_set, gpgrt_nve_set, gpgrt_nvc_delete,
    gpgrt_nvc_lookup, gpgrt_nvc_parse, gpgrt_nvc_write, gpgrt_nve_next,
    gpgrt_nve_name, gpgrt_nve_value, gpgrt_nvc_get_string, gpgrt_nvc_get_bool
- Drop support for EOL distributions prior to EL-8, F-28
  - Always pull in the hostname package rather than /bin/hostname
  - Drop redundant linker and info scriptlets
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
</package>
<package pkgid="ed64d8b529184c0fb9fb9a3c86e4198936da53f58650ea95dcbbcc124f11699d" name="libidn" arch="i686">
  <version epoch="0" ver="1.43" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="21cb4ba511a92e3842891f9a93f9b986453cd8e0dd2a4338e50f8f3f7c54ee7a" name="libidn" arch="x86_64">
  <version epoch="0" ver="1.43" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="db764bd1411507233edc561a4cf0708f9b779fbd1b54f40cd08220efcbc0fd59" name="libidn-devel" arch="i686">
  <version epoch="0" ver="1.43" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="f59b05858f8f6a9d0aae0189e654bf7cc691b7d554459456b88efc23fda645ea" name="libidn-devel" arch="x86_64">
  <version epoch="0" ver="1.43" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="7b1f1f3f1aea6aff80eef61172e48def1497d7e79e427235b74f7a4d2f8c2507" name="libidn-java" arch="noarch">
  <version epoch="0" ver="1.43" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="1d485504bb0ea136e08a3e1aec82b00abe2fc20d7ebb68cb0f6dd1edd7fd7e2d" name="libidn-javadoc" arch="noarch">
  <version epoch="0" ver="1.43" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-5.0" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0" date="1705320000">- Update to 1.42
  - Bump required gettext version to 0.19.8 for musl-libc
  - Compiler warning improvements
    - As before, compiler warnings are enabled by default
    - They may be disabled using ./configure --disable-gcc-warnings or turn
      them into fatal errors using ./configure --enable-gcc-warnings=error to
      add -Werror and sensible -Wno-error='s
    - Based on gnulib's manywarnings, see
      https://www.gnu.org/software/gnulib//manual/html_node/manywarnings.html
  - Fix type confusion on LLP64/Windows platforms
  - While libidn has worked using cygwin libc, it has never worked on
    ucrt/msvcrt libc; report and tiny patch by Francesco Pretto in
    https://lists.gnu.org/archive/html/help-libidn/2022-02/msg00000.html
  - tests: Added script tests/standalone.sh suitable for integrators
    - The main purpose is to test a system-installed libidn, suitable for
      distributor checking (à la Debian's autopkgtest/debci)
    - It may also be used to test a newly built libidn outside the usual
      'make check' infrastructure
    - To check that your system libidn is working, invoke the script with
      'srcdir' as an environment variable indicating where it can be find the
      source code for libidn's tests/ directory (it will use the directory
      name where the script is by default)
    - To check that a newly built static libidn behaves, invoke:
      env STANDALONE_CFLAGS="-Ilib lib/.libs/libidn.a" tests/standalone.sh
    - To check that a newly built shared libidn behaves, invoke:
      env srcdir=tests STANDALONE_CFLAGS="-Ilib -Wl,-rpath lib/.libs lib/.libs/libidn.so" tests/standalone.sh
    - If the libidn under testing is too old and has known bugs, that should
      cause tests to fail, which is intentional
  - Updated translations
  - Update gnulib files and build fixes
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-3.0" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
</package>
<package pkgid="d3708d0c7ecd6669a988606df8941026390143f4371f49cae4baaa36871a9799" name="libmetalink" arch="i686">
  <version epoch="0" ver="0.1.3" rel="31.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-15" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-24" date="1642075200">- Fix a few issues found by the Coverity static analysis tool
  https://bugs.launchpad.net/libmetalink/+bug/1784359
  https://github.com/metalink-dev/libmetalink/pull/2
- Package the AUTHORS, ChangeLog and NEWS files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-25" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-27" date="1650542400">- Rebuild to sync with rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-28" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-29" date="1666180800">- Note: license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-30" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-31" date="1685361600">- Do not number the sole Source
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="f7110c376209e5ed80f5b27c3bd630d20dd90a8513c1ca403b67958ae7cfb4bf" name="libmetalink" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="31.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-15" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-24" date="1642075200">- Fix a few issues found by the Coverity static analysis tool
  https://bugs.launchpad.net/libmetalink/+bug/1784359
  https://github.com/metalink-dev/libmetalink/pull/2
- Package the AUTHORS, ChangeLog and NEWS files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-25" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-27" date="1650542400">- Rebuild to sync with rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-28" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-29" date="1666180800">- Note: license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-30" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-31" date="1685361600">- Do not number the sole Source
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="9d2b0341fd1601c3b78719964b6b7535972c40ea993f34237da8238469f28be2" name="libmetalink-devel" arch="i686">
  <version epoch="0" ver="0.1.3" rel="31.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-15" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-24" date="1642075200">- Fix a few issues found by the Coverity static analysis tool
  https://bugs.launchpad.net/libmetalink/+bug/1784359
  https://github.com/metalink-dev/libmetalink/pull/2
- Package the AUTHORS, ChangeLog and NEWS files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-25" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-27" date="1650542400">- Rebuild to sync with rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-28" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-29" date="1666180800">- Note: license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-30" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-31" date="1685361600">- Do not number the sole Source
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="932ecb766df1aa9b808186153ba7f5df923d0e6c8192d7882ad3d9b379945d6d" name="libmetalink-devel" arch="x86_64">
  <version epoch="0" ver="0.1.3" rel="31.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-15" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-24" date="1642075200">- Fix a few issues found by the Coverity static analysis tool
  https://bugs.launchpad.net/libmetalink/+bug/1784359
  https://github.com/metalink-dev/libmetalink/pull/2
- Package the AUTHORS, ChangeLog and NEWS files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-25" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-27" date="1650542400">- Rebuild to sync with rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-28" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-29" date="1666180800">- Note: license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-30" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.3-31" date="1685361600">- Do not number the sole Source
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="0329add3f5855194732c3286278df7c4a3224f780af13e71ef0682e90e4317a2" name="libnet" arch="x86_64">
  <version epoch="0" ver="1.3" rel="7.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
</package>
<package pkgid="12af68a90fcb115ed65178e559e379afffa6a810dcaff44787fc056386d24dd0" name="libnet-devel" arch="x86_64">
  <version epoch="0" ver="1.3" rel="7.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
</package>
<package pkgid="07b1f09cbda1974718fdf7fa149818403b33c70de646e900194efe2860f10083" name="libnet-doc" arch="noarch">
  <version epoch="0" ver="1.3" rel="7.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
</package>
<package pkgid="3b7472d38d965843f44edf5b9a5dd63af8651013f7d4a89aac36b0a806ca480b" name="libssh2" arch="i686">
  <version epoch="0" ver="1.11.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-1.0.cf" date="1685448000">- Update to 1.11.0
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: Now parses attribute extensions if they exist
  - SFTP: No longer will busy loop if SFTP fails to initialize
  - SFTP: Now clear various errors as expected
  - SFTP: No longer skips files if the line buffer is too small
  - SCP: Add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
- Avoid use of deprecated patch syntax
- Build static library but don't package it since it's required for the
  test suite (https://github.com/libssh2/libssh2/issues/1056)
- Drop old pkgconfig patch and replace it with some sed trickery
- Add patch to work around strict permissions issues for sshd tests</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-2.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-3.0.cf" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-4.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-5.0.cf" date="1717329600">- Disable rpath, which is useful for riscv64
  (see https://src.fedoraproject.org/rpms/libssh2/pull-request/2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-6.0.cf" date="1720612800">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-7.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this packagw</changelog>
</package>
<package pkgid="0fcd0b6a11799ad57ebd58fed61e7532da6c86486b465bc1a9fa56b02ba45285" name="libssh2" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-1.0.cf" date="1685448000">- Update to 1.11.0
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: Now parses attribute extensions if they exist
  - SFTP: No longer will busy loop if SFTP fails to initialize
  - SFTP: Now clear various errors as expected
  - SFTP: No longer skips files if the line buffer is too small
  - SCP: Add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
- Avoid use of deprecated patch syntax
- Build static library but don't package it since it's required for the
  test suite (https://github.com/libssh2/libssh2/issues/1056)
- Drop old pkgconfig patch and replace it with some sed trickery
- Add patch to work around strict permissions issues for sshd tests</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-2.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-3.0.cf" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-4.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-5.0.cf" date="1717329600">- Disable rpath, which is useful for riscv64
  (see https://src.fedoraproject.org/rpms/libssh2/pull-request/2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-6.0.cf" date="1720612800">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-7.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this packagw</changelog>
</package>
<package pkgid="ffb726ba0d675a44b7b8a6970e66e2d4962a1a41de3bbf0df6f13dc953a12565" name="libssh2-devel" arch="i686">
  <version epoch="0" ver="1.11.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-1.0.cf" date="1685448000">- Update to 1.11.0
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: Now parses attribute extensions if they exist
  - SFTP: No longer will busy loop if SFTP fails to initialize
  - SFTP: Now clear various errors as expected
  - SFTP: No longer skips files if the line buffer is too small
  - SCP: Add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
- Avoid use of deprecated patch syntax
- Build static library but don't package it since it's required for the
  test suite (https://github.com/libssh2/libssh2/issues/1056)
- Drop old pkgconfig patch and replace it with some sed trickery
- Add patch to work around strict permissions issues for sshd tests</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-2.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-3.0.cf" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-4.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-5.0.cf" date="1717329600">- Disable rpath, which is useful for riscv64
  (see https://src.fedoraproject.org/rpms/libssh2/pull-request/2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-6.0.cf" date="1720612800">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-7.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this packagw</changelog>
</package>
<package pkgid="3e9fd548cbe85ecf362d2bf39527c3021b797254023147d6f81df32dec78a424" name="libssh2-devel" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-1.0.cf" date="1685448000">- Update to 1.11.0
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: Now parses attribute extensions if they exist
  - SFTP: No longer will busy loop if SFTP fails to initialize
  - SFTP: Now clear various errors as expected
  - SFTP: No longer skips files if the line buffer is too small
  - SCP: Add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
- Avoid use of deprecated patch syntax
- Build static library but don't package it since it's required for the
  test suite (https://github.com/libssh2/libssh2/issues/1056)
- Drop old pkgconfig patch and replace it with some sed trickery
- Add patch to work around strict permissions issues for sshd tests</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-2.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-3.0.cf" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-4.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-5.0.cf" date="1717329600">- Disable rpath, which is useful for riscv64
  (see https://src.fedoraproject.org/rpms/libssh2/pull-request/2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-6.0.cf" date="1720612800">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-7.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this packagw</changelog>
</package>
<package pkgid="ab4e6bd9c2faf7605b1952e000ba4070d4916e4a185f662fda4635b43970a1cc" name="libssh2-docs" arch="noarch">
  <version epoch="0" ver="1.11.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-7.0.cf" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-1.0.cf" date="1685448000">- Update to 1.11.0
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: Now parses attribute extensions if they exist
  - SFTP: No longer will busy loop if SFTP fails to initialize
  - SFTP: Now clear various errors as expected
  - SFTP: No longer skips files if the line buffer is too small
  - SCP: Add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
- Avoid use of deprecated patch syntax
- Build static library but don't package it since it's required for the
  test suite (https://github.com/libssh2/libssh2/issues/1056)
- Drop old pkgconfig patch and replace it with some sed trickery
- Add patch to work around strict permissions issues for sshd tests</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-2.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-3.0.cf" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-4.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-5.0.cf" date="1717329600">- Disable rpath, which is useful for riscv64
  (see https://src.fedoraproject.org/rpms/libssh2/pull-request/2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-6.0.cf" date="1720612800">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-7.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this packagw</changelog>
</package>
<package pkgid="bf47251ce239fb49fdf76333fa67e2b42b53821057da76fe8898f3c9c1075c3f" name="libunrar" arch="x86_64">
  <version epoch="0" ver="7.21" rel="0.1.0.cf.beta1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.11-1.0.cf" date="1742817600">- Update to 7.11
- Update debian files to 7.1.5-3</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-0.1.0.cf.beta1" date="1749643200">- Update to 7.12 beta 1
- Update debian files to 7.1.7-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
</package>
<package pkgid="17f7d243f78cc43ba03d5ebb8819477f60a2154ff98e2302f0b23e1fc6b363ea" name="libunrar-devel" arch="x86_64">
  <version epoch="0" ver="7.21" rel="0.1.0.cf.beta1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.11-1.0.cf" date="1742817600">- Update to 7.11
- Update debian files to 7.1.5-3</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-0.1.0.cf.beta1" date="1749643200">- Update to 7.12 beta 1
- Update debian files to 7.1.7-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
</package>
<package pkgid="d606c7e9d62e935acf2a7809dbef986a2d50cb5828daf29b97a075c8ec3d3325" name="libxml2" arch="i686">
  <version epoch="0" ver="2.12.10" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-2.0.cf" date="1705665600">- Update to 2.12.4
  Regressions:
  - parser: Fix regression parsing standalone declarations
  - autotools: Re-add --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update license to include ISC-Veillard
- Reinstate Xpointer locations support for Fedora &lt; 40, RHEL &lt; 10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-3.0.cf" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.5-1.0.cf" date="1707134400">- Update to 2.12.5
  Security:
  - xmlreader: Don't expand XIncludes when backtracking (CVE-2024-25062)
  Regressions:
  - parser: Fix crash in xmlParseInNodeContext with HTML documents</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.6-1.0.cf" date="1710763200">- Update to 2.12.6
  Regressions:
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.7-1.0.cf" date="1716379200">- Update to 2.12.7
  Security:
  - Fix buffer overread with 'xmllint --htmlout' (CVE-2024-34459)
  Regressions:
  - xmllint: Fix --pedantic option
  - save: Handle invalid parent pointers in xhtmlNodeDumpOutput</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-1.0.cf" date="1718280000">- Update to 2.12.8
  Regressions:
  - parser: Fix performance regression when parsing namespaces</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
</package>
<package pkgid="37ccfebd06aa345ff13b75dc09392507c92c71819a79dc3e01b31dc0beb4811b" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-2.0.cf" date="1705665600">- Update to 2.12.4
  Regressions:
  - parser: Fix regression parsing standalone declarations
  - autotools: Re-add --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update license to include ISC-Veillard
- Reinstate Xpointer locations support for Fedora &lt; 40, RHEL &lt; 10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-3.0.cf" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.5-1.0.cf" date="1707134400">- Update to 2.12.5
  Security:
  - xmlreader: Don't expand XIncludes when backtracking (CVE-2024-25062)
  Regressions:
  - parser: Fix crash in xmlParseInNodeContext with HTML documents</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.6-1.0.cf" date="1710763200">- Update to 2.12.6
  Regressions:
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.7-1.0.cf" date="1716379200">- Update to 2.12.7
  Security:
  - Fix buffer overread with 'xmllint --htmlout' (CVE-2024-34459)
  Regressions:
  - xmllint: Fix --pedantic option
  - save: Handle invalid parent pointers in xhtmlNodeDumpOutput</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-1.0.cf" date="1718280000">- Update to 2.12.8
  Regressions:
  - parser: Fix performance regression when parsing namespaces</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
</package>
<package pkgid="e5b6ba2c162ff38d1c5d5339ec9143002f6e528a4d4ef47f835c16d26e6ed96a" name="libxml2-devel" arch="i686">
  <version epoch="0" ver="2.12.10" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-2.0.cf" date="1705665600">- Update to 2.12.4
  Regressions:
  - parser: Fix regression parsing standalone declarations
  - autotools: Re-add --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update license to include ISC-Veillard
- Reinstate Xpointer locations support for Fedora &lt; 40, RHEL &lt; 10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-3.0.cf" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.5-1.0.cf" date="1707134400">- Update to 2.12.5
  Security:
  - xmlreader: Don't expand XIncludes when backtracking (CVE-2024-25062)
  Regressions:
  - parser: Fix crash in xmlParseInNodeContext with HTML documents</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.6-1.0.cf" date="1710763200">- Update to 2.12.6
  Regressions:
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.7-1.0.cf" date="1716379200">- Update to 2.12.7
  Security:
  - Fix buffer overread with 'xmllint --htmlout' (CVE-2024-34459)
  Regressions:
  - xmllint: Fix --pedantic option
  - save: Handle invalid parent pointers in xhtmlNodeDumpOutput</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-1.0.cf" date="1718280000">- Update to 2.12.8
  Regressions:
  - parser: Fix performance regression when parsing namespaces</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
</package>
<package pkgid="11c7810d2871b0096f0e668951b0012e725cf6d0b39b2768f17774d2f179cc98" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-2.0.cf" date="1705665600">- Update to 2.12.4
  Regressions:
  - parser: Fix regression parsing standalone declarations
  - autotools: Re-add --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update license to include ISC-Veillard
- Reinstate Xpointer locations support for Fedora &lt; 40, RHEL &lt; 10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-3.0.cf" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.5-1.0.cf" date="1707134400">- Update to 2.12.5
  Security:
  - xmlreader: Don't expand XIncludes when backtracking (CVE-2024-25062)
  Regressions:
  - parser: Fix crash in xmlParseInNodeContext with HTML documents</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.6-1.0.cf" date="1710763200">- Update to 2.12.6
  Regressions:
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.7-1.0.cf" date="1716379200">- Update to 2.12.7
  Security:
  - Fix buffer overread with 'xmllint --htmlout' (CVE-2024-34459)
  Regressions:
  - xmllint: Fix --pedantic option
  - save: Handle invalid parent pointers in xhtmlNodeDumpOutput</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-1.0.cf" date="1718280000">- Update to 2.12.8
  Regressions:
  - parser: Fix performance regression when parsing namespaces</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
</package>
<package pkgid="fbb1c16382663c610fee7c0c780f99387aecda2ed057eb30723f904638552009" name="libxml2-static" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-2.0.cf" date="1705665600">- Update to 2.12.4
  Regressions:
  - parser: Fix regression parsing standalone declarations
  - autotools: Re-add --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update license to include ISC-Veillard
- Reinstate Xpointer locations support for Fedora &lt; 40, RHEL &lt; 10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-3.0.cf" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.5-1.0.cf" date="1707134400">- Update to 2.12.5
  Security:
  - xmlreader: Don't expand XIncludes when backtracking (CVE-2024-25062)
  Regressions:
  - parser: Fix crash in xmlParseInNodeContext with HTML documents</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.6-1.0.cf" date="1710763200">- Update to 2.12.6
  Regressions:
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.7-1.0.cf" date="1716379200">- Update to 2.12.7
  Security:
  - Fix buffer overread with 'xmllint --htmlout' (CVE-2024-34459)
  Regressions:
  - xmllint: Fix --pedantic option
  - save: Handle invalid parent pointers in xhtmlNodeDumpOutput</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-1.0.cf" date="1718280000">- Update to 2.12.8
  Regressions:
  - parser: Fix performance regression when parsing namespaces</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
</package>
<package pkgid="008997ffaf8a05547968c006335d0aba480a719ec61785c8c878b996ce56fd4b" name="libxslt" arch="i686">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="cc20066302fd45b3fd020808700030672e04f010db84c347560a15a4f380609a" name="libxslt" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="e55cb251f994cc0df48b08c40211c07d6e0be670d8685dae9ec78ff652583aa1" name="libxslt-devel" arch="i686">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="94a09fb387a8590ba231c5eaf0f29b62a0a1061df04c2f72b3d9acb7accaa306" name="libxslt-devel" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="f4d3750a10abfdfcda159ca1acdc5d98d4ca2b258d459157d188cec857262888" name="mcrcon" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-4" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-7" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.3-1" date="1733313600">- Update to 0.7.3 (rhbz#2330303)
  - Add support for Valve style rcon authentication (GH#106)
  - Change maximum packet size to correct value (4096 -&gt; 4106) (GH#103)
  - Print auth failed message to stderr instead of stdout
  - Fail immediately if received packet size is out of spec
  - Return proper exit code from run_terminal_mode()
  - Add error messages to rcon_command() function
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="d660dc9f227171c773fb901ac6088c52ef56ae440759675269a27aa7e7ae39f0" name="metamail" arch="x86_64">
  <version epoch="0" ver="2.7" rel="54.7.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.5" date="1714737600">- Fix for gcc14 compatibility and some other stuff (rightfully) generating
  warnings
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.6" date="1726660800">- Avoid file dependency for fonts after Fedora 38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.7" date="1761825600">- Port from termio.h to termios.h
- Add fixes for c99</changelog>
</package>
<package pkgid="03ee940e6a1ee3df0a42c2fcb311b9309531b0f485e1f29d3c50cc55a0a50649" name="mgdiff" arch="x86_64">
  <version epoch="0" ver="1.0" rel="13.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0-13" date="1680177600">- License is SPDX: MIT
- Avoid deprecated patch syntax
- Use distribution linker flags
- Replace deprecated _BSD_SOURCE and _SVID_SOURCE with _DEFAULT_SOURCE
  unless we're on EL-7 or Fedora &lt; 21, where it doesn't work</changelog>
</package>
<package pkgid="92c657d8f452f3ec284b4b35efb0dabec5750b8a915da2996b314dcf6369473f" name="mkisofs" arch="x86_64">
  <version epoch="10" ver="3.01" rel="5.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-4.0" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 10:3.01-5.0" date="1688904000">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
</package>
<package pkgid="01a39ec3616870e22b6585d412daf0b941c8e6bc464390b82817ebfaddef1b82" name="mkisofs" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="e7ba5a35ea1373fa8eb981bedd0c59693c9653a2b5372c5de31fb6a3149e14f4" name="mod_fastcgi" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="3.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7.1-2" date="1705924800">- Drop support for httpd 2.2.x
- Avoid use of deprecated patch syntax
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7.1-3" date="1706184000">- Rebuilt for binutils breakage in Rawhide
  (see https://pagure.io/releng/issue/11888)</changelog>
</package>
<package pkgid="bcf80aa233edbb16517d0a20462c51d21046210b772d3e7ac3e9d762335f73fb" name="mod_fcgid" arch="x86_64">
  <version epoch="0" ver="2.3.9" rel="33.fc37"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-27" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.9-28" date="1661342400">- BR: systemd-rpm-macros for definition of %{_tmpfilesdir}</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-31" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-32" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Software Management Team &lt;packaging-team-maint@redhat.com&gt; - 2.3.9-33" date="1720526400">- Eliminate use of obsolete %patchN syntax (#2283636)</changelog>
</package>
<package pkgid="99178a98d5c2f3d628ecef8eb0459d073821a8d3beea5d8b77a1f6c937399435" name="moin" arch="noarch">
  <version epoch="0" ver="1.9.11" rel="3.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9.11-2.0.cf" date="1676635200">- Use SPDX-format license tag
- Assume we have rpm 4.9 or later
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9.11-3.0.cf" date="1714737600">- Avoid use of deprecated patch syntax
- Expand %files list to avoid warning about passlib.rpmmoved listed twice</changelog>
</package>
<package pkgid="9631988f4427ef624af2eff5ac63841ff68073fa5a159f220c733bad054fb5bb" name="moin-macro-MiniPage" arch="noarch">
  <version epoch="0" ver="1.9" rel="4.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-4" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="00f747f16ded24af8afe80e1616c5c9d1d4cb8030afd98ebd5737b078d11261a" name="moin-macro-TitleIndexNonPersonal" arch="noarch">
  <version epoch="0" ver="20060519" rel="13.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20060519-13" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="bb81f0ca97bd49daaa34a5f69e9d208d017b3e93beb7311c87eab3bd9d79b0c0" name="moin-theme-balanced" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="08592d89383ebddf943b66e592b27e080fa0a934b7eb9462b527345baaa9d453" name="moin-theme-balanced-kubuntu" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="f5da64a17e992c8707612b33128fea8363a671972f1e0a9fa5973f157610345a" name="moin-theme-balanced-orchard" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="094a519044c77a2618c50aa6fee5ea4bd69cb8c314469d999a73b60181d17b2b" name="moin-theme-dew" arch="noarch">
  <version epoch="0" ver="0" rel="0.12.20080530.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0-0.12.20080530" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="240656e61b53c83a21f85b01b1a9042d0f7c8c44e767cb4ad82f60ba02b50783" name="moin-theme-hypermodern" arch="noarch">
  <version epoch="0" ver="2006.02.24" rel="14.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2006.02.24-14" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="bd92faafb47f22acdfd08c68d9a28b68e5ca97f6a094c33275bf563b1fef5454" name="moin-theme-mentalwealth" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="751b46be2f7d9899ea8502abb2d6252532b97ae6075d4ee18a6c64746dd95cf7" name="moin-theme-mentalwealth-orange" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="7fbc6942c78b394d4491a9626c8dc19a3887beac7f4cd0f443d76f7b8ab278f2" name="moin-theme-mentalwealth-purple" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="f34d192d433f2350626c5d18d69e80ae18fbdbe195d28ca70547fcd87495e295" name="moin-theme-mentalwealth-red" arch="noarch">
  <version epoch="0" ver="0.96" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-8" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="ee9b9e17d7f13c6f04699e087cbbe1e6fe2234abb4a48feb7cc973021a20d812" name="moin-theme-monobook" arch="noarch">
  <version epoch="0" ver="0.5" rel="15.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-15" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="6381a5f8122e81b0cd5305581676679ef04fd9400d1ec35a88f6a26b3a8f2fe5" name="moin-theme-monomoin" arch="noarch">
  <version epoch="0" ver="0.5" rel="14.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5-14" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="c26961b63ec03cca6d938153bfbd6942af9765e5bf18d273b2925ef5a47411d1" name="moin-theme-solenoid" arch="noarch">
  <version epoch="0" ver="2012.12.16" rel="6.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2012.12.16-6" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="445eb5cc4f5cad8c749593d1d23486b5b1bfd343e76155aa5943dd55fda8c17b" name="moin-theme-widget" arch="noarch">
  <version epoch="0" ver="20060807" rel="13.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20060807-13" date="1680091200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="444f703cb03ac173b44367663ba999f04139df849a0a6b2ea4b09fc384fb3196" name="nmap" arch="x86_64">
  <version epoch="4" ver="7.92" rel="5.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-3.1.cf" date="1689854400">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-4.0.cf" date="1701259200">- Use pcre2 instead of deprecated pcre from F-40 onwards (#2128336)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-5.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-6.0.cf" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.94-1.0.cf" date="1709208000">- Update to 7.94 (see CHANGELOG for details)
- Zenmap now requires Python 3
- Required lua version is now 5.4
- Provide ncat in nmap-ncat for convenience (rhbz#2214073)
- Add patch to fix finding zenmap messages files
  (https://github.com/nmap/nmap/issues/2718)
  (https://github.com/nmap/nmap/pull/2789)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.95-1.0.cf" date="1713873600">- Update to 7.95 (see CHANGELOG for details)
- Use pcre2 unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-2.0.cf" date="1720958400">- Downgrade Nmap to 7.92 to fix NPSL license issue (rhbz#2296006)
  https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/thread/Q67UGCHSCKCLJOVOHSLYU4AERAHBS5YE/
  https://gitlab.com/fedora/legal/fedora-license-data/-/issues/543
- pcre2 only used from F-40 onwards again, as it was prior to 7.95
- Support EMS in ssl-enum-ciphers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-3.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-4.0.cf" date="1737201600">- Fix build with libpcap-1.10.5
  - This version changed SOCKET to PCAP_SOCKET, which conflicts with an
    unrelated use of the same name internally
  - https://github.com/the-tcpdump-group/libpcap/pull/1251</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-5.0.cf" date="1737201601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="fefcb6f031dd3428ae5625d4686dccad1033c4dc4727f6f7ad938874a61cf74b" name="nmap-ncat" arch="x86_64">
  <version epoch="4" ver="7.92" rel="5.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-3.1.cf" date="1689854400">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-4.0.cf" date="1701259200">- Use pcre2 instead of deprecated pcre from F-40 onwards (#2128336)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-5.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.93-6.0.cf" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.94-1.0.cf" date="1709208000">- Update to 7.94 (see CHANGELOG for details)
- Zenmap now requires Python 3
- Required lua version is now 5.4
- Provide ncat in nmap-ncat for convenience (rhbz#2214073)
- Add patch to fix finding zenmap messages files
  (https://github.com/nmap/nmap/issues/2718)
  (https://github.com/nmap/nmap/pull/2789)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:7.95-1.0.cf" date="1713873600">- Update to 7.95 (see CHANGELOG for details)
- Use pcre2 unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-2.0.cf" date="1720958400">- Downgrade Nmap to 7.92 to fix NPSL license issue (rhbz#2296006)
  https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/thread/Q67UGCHSCKCLJOVOHSLYU4AERAHBS5YE/
  https://gitlab.com/fedora/legal/fedora-license-data/-/issues/543
- pcre2 only used from F-40 onwards again, as it was prior to 7.95
- Support EMS in ssl-enum-ciphers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-3.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-4.0.cf" date="1737201600">- Fix build with libpcap-1.10.5
  - This version changed SOCKET to PCAP_SOCKET, which conflicts with an
    unrelated use of the same name internally
  - https://github.com/the-tcpdump-group/libpcap/pull/1251</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-5.0.cf" date="1737201601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="facf9950d0940c480037163837ac849d7bcd8e5c816924a65222ed2938dee23d" name="perl-Algorithm-C3" arch="noarch">
  <version epoch="0" ver="0.11" rel="10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-10" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="450e4ae8f5d4384b949f99b8da19ad54ce9115785c9ce5df0ed8e29cacec209f" name="perl-Algorithm-Diff" arch="noarch">
  <version epoch="0" ver="1.2010" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2010-8" date="1678104000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6448aaa64ce2c7dfb5ed9d05718282997b9cd67246ff52792497a340c2c0859a" name="perl-Algorithm-Diff-XS" arch="x86_64">
  <version epoch="0" ver="0.04" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-22" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-25" date="1689076800">- Perl 5.38 rebuild</changelog>
</package>
<package pkgid="e539e7c24b850e5c472aed99277075ec642ac8955de08a35cb1c6bae04a46dca" name="perl-Any-Moose" arch="noarch">
  <version epoch="0" ver="0.27" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-27" date="1678104000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="689591c01036d8970c339f05087130c2ad1d9a758a4ab1391867c9aba84a1803" name="perl-AnyEvent" arch="x86_64">
  <version epoch="0" ver="7.17" rel="18.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-11" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-15" date="1678190400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-16" date="1689249600">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-18" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="3c6c64496a51eea284cf02a7d42b95b0bcd27570c123ff0ec7be3f5e0ac99ab8" name="perl-AnyEvent-AIO" arch="noarch">
  <version epoch="0" ver="1.1" rel="38.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-38" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="cc1154efdf0b3199b6fd03eb28bb7ac1955c547647c5444f42dd16826db418e4" name="perl-AnyEvent-BDB" arch="noarch">
  <version epoch="0" ver="1.1" rel="42.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-42" date="1689336000">- Use SPDX-format license tag
- Use %licence unconditionally</changelog>
</package>
<package pkgid="8b611870a959342f1b7d80d7292df81ce3a8ec3d5b5f9ee7dad9d36af9224e21" name="perl-Archive-Any" arch="noarch">
  <version epoch="0" ver="0.0946" rel="13.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0946-13" date="1678190400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="be627690158c304a94a9d716a804e04f6a29d482ea1d141352db519a7ea3aa8b" name="perl-Archive-Any-Lite" arch="noarch">
  <version epoch="0" ver="0.11" rel="22.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-22" date="1678190400">- Use SPDX-format license tag
- BR: perl(Parallel::ForkManager) unconditionally
- Use %license unconditionally</changelog>
</package>
<package pkgid="2e202298d916a48f56de6c37dba44ecd18c8863b74b062724e1c8681022ca5fa" name="perl-Archive-Peek" arch="noarch">
  <version epoch="0" ver="0.37" rel="5.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-1" date="1636977600">- Update to 0.37
  - Add repository metadata
  - Port from Moose to Moo and Type::Tiny
  - Make prereqs more specific with respect to phase
  - Add negative test
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-5" date="1678190400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2a6ea7cce8ada6e97a6f43ad51ab8f94e7ca4216b53112df1d01cf5010c61fc4" name="perl-Archive-Tar" arch="noarch">
  <version epoch="0" ver="3.04" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.00-1" date="1679832000">- Update to 3.00
  - Correctly concat prefix on directories (CPAN RT#119949)
  - Enabled t/90_symlink.t for all platforms with symlinks
  - Fix pod typo 'Archive::Tar::Files'
  - Update links under SEE ALSO
  - Skip symlink tests on Windows/msys2
  - Support extraction of large files
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.02-1" date="1681387200">- Update to 3.02
  - Test block sizes up to (2**31 - 1) bytes only (fix for 32-bit perls)
  - Don't match on message from exception in symlink test
  - Improve formatting of $Archive::Tar::RESOLVE_SYMLINK documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.04-1" date="1740571200">- Update to 3.04
  - Fix handling filenames with trailing whitespace
  - Allow --format=ustar option for ptar
  - Symlink tests on Windows (https://github.com/Perl/perl5/issues/21402)</changelog>
</package>
<package pkgid="ba8e701f4dd67fac3c8978bf3a340d56bd0fb771c027f01b24ccbcada7c269f8" name="perl-Archive-Zip" arch="noarch">
  <version epoch="0" ver="1.68" rel="11.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.68-11" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b673628e0d2ff31bd58d5a626370716be7ec2c07cebb6fd47309698a5556353f" name="perl-Array-Compare" arch="noarch">
  <version epoch="0" ver="3.0.8" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.3-1" date="1565697600">- Update to 3.0.3
  - Added NoSkip method to clear Skip setting</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.3-3" date="1593432000">- Perl 5.32 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.7-1" date="1607342400">- Update to 3.0.7
  - Fix documentation typo
  - Add bugtracker info</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.8-1" date="1608552000">- Update to 3.0.8
  - Only support versions 5.10+</changelog>
</package>
<package pkgid="a545a21d0c781642edf4f57ddc9affa87de182cd6deac4de7c887eb2155c212b" name="perl-Array-Diff" arch="noarch">
  <version epoch="1" ver="0.09" rel="14.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.09-14" date="1678276800">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="1c46a023f4dbcfcde3419b50e2f8e2deca8c4c81045489b8b155a8816f3e712c" name="perl-B-COW" arch="x86_64">
  <version epoch="0" ver="0.007" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-6" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-9" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-1" date="1665835200">- Update to 0.005
  - Add version to Test::More use to ensure correct version
  - Remove useless MIN_PERL_VERSION_FOR_COW
  - Update CI workflow
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-1" date="1666094400">- Update to 0.006
  - Disable prototypes to silence warning</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.007-1" date="1666353600">- Update to 0.007
  - Advertise XSLoader dependency in metadata</changelog>
</package>
<package pkgid="88f1bfb857f183cf0243dd3c183613bb83ccb0aa5dbe4db15e8bf52ede08f0da" name="perl-B-Hooks-EndOfScope" arch="noarch">
  <version epoch="0" ver="0.28" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-6" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.28-1" date="1709294400">- Update to 0.28
  - Add optional prereqs to metadata to help prereq analysis tools
    (CPAN RT#151992)</changelog>
</package>
<package pkgid="71bf4a22aaf7f172f37e37cf62b0b07e5a040669ef5d954a020817e63a6fa4e9" name="perl-B-Hooks-OP-Annotation" arch="x86_64">
  <version epoch="0" ver="0.44" rel="35.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-29" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-33" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-35" date="1678276800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4394142633de3f69e3ca9d87dbdfedbea49df6f134dddd53a61f8f101df8619d" name="perl-B-Hooks-OP-Check" arch="x86_64">
  <version epoch="0" ver="0.22" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-13" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-17" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-19" date="1678276800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3603b237c9d81b3c99bc2f37f7e077b517efd97fda9dd547f860f4345022cfb7" name="perl-B-Keywords" arch="noarch">
  <version epoch="0" ver="1.29" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1716811200">- Update to 1.27 (rhbz#2283492)
  - Add bareword __CLASS__ since 5.39.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1750939200">- Update to 1.28
  - Add keywords any, all since 5.42.0
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1760875200">- Update to 1.29
  - Fix new 5.43 warning with qw($\) (GH#10)</changelog>
</package>
<package pkgid="522d65abffd3217fb453bfb8f25fb493fd184278ed0bc20e68dcf3a5dd8a7953" name="perl-B-Utils" arch="x86_64">
  <version epoch="0" ver="0.27" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-19" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-23" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-25" date="1678276800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c10999ec10c1828db79f1ba29780c05318fe95221cac5eb86b3516f3ffcafb9b" name="perl-BDB" arch="x86_64">
  <version epoch="0" ver="1.92" rel="23.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-17" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-20" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-23" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="a1d8de26835aa4696f66ee5fc8ee3b5d357f40da4e3fce36d875ce2b4a1f64ed" name="perl-BSD-Resource" arch="x86_64">
  <version epoch="0" ver="1.2911" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-16" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-19" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-21" date="1674302400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3abc7ce9109c2826da52bacd0b2a7c651b59e5ee3551a385c1291f04b7b82499" name="perl-BerkeleyDB" arch="x86_64">
  <version epoch="0" ver="0.67" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.65-9" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-1" date="1728907200">- Update to 0.66
  - Bundled Test::More failed with perl 5.41.x (GH#12)
  - Possible precedence problem between ! and string eq (GH#13)
  - Silence clang warnings (GH#10)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-3" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.67-1" date="1770033600">- Update to 0.67 (no functional changes)</changelog>
</package>
<package pkgid="ec5323e253e67171110e7e9a8fd303a89d6c88fa47d66f0df928f3891c9ae5bf" name="perl-CPAN-Changes" arch="noarch">
  <version epoch="0" ver="0.500005" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500002-1" date="1698321600">- Update to 0.500002
  - Full rewrite
    - The new version can parse nested entries to an arbitrary depth, rather
      than just groups
    - It can parse many more formats, and can format the outputs more flexibly;
      this means it can better handle the change logs that actually exist on
      CPAN
  - Parsed releases keep their original order
  - Pass given ChangeLog filename for --check
- Package LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500003-1" date="1708689600">- Update to 0.500003
  - Fix calling -&gt;name on an unnamed group
  - Fix -&gt;set_changes call on groups</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500004-1" date="1714737600">- Update to 0.500004
  - Fix tests on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500005-1" date="1744977600">- Update to 0.500005
  - Fix Test::CPAN::Changes on perl 5.10 without upgrading version.pm
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="414118e898b831d3d9bbb34fd51e8a5751010ff8f72332b3d5961f90dced0649" name="perl-CPAN-DistnameInfo" arch="noarch">
  <version epoch="0" ver="0.12" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-27" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a0dbe90a30dabae424a37182bd3936d9453267ec42b88a80d2ff740635340cf5" name="perl-CPAN-Meta" arch="noarch">
  <version epoch="0" ver="2.150013" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150011-1" date="1769169600">- Update to 2.150011 (rhbz#2432163)
  - Improved example of testing a minimum prerequisite version of a module
  - Remove some code meant to handle running on pre-v5.8 perl, even though v5.8
    was already a requirement
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150012-1" date="1769428800">- Update to 2.150012 (rhbz#2432714)
  - Distribution metadata update
- Add workaround for test issues with CPAN::Meta::Requirements ≥ 2.144
  https://github.com/Perl-Toolchain-Gang/CPAN-Meta/issues/145</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150013-1" date="1771675200">- Update to 2.150013 (rhbz#2441425)
  - Fix an incompatibility with newer CPAN::Meta::Requirements (GH#145, GH#147)</changelog>
</package>
<package pkgid="486995b27e09581244eced70109e260f5c77f60e0991c8889f6fd2e5f1313786" name="perl-CPAN-Meta-Check" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1672747200">- Update to 0.015
  - Drop Test::Deep prereq
- Use SPDX-format license tag
- Add hack to work around test issue with Scalar::Util 1.50
  (CPAN RT#145766)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1672747201">- Update to 0.017
  - Use Module::Metadata for more accurate testing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-2" date="1689422400">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1689940800">- Update to 0.018
  - Fix version requirement for CPAN::Meta::Prereqs
  - Move issue tracker to GitHub</changelog>
</package>
<package pkgid="4051fe9c32885f6ab1f850e0605445d0bf53fc98e5940da1becb659c585ab8e1" name="perl-CPAN-Meta-Requirements" arch="noarch">
  <version epoch="0" ver="2.145" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.144-1" date="1769169600">- Update to 2.144 (rhbz#2432229)
  - Remove code meant to cope with running on v5.8, when v5.10 is the minimum
    required perl
  - Normalize away "&gt;= 0" in compount version requirements; it's meaningless
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.145-1" date="1769860800">- Update to 2.145 (rhbz#2435673)
  - Correct "normalization of 0" code to work correctly with vstrings (GH#46)</changelog>
</package>
<package pkgid="dcdba874315b6b25b36fb5cc438bbd3f13f829d05206a3d0660c98e50795cc77" name="perl-CPAN-Meta-YAML" arch="noarch">
  <version epoch="0" ver="0.020" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-491" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.019-1" date="1734350400">- Update to 0.19
  - Generated from ETHER/YAML-Tiny-1.75.tar.gz
- Use author-independent source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.020-1" date="1734436800">- Update to 0.20
  - Generated from ETHER/YAML-Tiny-1.76.tar.gz</changelog>
</package>
<package pkgid="79b2571c6c981fd4b6650667b1fb9c1e3f3213288ab895e82fd2b6e261e0e5d1" name="perl-CPAN-Requirements-Dynamic" arch="noarch">
  <version epoch="0" ver="0.002" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.001-1" date="1714392000">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002-1" date="1744027200">- Update to 0.002
  - Remove unnecesary conditions
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="26e75a6a9f452b67b6cff2f46297ad565abbfcf065e09e1325655b5f1547a093" name="perl-Canary-Stability" arch="noarch">
  <version epoch="0" ver="2013" rel="15.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2013-15" date="1689076800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f570d4b48123af82ed26deab8362cdcab63b89131dabd84b181191311f661166" name="perl-Capture-Tiny" arch="noarch">
  <version epoch="0" ver="0.50" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-16" date="1689422400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1734696000">- Update to 0.50
  - Stringify '$]' for far future compatibility
  - Fixed docs about custom files for capture</changelog>
</package>
<package pkgid="7d55c3614b386d3b33a978a1ac9ec484f26f99a1cc983451731e78a9f6e23f0d" name="perl-Carp-Clan" arch="noarch">
  <version epoch="0" ver="6.08" rel="14.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.08-14" date="1689422400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="0db464e1dbc0b602cab81c7f269a0f0d12d5dee00ea2f98b62fa56ec7147af69" name="perl-Carp-Fix-1_25" arch="noarch">
  <version epoch="0" ver="1.000001" rel="30.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000001-30" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="8439073154c7b2103473f7e59e21beb179133bb66cc355d2592caa7a28359c43" name="perl-Child" arch="noarch">
  <version epoch="0" ver="0.013" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-21" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b54636290cd8fb51bd7ee43d2ec24b7537fd21d58c4a6c18e84a9427a7883bc7" name="perl-Class-Accessor" arch="noarch">
  <version epoch="0" ver="0.51" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-17" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="77e75a0e11cc12e893bd88f43b32ddb3fa36db20082e344a06b8adc6e2a25314" name="perl-Class-C3" arch="noarch">
  <version epoch="0" ver="0.35" rel="10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.35-10" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="95d90aac3851609a1c9475a209cbcac6d4b496df367f8a97592a5cc90a046f7c" name="perl-Class-C3-XS" arch="x86_64">
  <version epoch="0" ver="0.15" rel="10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-5" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-8" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-10" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6c275d39395ff3b9da6956ff19e8edb3b5413ce6573adc20fbbb7e8d8b37277b" name="perl-Class-Data-Inheritable" arch="noarch">
  <version epoch="0" ver="0.10" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-5" date="1678449600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-1" date="1729771200">- Update to 0.10
  - Don't use vars, use our</changelog>
</package>
<package pkgid="8119b5bb203388f53a72d04e73ec4cec1be9995519e4700dc7cd951af620c010" name="perl-Class-Factory-Util" arch="noarch">
  <version epoch="0" ver="1.7" rel="43.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-43" date="1678449600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="86f1c453c8a1e65031e96e4909dcdeff20778750189f379aa0b4824f3a53efb7" name="perl-Class-Inspector" arch="noarch">
  <version epoch="0" ver="1.36" rel="13.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-13" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c941b30c0ef7bbadaf19a565d9d3a56db43bd4cde580865782674f95c3e83abf" name="perl-Class-Load" arch="noarch">
  <version epoch="0" ver="0.25" rel="22.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-22" date="1678449600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="93532faf18b9b266cbfcb5b13b2b5bf21199833aab7c3540994ae8647213e922" name="perl-Class-Load-XS" arch="x86_64">
  <version epoch="0" ver="0.10" rel="20.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-15" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-18" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-20" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="33bdce695b2a06d839609346f784c1f936b4278a7aedafc963430884c580cbdb" name="perl-Class-Method-Modifiers" arch="noarch">
  <version epoch="0" ver="2.15" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.14-1" date="1673956800">- Update to 2.14
  - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.15-1" date="1678104000">- Update to 2.15
  - Localize $SIG{__DIE__} before calling eval (CPAN RT#146848)</changelog>
</package>
<package pkgid="02cb574fd8870849a6f6737ffd69198f940c3ace02b871e788902f12016ff129" name="perl-Class-Singleton" arch="noarch">
  <version epoch="0" ver="1.6" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.6-8" date="1674216000">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64</changelog>
</package>
<package pkgid="30ec17cdaa4c3b824e6de4d2eeb53e55bc82f79171450946252b7058244c0032" name="perl-Class-Tiny" arch="noarch">
  <version epoch="0" ver="1.008" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-8" date="1689422400">- Use SPDX-format license tag
- Drop support for building with old perls needing Devel::GlobalDestruction
- Use %license unconditionally</changelog>
</package>
<package pkgid="ad4024a243546b8192528cf42c3575d762103614308ca5d9d3a5ae7909ce738a" name="perl-Class-XSAccessor" arch="x86_64">
  <version epoch="0" ver="1.19" rel="28.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-24" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-27" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-28" date="1664539200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0795fb3b0af8d243ed9102032183df33ad26eef503d1f3402ce0d7df50dc944b" name="perl-Clone" arch="x86_64">
  <version epoch="0" ver="0.50" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.46-7" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.47-1" date="1724068800">- Update to 0.47
  - Stop using quote as package separator</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.47-3" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-1" date="1772539200">- Update to 0.48
  - Performance: Optimize hot paths in Clone.xs
  - Fix: Replace subtest with SKIP/bare blocks to avoid Test2 warnings
  - Fix: Don't require MGf_DUP flag for ext magic duplication
  - Fix: Lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers
  - Fix t/10-deep_recursion.t for Windows
  - Fix C89 declaration-after-statement violations in Clone.xs
  - Fix deep recursion stack overflow on Windows
  - Fix cloning of Math::BigInt::GMP objects (GH#16)
  - Fix cloning of threads::shared data structures (GH#18)
  - Add thread safety test for Class::DBI-like patterns (GH#14)
  - Add comprehensive documentation with examples and limitations
  - Improve README.md structure and installation instructions
  - Add DBI + DBD::SQLite as recommended test dependencies
  - Fix weakened reference cloning via deferred weakening (GH#15)
  - Fix memory leak when cloning non-existent hash values (GH#42)
  - Fix segfault when cloning DBI database handles (GH#27)
  - Rewrite t/09-circular.t to fix SEGV on CPAN Testers (GH#54)
  - Replace static recursion_depth with stack parameter
  - Fix C++ style comments in Clone.xs for C89 portability
  - Fix memory leak in Clone.xs (GH#42)
  - Allow a MAX_DEPTH recursion of 32,000 calls (GH#19 aka CPAN RT#97525)
  - Rename tests with more readable names
  - Remove TODO from CoW test</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1774526400">- Update to 0.49
  - Try to exclude macOS extended attributes from dist tarball
  - Fix: Suppress DBI STDERR noise in t/13-io-handle.t (GH#82)
  - Fix: Skip DBI fork tests on Windows
  - Fix: Remove spurious warn output in t/03-scalar.t
  - Add AI_POLICY.md documenting AI-assisted workflow</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1774699200">- Update to 0.50
  - Fix: Deep-copy HVs past MAX_DEPTH instead of aliasing (GH#93)
  - Fix: Strip macOS xattrs from dist directory before packaging
  - Clean-up: Remove unreachable break and empty magic_ref if-body in Clone.xs
  - Docs: Update MAX_DEPTH limits to reflect actual platform values
  - Docs: Add SECURITY.md policy for vulnerability reporting
  - Prefer using gtar in Makefile.PL</changelog>
</package>
<package pkgid="643936fb976a03679f0b7aa61ebbce4fb867f933caf3952fa60399f35afb5846" name="perl-Compress-Raw-Bzip2" arch="x86_64">
  <version epoch="0" ver="2.218" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.211-1" date="1712491200">- Update to 2.211 (no changes, rhbz#2273784)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no changes, rhbz#2277505)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-511" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213
  - Silence unused variable warnings</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-519" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Development workflow updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435735)
  - No functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1772971200">- Update to 2.218 (rhbz#2445591)
  - Add SECURITY.md (GH#18)
  - Fix POD typo</changelog>
</package>
<package pkgid="09e7d03ede3c57a21135765d08c14509ba09e6e3bbe6cfe0c66574dc66d9102b" name="perl-Compress-Raw-Lzma" arch="x86_64">
  <version epoch="0" ver="2.221" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-2" date="1727956800">- Rebuild against xz 5.6.3</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-4" date="1743249600">- Rebuild against xz 5.8.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-5" date="1743768000">- Rebuild against xz 5.8.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-6" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Development workflow updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-2" date="1767787200">- Rebuild against xz 5.8.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217
  - Test updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1772366400">- Update to 2.219
  - Add PERL_UNUSED_DECL for trace to silence clang warning
  - Fix indentation in Lzma.xs that triggers a clang warning
  - Remove vestigial references to Pod::Markdown (GH#14)
  - Fix POD typo
  - Document that flush returns LZMA_STREAM_END on success, rather than LZMA_OK
    (GH#16)
  - Remove unused constants (GH#17)
  - Documentation improvements (GH#15)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.220-1" date="1772971200">- Update to 2.220
  - Remove obsolete TODO comment</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.221-1" date="1772971201">- Update to 2.221
  - Add SECURITY.md</changelog>
</package>
<package pkgid="4cf566998acd5ea05f545bd10b1fe4ad28dee21292ed9a4fd4a864168a2a465c" name="perl-Compress-Raw-Zlib" arch="x86_64">
  <version epoch="0" ver="2.222" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no changes, rhbz#2277504)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-511" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-519" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - get_Bufsize is correct, but the documentation says get_BufSize (GH#34)
  - Development workflow updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435736)
  - No functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1770120000">- Update to 2.218 (rhbz#2436314)
  - Fix for regression of GH#34</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1771934400">- Update to 2.219 (rhbz#2441964)
  - Update bundled zlib to 1.3.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.221-1" date="1772280000">- Update to 2.221 (rhbz#2443301)
  - zlib 1.3.2: Update references to zlib 1.3.1 to use zlib 1.3.2
  - zlib 1.3.2: Add "Perl_crz" prefix to "z_errmsg" (GH#32)
  - Fix POD typo
  - Version number wrong in 2.220 Changes file (GH#38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.222-1" date="1772971200">- Update to 2.222 (rhbz#2445592)
  - Add SECURITY.md (GH#40)
  - Fix POD typos</changelog>
</package>
<package pkgid="1ee16261d0c3371259b14d83c209355fba957a210309dee17bfc33945a00c932" name="perl-Config-Tiny" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1641297600">- Update to 2.28
  - Replace both uses of bareword filehandles with 'my' variables
  - Modernize Makefile.PL
  - Make corresponding patches where appropriate to Tiny.pm and t/02.main.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-6" date="1678622400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1680696000">- Update to 2.29
  - Edit to remove Test::Pod from TEST_REQUIRES in Makefile.PL, again
  - Update version number in t/02.main.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1697198400">- Update to 2.30
  - Add support for an array syntax for cases where you wish to assign an array
    of values to a key
    - See the new POD section called ARRAY SYNTAX
    - See also the updated question in the FAQ: What happens if a key is
      repeated?
    - See also the sample code in the Synopsis, in t/02.main.t and in
      t/test.conf
    - In each case, search for the word greetings to find the new code samples</changelog>
</package>
<package pkgid="2e89bb93f9ca226384647e28377e90343e8e83706223f1082dcaffcc85e3fb58" name="perl-ConfigReader-Simple" arch="noarch">
  <version epoch="0" ver="1.29.8" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.5-2" date="1689508800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.6-1" date="1706011200">- Update to 1.296
  - Refresh distro, update email address, update repo URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.7-1" date="1736078400">- Update to 1.297
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.8-1" date="1744632000">- Update to 1.298
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="8e086e062122c6da87688c9ad90742ea9e37b8bf033d12da9a1656d097b76ab2" name="perl-Const-Fast" arch="noarch">
  <version epoch="0" ver="0.014" rel="29.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-29" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="95e05cc5c56f4ce54fff4448e1afb583a8f15ddde2c66f8232923e4238834ed9" name="perl-Convert-BinHex" arch="noarch">
  <version epoch="0" ver="1.125" rel="24.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.125-24" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for ancient distributions with rpm &lt; 4.9</changelog>
</package>
<package pkgid="f78c4b757f5f04b2111f5078e21e9bdd2761a76b494057b65365ba347af00eb2" name="perl-Convert-TNEF" arch="noarch">
  <version epoch="0" ver="0.18" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-27" date="1674216000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7bafa7edb11bb1390ddd76709afc4148b66ffe9d268650d579e4ee66aa5d02d8" name="perl-Convert-UUlib" arch="x86_64">
  <version epoch="4" ver="1.8" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-7" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-13" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-16" date="1737633600">- Fix for C23 mode (rhbz#2341023)</changelog>
</package>
<package pkgid="1761c1382ee85dcf6b82ae3513ecf58d93c8b1dadc3b9c0c4e0254f25315b56f" name="perl-Coro" arch="x86_64">
  <version epoch="0" ver="6.570" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-7" date="1676894400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-13" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-17" date="1714737600">- BR: valgrind-devel rather than /usr/include/valgrind/valgrind.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-18" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-21" date="1737720000">- Fix for compiling in C23 mode (CPAN RT#158609, rhbz#2341024)</changelog>
</package>
<package pkgid="95b962d92897395016bc0c6497704f7536f5f326492292f3618f27f62396233d" name="perl-Cpanel-JSON-XS" arch="x86_64">
  <version epoch="0" ver="4.40" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.38-1" date="1716897600">- Update to 4.38
  - Encode real core booleans as boolean notation (GH#224)
  - Minor test fixes
  - Fix docs typo (GH#225)
- Pod::Spell::CommonMistakes not available in EPEL
  (how did that ever work?)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.38-3" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.39-1" date="1734091200">- Update to 4.39
  - Fix Windows -Dusequadmath (GH#229, GH#235)
  - Fix inconsistent behavior between decoding escaped and unescaped
    surrogates, and escaped non-characters vs. non-escaped non-characters; now
    aligned to JSON::PP (GH#227, GH#233)
  - Add type_all_string tests (GH#236)
  - Silence UV to char cast warnings (GH#232)
  - Fix MSVC preprocessor errors (GH#232)
  - Fix -Wformat warnings on Windows (GH#228)
  - Clarify BigInt decoding (GH#226)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.39-3" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.40-1" date="1757419200">- Update to 4.40
  - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
  - Detect more malformed numbers, with two decimal points
  - Pin Github actions to latest @v via pinact run -u</changelog>
</package>
<package pkgid="682268cdbe1ceab8012d5c032c4e55c773d33212dcd74019fc1f5e8244d5a80d" name="perl-Crypt-Cracklib" arch="x86_64">
  <version epoch="0" ver="1.7" rel="38.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-33" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-36" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-38" date="1678622400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="50bbd1736c13bdb3a41eefe6835f7c842fe917ea484d050dba603f14afe7ce48" name="perl-Crypt-PBKDF2" arch="noarch">
  <version epoch="0" ver="0.161520" rel="18.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.161520-18" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6fe3198edd675f0ef9d8e09b95b6e767fcd4b6417a4ece66249ed336c05368f9" name="perl-Crypt-SmbHash" arch="noarch">
  <version epoch="0" ver="0.12" rel="48.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-48" date="1678708800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7ced98ad6c051b4baffb760fa86b80afe16eb89f16a5774a551a9307c3c50489" name="perl-Cwd-Guard" arch="noarch">
  <version epoch="0" ver="0.05" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-21" date="1673611200">- Drop perl(:MODULE_COMPAT*) dependency from Fedora 38 onwards
- Use SPDX-format license tag
- Use %license unconditionally
- Fix permissions verbosely</changelog>
</package>
<package pkgid="b88476dd687db24e82ade11ee56e040094884aa3d03bb1080374fa25f0df785e" name="perl-DBD-CSV" arch="noarch">
  <version epoch="0" ver="0.62" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.60-2" date="1689508800">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-1" date="1736769600">- Update to 0.62
  - It's 2025
  - Replace "use vars" with "our" (GH#9)
  - Specify recommended versions based on known CVE's
  - Update documentation for groff-1.24
  - Tested with perl-5.40.0
  - Add SECURITY.md</changelog>
</package>
<package pkgid="2d14fb98cce7bf8628cc6e5d3d74bbf72b0a49248598cc720f803c0f4ef9c4ec" name="perl-DBD-SQLite" arch="x86_64">
  <version epoch="0" ver="1.78" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.74-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-1" date="1729339200">- Update to 1.76
  - Upgraded bundled SQLite to 3.46.1
  - Fix for Windows quadmath builds (GH#115)
  - Omit load_extension if static build</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-3" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.78-1" date="1767355200">- Update to 1.78
  - Upgraded bundled SQLite to 3.51.1
  - Omit constants for newly-added C-array extension
  - SQLite 3.51.0 has two extensions (C-array and percentile) amalgamated but
    both are disabled by default
  - Make -&gt;column_info() also return generated columns (GH#119)
- Use bundled SQLite unless system SQLite is 3.31.0 or above (needed for
  generated columns)</changelog>
</package>
<package pkgid="b1271e270dda28b285cecbf612f6a305d9b74ff4d7c92609ed859e2cc5e4a216" name="perl-DBI" arch="x86_64">
  <version epoch="0" ver="1.647" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-21" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Build Coro for EL-9 since the test is now passing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-22" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-24" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-25" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.644-1" date="1724760000">- Update to 1.644
  - Update Devel::PPPort
  - Fix CVE-2014-10401 and CVE-2014-10402: f_dir might not exist in DBD::File
    connections
  - Do not check gccversion on clang
  - Upgrade GIMME to GIMME_V
  - Do not check with JSON::XS with perl-5.022 and later
  - Makefile.PL allows gcc-10 and up now
  - Do not leak $_ after callback execution (CPAN RT#144526, GH#117)
  - Switch from Dynaloader to XSLoader (GH#94)
  - Tim handed the project to the team
  - Merge Pull Requests, resolve RT tickets and resolve GH issues: thanks to
    many! Please check git log
- Add patch from Fedora to fix FTBFS with gcc 14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.645-1" date="1725364800">- Update to 1.645
  - Move developer tests to xt/
  - Make Changes match CPAN::Changes::Spec and regen DBI::Changes from that
  - Fixes for modern gcc i.c.w. recent perl
  - Small code and documentation clean-ups for recent perl
  - See TODO in 'perldoc DBI' to see where you can help with documentation!</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.645-1.1" date="1727956800">- Drop Coro support for EL-10 onwards (Coro test hanging)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-1" date="1736683200">- Update to 1.646
  - Remove "experimental" tag from statistics_info() (GH#134)
  - RT tickets moved to GitHub issues
  - All RT tickets now marked as resolved with reference to GitHub issue
  - Fix install issue (GH#168)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-1" date="1737374400">- Update to 1.647
  - Spellcheck
  - Fix Makefile rules for Changes (Windows case issue)
  - Another example to bind columns (GH#159)
  - Fix fetchall_arrayref for undefined NAME (GH#156)</changelog>
</package>
<package pkgid="029401f973c0c81529061d085f487fe985ac7dfe685152de662f0ece206174d8" name="perl-DBI-Coro" arch="x86_64">
  <version epoch="0" ver="1.647" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-21" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
- Build Coro for EL-9 since the test is now passing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-22" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-24" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.643-25" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.644-1" date="1724760000">- Update to 1.644
  - Update Devel::PPPort
  - Fix CVE-2014-10401 and CVE-2014-10402: f_dir might not exist in DBD::File
    connections
  - Do not check gccversion on clang
  - Upgrade GIMME to GIMME_V
  - Do not check with JSON::XS with perl-5.022 and later
  - Makefile.PL allows gcc-10 and up now
  - Do not leak $_ after callback execution (CPAN RT#144526, GH#117)
  - Switch from Dynaloader to XSLoader (GH#94)
  - Tim handed the project to the team
  - Merge Pull Requests, resolve RT tickets and resolve GH issues: thanks to
    many! Please check git log
- Add patch from Fedora to fix FTBFS with gcc 14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.645-1" date="1725364800">- Update to 1.645
  - Move developer tests to xt/
  - Make Changes match CPAN::Changes::Spec and regen DBI::Changes from that
  - Fixes for modern gcc i.c.w. recent perl
  - Small code and documentation clean-ups for recent perl
  - See TODO in 'perldoc DBI' to see where you can help with documentation!</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.645-1.1" date="1727956800">- Drop Coro support for EL-10 onwards (Coro test hanging)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-1" date="1736683200">- Update to 1.646
  - Remove "experimental" tag from statistics_info() (GH#134)
  - RT tickets moved to GitHub issues
  - All RT tickets now marked as resolved with reference to GitHub issue
  - Fix install issue (GH#168)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-1" date="1737374400">- Update to 1.647
  - Spellcheck
  - Fix Makefile rules for Changes (Windows case issue)
  - Another example to bind columns (GH#159)
  - Fix fetchall_arrayref for undefined NAME (GH#156)</changelog>
</package>
<package pkgid="469d4da83dc706aa5d847a33da3e8017bcd19c2f4bed3cebdde2a1934c1926db" name="perl-DBM-Deep" arch="noarch">
  <version epoch="0" ver="2.0019" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0016-17" date="1678708800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0016-18" date="1684843200">- Remove use of ' as a package name separator (CPAN RT#148417)
  (fix for Perl 5.38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0017-1" date="1693742400">- Update to 2.0017 (rhbz#2236875)
  - Get rid of old perl4-style ' package separator and use :: instead for
    compatibility with perl 5.38 (CPAN RT#148417)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0018-1" date="1699531200">- Update to 2.0018 (rhbz#2248772)
  - Tiny documentation and metadata fixes to make sure people go to the correct
    issue tracker</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0019-1" date="1699876800">- Update to 2.0019 (rhbz#2249377)
  - Improvement so that when you try to put too much data in you get a useful
    error, and don't corrupt the database</changelog>
</package>
<package pkgid="a9d2fac3145e35ec55a56d45f47b140419b075fec82f8bc6099f81f679bb395e" name="perl-Data-Alias" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-3" date="1752148800">- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1770120000">- Update to 1.29
  - Fix compatibility with perl 5.43.8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-1" date="1773316800">- Update to 1.30
  - Use isGV_with_GP_on when available (CPAN RT#173582)</changelog>
</package>
<package pkgid="588fcb553a037086b4b5b6275fa016b69716a0859c9da450fabf9c53c44f10c8" name="perl-Data-Binary" arch="noarch">
  <version epoch="0" ver="0.01" rel="14.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-14" date="1678795200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3bf77b8603f2fe01ad42ad8052a16ccb96fe92cd88bf08b8bbf57f3994198d8e" name="perl-Data-Compare" arch="noarch">
  <version epoch="0" ver="1.29" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1678881600">- Update to 1.28
  - Bug fix: undef values in hashes were treated incorrectly: need to check
    for existence, not definedness before comparing (GH#21)
- Use SPDX-format license tag
- Use %license unconditionally
- Drop NOTES and README files as they provide nothing useful to users</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1682164800">- Update to 1.29
  - Skip taint-mode tests if perl was built without taint support</changelog>
</package>
<package pkgid="0d747dcc6783cc5c85410ffc406fd35121e641a53ef8de36de39a3d33750857b" name="perl-Data-Dump" arch="noarch">
  <version epoch="0" ver="1.25" rel="7.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-1" date="1624708800">- Update to 1.25
  - Strings like "NaN" are still strings
  - Update maintainer and repository information
  - New option $Data::Dump::LINEWIDTH controls when to perform a line break
    (default is 60)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-7" date="1677844800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1a7d6b6f91701976b56db209574c183f7883f03a1706d546d0a9eb3d4c7b16e7" name="perl-Data-Dump-Streamer" arch="x86_64">
  <version epoch="0" ver="2.42" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.40-18" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.40-21" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.41-1" date="1674820800">- Update to 2.41
  - Switch from JSON::XS to Cpanel::JSON::XS as an optional test prereq
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.42-1" date="1676980800">- Update to 2.42
  - Perltidy source to preferred format
  - Fixed issues serializing the global stash
  - Added test to detect if serializing the global stash breaks anything</changelog>
</package>
<package pkgid="0b119daeaa7c431802406ba1893d412bb4c8bf8f0feba315c043519a4c18c127" name="perl-Data-Dumper-Names" arch="noarch">
  <version epoch="0" ver="0.03" rel="42.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-42" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6c7db50b94c48e162d81e3c1c34985beb46dc402036c7b76def4f0432d3e710b" name="perl-Data-OptList" arch="noarch">
  <version epoch="0" ver="0.114" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-1" date="1624881600">- Update to 0.112
  - Update author contact info
  - Add perl version support to docs
  - Replace a "goto" deep in the guts with a sub call, for speed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.113-1" date="1672574400">- Update to 0.113
  - Update author contact info
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.114-1" date="1683460800">- Update to 0.114
  - Data::OptList now requires perl v5.12.0
  - Tests no longer add "-T" to shebang, so do not invoke taint mode
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="95f3dd66af05554243741e82232b469cf448de2a7578a0f2bd9b93df400d41a5" name="perl-Data-Section" arch="noarch">
  <version epoch="0" ver="0.200008" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.200008-1" date="1672574400">- Update to 0.200008
  - Fix to some example code
  - update packaging and metadata
  - Minimum required Perl is now v5.12
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.200008-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="9f9bfcd4024e830f8e6a46e887563efdeb6f98a4b98f1a32a6bd3e241cddf7c7" name="perl-Data-Section-Simple" arch="noarch">
  <version epoch="0" ver="0.07" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-27" date="1679054400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="6cadc6bbedc3c371218bfbb7888bbbf6f897e69e99c42884a2e6a4d8dca58129" name="perl-Data-Tumbler" arch="noarch">
  <version epoch="0" ver="0.010" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-25" date="1674216000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="8371a7de459824154d25fcb01ca5f06384d0bab5fe9cbbb24a2074f5f4e9fbcd" name="perl-Data-UUID" arch="x86_64">
  <version epoch="0" ver="1.227" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-9" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-12" date="1689163200">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-14" date="1693742400">- Update license to SPDX format</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.227-1" date="1710849600">- Update to 1.227
  - New maintainer, GTERMARS
  - Add basic GitHub Actions setup for testing
  - Typo corrections in POD
  - Eliminated use of state/node files in temp directory (CVE-2013-4184)</changelog>
</package>
<package pkgid="24e32e0fad5a91febc6e21eae287d2216376b182429d2a54fcf89ae4a0dc03c7" name="perl-Data-Visitor" arch="noarch">
  <version epoch="0" ver="0.32" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-8" date="1679486400">- Use SPDX-format license tag
- Use %license unconditionally
- Use Data::Alias unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.32-1" date="1682769600">- Update to 0.32
  - Removed an unnecessary use of Sub::Name (GH#1)</changelog>
</package>
<package pkgid="ed7bf24b271b3184e921835661590064f4e448903178a8108b3cb0c962541959" name="perl-Date-Range" arch="noarch">
  <version epoch="0" ver="1.41" rel="6.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1" date="1624881600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-2" date="1628251200">- Make Date::Simple a run-time dependency, not just a test dependency (#1977229)
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-6" date="1679918400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5951e945eb100b8e2fff188046b4b341e6b64736f7d65ef72d9d807518879427" name="perl-DateTime" arch="x86_64">
  <version epoch="2" ver="1.66" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.59-4.0.cf" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.63-1.0.cf" date="1698062400">- Update to 1.63
  - Switched to using the 'Perl_isfinite' function instead of trying to
    implement this ourselves in XS code; this should fix quadmath builds on
    Windows (GH#139)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-1.0.cf" date="1699272000">- Update to 1.65 (rhbz#2248104)
  - Fix builds on macOS with Perls before 5.22.0; this seems to have the same
    issue as Windows on older Perls (GH#141)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-5.0.cf" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.66-1.0.cf" date="1739966400">- Update to 1.66 (rhbz#2346459)
  - Require Specio 0.50
    - That release has a bug fix for validation of integer values
    - Without the fix, DateTime could accept non-integer values for things like
      nanoseconds (GH#145)
- Drop EL-7 support
  - Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="5aec3545195ac467ebc0f01b5dba3cf502311f8f7c30ce994fd656c403694156" name="perl-DateTime-Calendar-Mayan" arch="noarch">
  <version epoch="0" ver="0.0601" rel="41.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-41" date="1679918400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="334ae3b356e363bb010a5c9d55d7b30751192030ea289b8bc88ebcfaa92bd332" name="perl-DateTime-Format-Builder" arch="noarch">
  <version epoch="1" ver="0.83" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.83-8" date="1673784000">- Use SPDX-format license tag
- Assume we are building with rpm ≥ 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="ece53c266b2fc82dc43ebb317d0a84d25da0689b5f0f5e762ef86ddd7c330d3b" name="perl-DateTime-Format-MySQL" arch="noarch">
  <version epoch="0" ver="0.08" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07.01-7" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1690891200">- Update to 0.08
  - Fix parsing microsecond &lt; 100,000 off DateTime object by zero-padding</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-2" date="1691150400">- Do not use rpmversion macro, which is a new builtin since rpm-4.18.92</changelog>
</package>
<package pkgid="d6de2d2e07ee02c395f0bca2ba432796e8fa5d6ab40d313651c11e60b46c6c74" name="perl-DateTime-Format-Strptime" arch="noarch">
  <version epoch="1" ver="1.80" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.80-1" date="1765195200">- Update to 1.80 (rhbz#2419653)
  - Fix the parse_datetime docs to state that it returns either an empty list
    of undef when it cannot parse the given string, depending on the context;
    previously, the docs said it always returned undef, which is not true
    (GH#33)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="f5360257cb7feacf9f1e9e5823b638005dd27ca76bb1e7f32ba5727f599b22c0" name="perl-DateTime-Locale" arch="noarch">
  <version epoch="0" ver="1.45" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.38-1.0.cf" date="1681646400">- Update to 1.38
  - Rebuilt all locale data with the data from CLDR 43.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1.0.cf" date="1685361600">- Update to 1.39
  - Fixed parsing of the 'el-polyton' locale code: this had the same issue as
    'be-tarask', which was fixed in 1.36; this is now fixed in such a way that
    similar language+variant codes will be parsed correctly in the future
    (GH#37)
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.40-1.0.cf" date="1699358400">- Update to 1.40
  - Rebuilt all locale data with the data from CLDR 44.0.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1.0.cf" date="1712404800">- Update to 1.41
  - Rebuilt all locale data with the data from CLDR 44.1.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0.cf" date="1713528000">- Update to 1.42
  - Rebuilt all locale data with the data from CLDR 45.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0.cf" date="1722168000">- Update to 1.43
  - Fixed the prefers_24_hour_time method, which was incorrectly returning
    false when the locale's time_format_short method contained a quote string
    with "h" or "K" in it, e.g. the fr-CA locale's time_format_short is
    "HH 'h' mm": the quoted 'h' caused this method to return false (GH#39)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0.cf" date="1730203200">- Update to 1.44
  - Rebuilt all locale data with the data from CLDR 46.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1.0.cf" date="1743508800">- Update to 1.45
  - Rebuilt all locale data with the data from CLDR 47.0.0
- Use %{make_build} and %{make_install}
- Drop support for building with List::Util &lt; 1.45</changelog>
</package>
<package pkgid="e1639906a9a06595b7731a5cf60990ef67e8eb5c3a7c6f4b22375e86465f772d" name="perl-DateTime-TimeZone" arch="noarch">
  <version epoch="0" ver="2.68" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.63-1.0.cf" date="1725796800">- Update to 2.63
  - This release is based on version 2024b of the Olson database
  - This release does not include any changes to current or future zones, only
    historical changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.64-1.0.cf" date="1737115200">- Update to 2.64
  - This release is based on version 2025a of the Olson database
  - Contemporary changes for Paraguay</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.65-1.0.cf" date="1742990400">- Update to 2.65
  - This release is based on version 2025b of the Olson database
  - Contemporary changes for Chile</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.66-1.0.cf" date="1765454400">- Update to 2.66
  - This release is based on version 2025c of the Olson database
  - Only historical changes
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.67-1.0.cf" date="1772798400">- Update to 2.67
  - This release is based on version 2026a of the Olson database
  - Contemporary changes for Moldova</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.68-1.0.cf" date="1777291200">- Update to 2.68
  - This release is based on version 2026b of the Olson database
  - Contemporary changes for British Columbia, CA
- Temporarily disable POD spelling test due to dictionary issues in Rawhide</changelog>
</package>
<package pkgid="5e3b690003da9f6b16ab0958390a0f1894a10aca59c43302de55fb706af0bad2" name="perl-Declare-Constraints-Simple" arch="noarch">
  <version epoch="0" ver="0.03" rel="51.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-51" date="1679486400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="fd4ba06513e882b57b17f5d2e9e2785842f472dcfa52b386ed20f4ea3ef34986" name="perl-Devel-CallChecker" arch="x86_64">
  <version epoch="0" ver="0.009" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-13" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-16" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1681214400">- Update to 0.009
  - Port to Perl 5.33.1, which defines a PERL_VERSION_GE() macro that clashes
    with the one this module previously had
  - Skip thread tests on some old versions of Perl (around 5.10.0) where a
    core bug makes thread creation violate an internal assertion and causes
    crashes
  - Skip thread tests on pre-5.8.9 Perls where a core bug makes thread creation
    corrupt memory
  - Skip thread tests on pre-5.8.3 Perls where a core bug makes thread
    completion break the global PL_sv_placeholder
  - Put whitespace around C string literals being pasted, for C++11
    compatibility
  - Avoid using C preprocessor directives inside a macro argument list (which
    is not valid)
  - In XS code in the test suite, when croaking, avoid using __FILE__ as part
    of a format string, in case it includes a metacharacter
  - Document the intended scope of this module's backporting effort
  - Fix a documentation wording glitch
  - In XS declare as const some data that never changes
  - Refactor thread tests
  - In XS, refactor Perl version comparisons
  - In XS, rename some macros for better style
  - In XS, better argument parenthesisation in some macros
  - Avoid some compiler warnings
  - In .gitignore, list temporary files produced by test XS compilation
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="69c52e335c3716d6beca162a6f5636da2317a5a2ef197f9c0888c35bce70454c" name="perl-Devel-Caller" arch="x86_64">
  <version epoch="0" ver="2.07" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.06-24" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.06-28" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.06-30" date="1680004800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.07-1" date="1681214400">- Update to 2.07 (rhbz#2185832)
  - Fix compatibility with bleadperl (CPAN RT#144051)
  - Small Pod and Distribution clean-ups (GH#1)</changelog>
</package>
<package pkgid="20abd8bc4a25af2748e1b604adcaf60ddffd442fe173e15de44b484c7d2fbc9a" name="perl-Devel-CheckBin" arch="noarch">
  <version epoch="0" ver="0.04" rel="23.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-23" date="1680004800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="227e505897d7187e3f7fd855e6c9a939a66ffd71e5855e170bba1c88dd3aa177" name="perl-Devel-CheckCompiler" arch="noarch">
  <version epoch="0" ver="0.07" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-21" date="1680004800">- Use SPDX-format license tag
- Fix permissions of installed files
- Use %license unconditionally</changelog>
</package>
<package pkgid="2421c801483d265d4793bc06fa213a7fc86ea78db816141e37e2c70b79b7fa2a" name="perl-Devel-Cycle" arch="noarch">
  <version epoch="0" ver="1.12" rel="26.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-26" date="1680004800">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="c8e5b0cf5fb4d326a948bbd9abe75e4dea2c6c0820431e207f7e79e54805fb0c" name="perl-Devel-EnforceEncapsulation" arch="noarch">
  <version epoch="0" ver="0.51" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-27" date="1680264000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1283b0fa15d76e5a90b2bb1d960fa133e4528e8f1ef2a2b277768f0a0a7bc577" name="perl-Devel-GlobalDestruction" arch="noarch">
  <version epoch="0" ver="0.14" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-21" date="1680264000">- Use SPDX-format license tag
- Drop support for old Perl versions needing XS helper</changelog>
</package>
<package pkgid="8761dbdad721402f5e2e41710259e4c67cb90997582029047d578d7110e5463b" name="perl-Devel-GlobalDestruction-XS" arch="x86_64">
  <version epoch="0" ver="0.03" rel="22.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-13" date="1593000000">- Perl 5.32 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-15" date="1593172800">- Specify all dependencies</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-19" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-20" date="1625486400">- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-22" date="1653998400">- Perl 5.36 rebuild</changelog>
</package>
<package pkgid="9a41b45e9d18b45a4ebe78c0572cc8a04f55e04b44158b7ca039babec2b1497e" name="perl-Devel-Hide" arch="noarch">
  <version epoch="0" ver="0.0016" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0016-1" date="1767441600">- Update to 0.0016
  - Drop support for perl 5.6 (deprecated since 0.0012)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="c52ee5681f2876281b3730f837c4efbdc543702953e8d0b9fe85ec629e9690a1" name="perl-Devel-Leak" arch="x86_64">
  <version epoch="0" ver="0.03" rel="51.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-46" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-49" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-51" date="1680609600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="096d1d7fab069e0fa1b6aff8b44389158d15fb2a433f2e8c7c35859e213b5c6e" name="perl-Devel-LexAlias" arch="x86_64">
  <version epoch="0" ver="0.05" rel="32.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-26" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-27" date="1639310400">- Fix dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-29" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-32" date="1678708800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2c236063113a2f183f609dc51be2f15d18e2baf8bae1da2980429a3496104345" name="perl-Devel-OverloadInfo" arch="noarch">
  <version epoch="0" ver="0.008" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-1" date="1755000000">- Update to 0.008
  - Generate README.md in the repository
  - Move git repository to Codeberg
- Assume Sub::Util is always available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="4fd816a82071f3d0394fc1c22a948cdf67ebf4806519fd1ede2aa23fcf363635" name="perl-Devel-PartialDump" arch="noarch">
  <version epoch="0" ver="0.20" rel="18.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-18" date="1680609600">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="04133793883505a152608d9bc4accbc3bdeb77416a2012c9598cd121bd8e9a5c" name="perl-Devel-StackTrace" arch="noarch">
  <version epoch="1" ver="2.05" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.04-15" date="1689163200">- Use SPDX-format license tag
- Fix permissions verbosely
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.05-1" date="1704715200">- Update to 2.05
  - Added explicit boolean overloading for trace objects
    - Without this, Perl will use the object's string overloading and then
      check the truthiness of the returned string, which is a lot of extra work,
      which can produce significant slowdowns in some cases, as seen in
      https://github.com/plack/Plack/pull/697 (GH#23)</changelog>
</package>
<package pkgid="ebf3ece877c592d6b307a90096e6dda3b9d53ee7010a647b64500e015a452004" name="perl-Devel-Symdump" arch="noarch">
  <version epoch="1" ver="2.18" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.18-25" date="1689163200">- Use SPDX-format license tag
- Drop support for building with Test::Harness &lt; 3.04</changelog>
</package>
<package pkgid="1e8e14063dd3472ac0f9c22fcb45bd9f713b47e2b16ac2a0637312e9731d6508" name="perl-Digest-BubbleBabble" arch="noarch">
  <version epoch="0" ver="0.02" rel="36.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-36" date="1680696000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="50e825f538930a7879e536c0334cc0b6ccc3e048abbf75ff0fb6f66513cd8995" name="perl-Digest-MD4" arch="x86_64">
  <version epoch="0" ver="1.9" rel="41.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-34" date="1680696000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-35" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-39" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-41" date="1724155200">- Drop redundant build requirements libdb-devel and gdbm-devel</changelog>
</package>
<package pkgid="a1a4ce5c9c9c0585c1a3c17e57d86df4945d75e3bfc9d2524d3e3b8231427fb9" name="perl-Digest-SHA" arch="x86_64">
  <version epoch="1" ver="6.04" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.02-477" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.02-488" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.03-1" date="1660046400">- Update to 6.03
  - Corrected addfile to report error when stdin is a directory
    (CPAN RT#143899)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.04-1" date="1677412800">- Update to 6.04
  - Modified SHA_INIT/sharewind to silence warnings from gcc 12
    (CPAN RT#146585)
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e1edba97dd4e5d197ec2217cd533b414563ce13148c4c7223ff8936dc17733b9" name="perl-Dir-Self" arch="noarch">
  <version epoch="0" ver="0.11" rel="24.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-24" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="cadc6f73e56f579a28d539eed8f3222ebf5419495b17a6b65ceb4f9f67ab309d" name="perl-Dist-CheckConflicts" arch="noarch">
  <version epoch="0" ver="0.11" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-27" date="1680696000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="bf6792c21130971d52c9fef456cf4416da4b8a96694fea2139741d644a7be706" name="perl-DynaLoader-Functions" arch="noarch">
  <version epoch="0" ver="0.004" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-1" date="1680868800">- Update to 0.004
  - Port test C code to Perl 5.33.1, which defines a PERL_VERSION_GE() macro
    that clashes with the one this code previously had
  - In test C code, avoid a compiler warning that arises on Perl 5.20
  - In test C code, rename some macros for better style
  - In test C code, better argument parenthesisation in a macro
- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="a7c7c9fa4f4192e0202e36038ff0f706d59dfee4c0cd24af45641d2debe6b9bf" name="perl-EV" arch="x86_64">
  <version epoch="0" ver="4.37" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.34-4" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.34-7" date="1746619200">- Fix FTBFS with ExtUtils::ParseXS ≥ 3.57 (rhbz#2364628)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.36-1" date="1766750400">- Update to 4.36
  - Work around changes in xsubpp for Perl 5.42
- Add patch to remove unescaped quotes from typemap file (rhbz#2364628)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.37-1" date="1769083200">- Update to 4.37
  - Work around issues with different versions of ExtUtils::ParseXS</changelog>
</package>
<package pkgid="ea995ed8b98c3108a65c8b12ef6cda084c5656be6de2fe96695013da70b29295" name="perl-Email-Address" arch="noarch">
  <version epoch="0" ver="1.913" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.913-1" date="1673352000">- Update to 1.913 (rhbz#2159569)
  - This version now requires Perl v5.12
  - Some small tweaks made to the code to take advantage of v5.12
  - Update distribution metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.913-2" date="1689508800">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="091a0a3dc15c9267e39adce1c2d7fae8da6f1b2d06177c8aae24842a85483dc2" name="perl-Env-Sanctify" arch="noarch">
  <version epoch="0" ver="1.12" rel="28.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-28" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="a2c8c9be424e35c309eabcff65c6aaf0d3e39b19702cf2adfbaa06cab537cf0b" name="perl-Error" arch="noarch">
  <version epoch="1" ver="0.17030" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.17029-12" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.17030-1" date="1739880000">- Update to 0.17030 (rhbz#2346218)
  - Fix die/warn hooks for perl 5.41.9 changes (GH#4)</changelog>
</package>
<package pkgid="a83d419be789d6f7e9bfd728f70a41ea776ef8d196fea79ed84c2030387a5894" name="perl-Eval-Closure" arch="noarch">
  <version epoch="0" ver="0.14" rel="20.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-20" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="85a84304255bdec54b7eaf56c06645fb5c48a87d97e9efdb2409a9afd7d7f4e4" name="perl-Event" arch="x86_64">
  <version epoch="0" ver="1.28" rel="7.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1619784000">- Update to 1.28
  - Remove C-only restriction on -&gt;Inline method (GH#5)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-2" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-5" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-7" date="1680868800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="55bd1e84dd9031afa5e7e5c4740e01aedd657762b1bb5549b3d84a81d8037a3f" name="perl-Exception-Base" arch="noarch">
  <version epoch="1" ver="0.25.01" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-13" date="1680868800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-24" date="1689508800">- Fix FTBFS with Perl 5.38 (rhbz#2222742)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-25" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="a47446911ad41e26c219de9bd568dc22048a97603329d2289c9ed2ebd7b5ea0d" name="perl-Exception-Class" arch="noarch">
  <version epoch="0" ver="1.45" rel="7.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1" date="1620043200">- Update to 1.45
  - The field names for an exception are now checked to ensure that they are
    valid Perl identifiers (GH#13)
- Package new CODE_OF_CONDUCT.md file
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-7" date="1680955200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="68151378237ef3143583589f44b5bda270aa72617785ab57b2ac4dfb444b90a4" name="perl-Expect" arch="noarch">
  <version epoch="0" ver="1.38" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.35-20" date="1680955200">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-1" date="1708776000">- Update to 1.36
  - Made timeouts optional and added qr// regex support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1709899200">- Update to 1.37
  - Fix to timeout code</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.38-1" date="1710244800">- Update to 1.38
  - Fix to fix to timeout code</changelog>
</package>
<package pkgid="0bd3eded6fafe6dd8a66ffd79881a98d92263520df45e5077b55943772e5b166" name="perl-Exporter-Declare" arch="noarch">
  <version epoch="0" ver="0.114" rel="22.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.114-22" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="25ac020daa396c6fafb0ef70a077d3b9936e63f45ca908172582079ec398a4fb" name="perl-Exporter-Tiny" arch="noarch">
  <version epoch="0" ver="1.006003" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006002-8" date="1747656000">- Drop support for EOL distributions prior to F-28, EL-8:
  - Weak dependencies always available
  - Use %{make_build} and %{make_install}
- Don't pull in Lexical::Var on distributions with Perl 5.37.2 or later</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006003-1" date="1765195200">- Update to 1.006003
  Bug Fixes:
  - Support Perl versions &gt;= 10, in theory
  Documentation:
  - Restore documentation about exporting to hashes, which was accidentally
    removed
  - Update copyright dates</changelog>
</package>
<package pkgid="18a6514ed9fdd0d0bc869a2a5f5a4b43ccb1b219fa218b046ceb5049f9305880" name="perl-ExtUtils-BuildRC" arch="noarch">
  <version epoch="0" ver="0.005" rel="6.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-6" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="052ec93d3e448c7c71500fce55ff63cc617d3acc41f037d81c95ca5f8948078a" name="perl-ExtUtils-CBuilder" arch="noarch">
  <version epoch="1" ver="0.280238" rel="499.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.280238-499" date="1689508800">- Upgrade to 0.280238 as provided in perl-5.37.11
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="ba09adca9bc3be51b9d2216ef9c6f37e59a6e04cab47d1be32822f712e39e466" name="perl-ExtUtils-Config" arch="noarch">
  <version epoch="0" ver="0.010" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-28" date="1680955200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1714132800">- Update to 0.009
  - Add a but method
  - Add ExtUtils::Config::MakeMaker
- Release tests moved to xt/, stop running them</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-1" date="1723896000">- Update to 0.010
  - Fix regression in serialize method</changelog>
</package>
<package pkgid="acd3cba289a15fb6a54d5ef9e40aeed4d1a7656b53de0d5d6b4953251fab93b0" name="perl-ExtUtils-Depends" arch="noarch">
  <version epoch="0" ver="0.8002" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8001-7" date="1680955200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8002-1" date="1742385600">- Update to 0.8002 (rhbz#2353300)
  - Fix UNC path bug (CPAN RT#102436)
  - Fix get_makefile_vars losing path components if space-quoted and more than
    one dependency, which was breaking CPAN module "true" - dependent on two
    modules
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="8502cac39c9842147cd7131e159f4df62d5bd1cd9f53311b517f2126267170d8" name="perl-ExtUtils-HasCompiler" arch="noarch">
  <version epoch="0" ver="0.025" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-1" date="1714392000">- Import from Fedora</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.025-1" date="1715083200">- Update to 0.025
  - Skip static test on dynamic perls
- BR: gcc and perl-devel for tests</changelog>
</package>
<package pkgid="8ad548d5e6729609f7e3f15e52208f0196df8f2e1bef6490b447f61cc6436e69" name="perl-ExtUtils-Helpers" arch="noarch">
  <version epoch="0" ver="0.028" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.026-22" date="1681128000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.027-1" date="1718798400">- Update to 0.027
  - Revert "Make split_like_shell always unixy"</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.028-1" date="1725364800">- Update to 0.028
  - Add ext argument to man1_pagename and man3_pagename</changelog>
</package>
<package pkgid="955b97b7077fa2307e6842cd138baa761043d784beb0689b6df4979e7037552c" name="perl-ExtUtils-InstallPaths" arch="noarch">
  <version epoch="0" ver="0.015" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-1" date="1714132800">- Update to 0.013
  - Try to install any installable paths</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1725969600">- Update to 0.014
  - Drop 5.006 support
  - Compensate for perls without installsitescript</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1758974400">- Update to 0.015
  - Restore installing non-standard types
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="af66642650a5cbc6f60a34a086647c9955c9d68e9c316d45ca4a879dcc9aee4f" name="perl-ExtUtils-MakeMaker-CPANfile" arch="noarch">
  <version epoch="0" ver="0.09" rel="15.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-15" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="22d42fd91070ccb1b8f7fed9c1861dd273574ab433d7a28e02ccf1f2a09cfe79" name="perl-ExtUtils-ParseXS" arch="noarch">
  <version epoch="1" ver="3.63" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.51-510" date="1718193600">- Add man page perlxs*, which are missing in tarball</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.57-1" date="1746187200">- Update to 3.57
  - Rewrite half of the internals to facilitate refcounted stack later on
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.58-1" date="1753099200">- Update to 3.58
  - ExtUtils::ParseXS has been extensively restructured internally; most of
    these changes shouldn't be visible externally, but might affect XS code
    that was using invalid or unsupported syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.59-1" date="1757073600">- Update to 3.59
  - Throw an exception when combining the length operator with a typemap other
    than T_PV</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.60-1" date="1759060800">- Update to 3.60
  - Fix INTERFACE for C23
  - Support perl package names in INTERFACE
  - Clean up typemap file-finding code and change priority
  - Revert throwing an exception when combining the length operator with a
    typemap other than T_PV</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.61-1" date="1767960000">- Update to 3.61
  - Allow XS files with no XS again
    https://github.com/Perl/perl5/issues/24016</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.63-1" date="1775476800">- Update to 3.63
  - Allow 'length(foo)' to work with any 'foo' type that has 'SvPV_nolen()' or
    similar in its typemap, not just that it maps to T_PV
  - Use static, not STATIC
  - Rewrite perlxs.pod
  - Finish refactoring to use an Abstract Syntax Tree (AST) internally
  - Improve warning and error messages
  - Improve test coverage
  - Reorganise t/</changelog>
</package>
<package pkgid="bab0966f09a83cadc7100dc9a9b082a634fc84e2780dd1b9fe62541fa46d6917" name="perl-ExtUtils-PkgConfig" arch="noarch">
  <version epoch="0" ver="1.16" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-21" date="1681300800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c1c403bb4636dc63dc12b7bebc50d7a57d7073ad0cf15991dc80429cb3720844" name="perl-Fennec" arch="noarch">
  <version epoch="0" ver="2.018" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.018-16" date="1681128000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="65aceae92ea149b8a43b21e41b2b7acc61a2df1b86b2a7a16a1d874c31c701bc" name="perl-Fennec-Lite" arch="noarch">
  <version epoch="0" ver="0.004" rel="29.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-29" date="1689508800">- Use SPDX-format license tag
- Fix permissions verbosely</changelog>
</package>
<package pkgid="cb2713984937f21489ad67f54a8ba01ec0f510214cacb402626d5d8fc3d5acb9" name="perl-File-Copy-Recursive-Reduced" arch="noarch">
  <version epoch="0" ver="0.008" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-17" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.007-1" date="1694865600">- Update to 0.007
  - Corrections in tests to better accommodate Windows path separators</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-1" date="1711368000">- Update to 0.008
  - Encoding directive added to POD
  - Corrections in test files to guard against CPANtesters who run tests with
    PERL_AUTHOR_TESTING turned on</changelog>
</package>
<package pkgid="c93991b2bca47ca9fa8ee483e88c25d390f49f50604d1f521c2925834b301d2b" name="perl-File-Find-Object" arch="noarch">
  <version epoch="0" ver="0.3.9" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.7-1" date="1672660800">- Update to 0.3.7
  - Fix test failures on Windows (GH#2)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.7-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.8-1" date="1690027200">- Update to 0.3.8
  - Fix use_ok() call (GH#3)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.9-1" date="1733918400">- Update to 0.3.9 (rhbz#2331637)
  - Avoid implicit symbol imports
    https://perl-begin.org/tutorials/bad-elements/#non_explicitly_imported_symbols
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
</package>
<package pkgid="04b0b4c346856bf82c9059c7d1667c10df82cad40e8b96439b9a6cc4e735b22d" name="perl-File-Find-Object-Rule" arch="noarch">
  <version epoch="0" ver="0.0313" rel="5.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0313-1" date="1630065600">- Update to 0.0313
  - Split File::TreeCreate off to its own distribution
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0313-5" date="1681300800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="3639781020613e679e5ef078caf59512e23b850b723b727240b18ed1749100f9" name="perl-File-Find-Rule" arch="noarch">
  <version epoch="0" ver="0.35" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.34-25" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.35-1" date="1749211200">- Update to 0.35
  - Use 3-argument version of open() to avoid arbitrary code execution
    vulnerability (GH#4, CVE-2011-10007)
- Use %{make_build} and $${make_install}</changelog>
</package>
<package pkgid="06e5b1bddc2f3c425284ed796b24be9f5049d2b9ad85f193eab1dc37df254b6c" name="perl-File-Find-Rule-Perl" arch="noarch">
  <version epoch="0" ver="1.16" rel="5.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-1" date="1648641600">- Update to 1.16
  - Fix test when run after 'make clean' (CPAN RT#142008)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-5" date="1689336000">- use SPDX-format license tag</changelog>
</package>
<package pkgid="60b3f96f8c73826ce60a218d5d86ea69b772ea3521c589985b0344ab26911657" name="perl-File-Find-Rule-VCS" arch="noarch">
  <version epoch="0" ver="1.09" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-1" date="1682769600">- Update to 1.09
  - Tooling updates
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="9809dabd3cab66a696b63de56d3f56f5a2f7e8303c48d549a10c716f7a9b4b12" name="perl-File-HomeDir" arch="noarch">
  <version epoch="0" ver="1.006" rel="9.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006-9" date="1685620800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="284a258f9d09ab765fc3eba7744f7191ab14628d0e31926a66ca1c8c3487d793" name="perl-File-MMagic" arch="noarch">
  <version epoch="0" ver="1.30" rel="30.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-25" date="1624276800">- Correct license to App-s2p and ASL 1.0 and BSD
- Package README.ja
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-30" date="1678795200">- Use SPDX-compatible license tag</changelog>
</package>
<package pkgid="92db157851bff18f7ee10aa955c85d5fec1f091490c3971ef72b4aaadd974ef9" name="perl-File-Remove" arch="noarch">
  <version epoch="0" ver="1.61" rel="4.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1655208000">- Update to 1.61
  - Symlinks were broken in Windows/msys
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-4" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="561f06993dc334dff2cf28396e07bab535940ef63e2e21590bd3d4343f0df1eb" name="perl-File-ShareDir" arch="noarch">
  <version epoch="0" ver="1.118" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.118-8" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="c4715129906aebfedb4ce09de83377579905719e6f0485bce327a29343bd2e7e" name="perl-File-ShareDir-Install" arch="noarch">
  <version epoch="0" ver="0.14" rel="3.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-1" date="1656676800">- Update to 0.14
  - Work around a build issue on Windows (CPAN RT#125571)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-3" date="1681473600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="d6a2d0decdb440727032897def6037797fab6885ea04af27f54a5e8e5123c8cf" name="perl-File-ShareDir-ProjectDistDir" arch="noarch">
  <version epoch="0" ver="1.000009" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000009-19" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="cc8150704ddc6487830c9135362c50346c53ac0a0c6688a2d5864a079dcdfe25" name="perl-File-Slurp" arch="noarch">
  <version epoch="0" ver="9999.32" rel="10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 9999.32-10" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2581aeed8292c745c8f42c8b25b7f0577e35799b30b0e86e4ce0a5609debc6dd" name="perl-File-Slurp-Tiny" arch="noarch">
  <version epoch="0" ver="0.004" rel="23.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-23" date="1681992000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="cdae9bf57b04f25c387d973b9a2fcf1eb32375a3bf54721c1ec2e575cbc207ba" name="perl-File-Slurper" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-1" date="1640779200">- Update to 0.013
  - Always split on newlines in read_lines</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1671364800">- Update to 0.014
  - Always return an empty file as an empty string
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="eb0c07afaf056605851310dcc31d51821b786db4ff805f212e3dbb7900d63629" name="perl-File-TreeCreate" arch="noarch">
  <version epoch="0" ver="0.0.1" rel="6.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0.1-1" date="1630065600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0.1-6" date="1681992000">- SPDX migration</changelog>
</package>
<package pkgid="50c8336b0effd7cd31900af907ef238bf55f06efdf453cc2f0cf2c5363cb864d" name="perl-File-Which" arch="noarch">
  <version epoch="0" ver="1.27" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-8" date="1686312000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="815a8bce979049307f8aeb1350c209ced2f7a7f09511b90bf0418685dabf7182" name="perl-File-chdir" arch="noarch">
  <version epoch="0" ver="0.1011" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1011-21" date="1681819200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="f9fffc8b56f24ede2ff628cdcd94fbfceb9ffd3c8900d540853f0d5217ea2539" name="perl-File-pushd" arch="noarch">
  <version epoch="0" ver="1.016" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.016-17" date="1681819200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3cdb1134fca571f1f184156392c3ea18e6bc919b364b77e7d27847937b02dee4" name="perl-FileHandle-Fmode" arch="x86_64">
  <version epoch="0" ver="0.15" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-23" date="1678708800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-24" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-28" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-1" date="1718798400">- Update to 0.15
  - Documentation improvements
  - Avoid win32_fmode() when perl is built by UCRT compiler, as UCRT changes
    struct _iobuf (affects MSWin32 only)
- Remove bogus exec permissions on source files</changelog>
</package>
<package pkgid="35f04e5694f1d998fa94db5267ea5e6c4a3cc48dd75551178d1b72ac7eee0329" name="perl-FileHandle-Unget" arch="noarch">
  <version epoch="0" ver="0.1634" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1634-16" date="1682078400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="05a0f494ab5386c3ab7221ce0be9d4bdf65a34c6deb01775ce6bdd007efc8444" name="perl-Filter" arch="x86_64">
  <version epoch="2" ver="1.65" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.64-511" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.64-519" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-1" date="1757332800">- Update to 1.65
  - Documentation updates</changelog>
</package>
<package pkgid="574eaeea4f848a3ff1e99c3065c2856f89e0b966396568ca7b58045d22726efb" name="perl-Filter-Simple" arch="noarch">
  <version epoch="0" ver="0.94" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.94-2" date="1689595200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="fde2a90afe31417892438a87bfaf82887d8985ac03b48e97533c777f6330c1ff" name="perl-FreezeThaw" arch="noarch">
  <version epoch="0" ver="0.5001" rel="41.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5001-41" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="d4c1fadc461c3cd6c93544c0ee3ce2ce8003754d5e5a9ab531817ca2e37855d9" name="perl-Function-Parameters" arch="x86_64">
  <version epoch="0" ver="2.2.6" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.4-5" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.4-6" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.5-1" date="1737288000">- Update to 2.002005 (rhbz#2338807)
  - When debugging (perl -d), skip over invisible (generated) parameter
    initialization
    code even if single-step mode is active
  - Move repository and bugtracker to https://codeberg.org/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.5-2" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.6-1" date="1755432000">- Update to 2.002006 (rhbz#2388952)
  - Fix a parse-time memory leak with undef or default initializers
    ('fun ($x = undef)' or 'fun ($ =)'); this leak mostly manifests as noise
    from memory checkers because non-leaked ops aren't freed anyway while perl
    is still running
  - Update bugtracker info in README</changelog>
</package>
<package pkgid="174d07a4664b1c9b6186c5d0b1a66bc6cfd8b24c02f7ed7a5cdf9e88a8936700" name="perl-Guard" arch="x86_64">
  <version epoch="0" ver="1.023" rel="26.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-21" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-24" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-26" date="1682078400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3b74b4cbc19cc8c9470b1b0d5850cd3800aab07694a671fcdb56aa419f4fbbef" name="perl-HTML-Lint" arch="noarch">
  <version epoch="0" ver="2.32" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-10" date="1627128000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-11" date="1643198400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-12" date="1654603200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-13" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-14" date="1669809600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-15" date="1674475200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-16" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="a5e8cb3814374d11fd799a34fefd9a53adb60abaeed34f174c54d1db04497414" name="perl-HTML-SimpleLinkExtor" arch="noarch">
  <version epoch="0" ver="1.273" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.273-2" date="1689595200">- Use SPDX-format license tag
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64
- Use %license unconditionally</changelog>
</package>
<package pkgid="77e7066491f61b3016da6285fb9828d6221f481e742544e902993bce9dc089f0" name="perl-HTTP-SimpleLinkChecker" arch="noarch">
  <version epoch="0" ver="1.16.8" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16.8-2" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="afca1344bef622ac414034121dc75b5cd4084a83436d195637ac2645c04bae41" name="perl-HTTP-Size" arch="noarch">
  <version epoch="0" ver="1.153" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.153-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5766d3c1df5f6ca9f0adf7747c7ba5be3d824252b7466dd1bd2cc1a72d03d2b3" name="perl-HTTP-Tiny" arch="noarch">
  <version epoch="0" ver="0.092" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.090-1" date="1731499200">- Update to 0.090
  - Find the certificate bundle via IO::Socket::SSL rather than implementing
    it in HTTP::Tiny
  - When encoding form data, given a hashref with an arrayref value, preserve
    the order of the values in the arrayref rather than sorting
  - Fix internal link to "TLS/SSL SUPPORT" section in POD
- Enable AUTOMATED_TESTING</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.092-1" date="1767009600">- Update to 0.092
  - Added keep_alive_timeout to force keepalive connections to be closed based
    on a timeout
  - Optional tests are always required when releasing
  - Always use TCP_NODELAY option
  - Fixed test incorrectly testing cookie jar interactions multiple times
  - Fixed perl version comparisons to work when not starting with 5
  - Fixed link to LIMITATIONS in documentation
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="92a1c012216fef408cca886f59791aff6bba0991cba260d8a5155f9273287e8d" name="perl-Hash-FieldHash" arch="x86_64">
  <version epoch="0" ver="0.15" rel="23.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-17" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-20" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-23" date="1682078400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="458755764ae23c59903cdbbf13ffd8b1edc5c2c48cb0164a0cfae71492d4bb73" name="perl-Hash-StoredIterator" arch="x86_64">
  <version epoch="0" ver="0.008" rel="22.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-17" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-20" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-22" date="1682251200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="712217da1ff87ef42a11bae35eddd3c1c334bb062efdf85a38e0f2b5bff40f6e" name="perl-Hash-Util-FieldHash-Compat" arch="noarch">
  <version epoch="0" ver="0.11" rel="22.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-22" date="1682251200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3ea20ca98ddb3f4bb6344d6ed4d967eeeacc489bdb49374b33a0a9d74e6f51c2" name="perl-Hook-LexWrap" arch="noarch">
  <version epoch="0" ver="0.26" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-19" date="1682251200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="2afc74a5c03aa4883ee9f5bf544ba328922d2808b6654469c15695c638c1f526" name="perl-IO-AIO" arch="x86_64">
  <version epoch="0" ver="4.81" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.78-1" date="1662465600">- Update to 4.78
  - Add IO::AIO::mount and IO::AIO::umount
  - Add a bunch of symbols from sys/mount.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-1" date="1664193600">- Update to 4.79
  - The autoconf result of the mount check was not used, so it failed to
    compile on most systems
  - Fix format string usage for croak in extract_stringvec function</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-2" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-1" date="1680436800">- Update to 4.8
  - Remove long-obsolete "paths must be absolute" text in aio_open/stat
    descriptions
  - Another workaround for the low-quality musl libc
  - Test for umount separately, as it is more portable
  - Some low-quality posix attempts (openbsd, osx) declare the availability of
    fexecve() but then don't even bother to implement a stub
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-4" date="1702468800">- Fix use of incompatible pointer type in configure test for fexecve()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-6" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-1" date="1708516800">- Update to 4.81
  - Work around a bug in musl w.r.t. to O_SEARCH and use EIO_O_PATH instead,
    verifying the semantics against the subset of O_PATH and O_SEARCH
  - aio_copy now tries to preallocate the destination file
  - fexecve configure test used the wrong pointer type</changelog>
</package>
<package pkgid="ea3ce82a5e14c6cfed8bfbfbda970c2d774d607df5a4ff4c848663cf6eaa738b" name="perl-IO-Capture" arch="noarch">
  <version epoch="0" ver="0.05" rel="41.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-41" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0f295bb8b4c4c0e2a4761776ad81c0b2cf9a3d59592883e4cf95496a7673ad6d" name="perl-IO-Compress" arch="noarch">
  <version epoch="0" ver="2.219" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.208-1" date="1711972800">- Update to 2.208
  - Update zipdetails to version 4.002
    (see https://github.com/pmqs/zipdetails/blob/v4.002/Changes for details)
  - Test cz-14gzopen.t was failing on AFS filesystem (GH#56)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.211-1" date="1712491200">- Update to 2.211 (no changes, rhbz#2273778)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no changes, rhbz#2277506)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213
  - Add stub module IO/Compress.pm (GH#57)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Various workflow updates
  - IO::Compress::Gzip accidentally modified the `$EXPORT_TAGS{all}-&gt;@*` of
    other modules (GH#64)
  - Fix typos in streamzip (GH#59)
  - Fix documentation for get_Bufsize in Compress::Raw::Zlib
    (https://github.com/pmqs/Compress-Raw-Zlib/issues/34)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435525)
  - Refresh zipdetails from https://github.com/pmqs/zipdetails
  - Delete GZIP environment variable before running interop tests (GH#24)
  - IO::Compress @2.215: t/006zip.t failed due to missing test files (GH#67)
  - Fix version check in 000prereq.t
  - Enhance _dosToUnixTime to handle zero and invalid datetime values; add
    tests for edge cases (GH#65)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1772971200">- Update to 2.218 (rhbz#2445605)
  - Add SECURITY.md (GH#69)
  - Fix POD typo
  - Refresh zipdetails from https://github.com/pmqs/zipdetails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1773057600">- Update to 2.219 (rhbz#2445768)
  - Fix a few typos
  - Squash repeated semicolons
  - Make dependent version checking consistent amd update module to version
    2.219 (GH#70)</changelog>
</package>
<package pkgid="b61480e4a1e93637b386c04c905676ab1df0d50060e23c26d650c1d5cc108c79" name="perl-IO-Compress-Lzma" arch="noarch">
  <version epoch="0" ver="2.217" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.207-1" date="1708516800">- Update to 2.207 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.211-1" date="1712491200">- Update to 2.211 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Various workflow updates
  - Stop accidentally modifying the '$EXPORT_TAGS{all}-&gt;@*' of other modules
    (IO::Compress GH#64)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217
  - Delete XZ environment variable before running interop tests
  - Rework workflow to automatically detect and use all the versions of perl
    available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="ed248c45b55acf2eea467ccaac762b03ac9276942f0e243ed68e683a8fa3287f" name="perl-IO-FDPass" arch="x86_64">
  <version epoch="0" ver="1.3" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-8" date="1682251200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a302d386243872a3cd7948696165204de952ddcee862102ea4bb2d0bc975031a" name="perl-IO-Multiplex" arch="noarch">
  <version epoch="0" ver="1.16" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-25" date="1682337600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="023fba1323150661ec06939481f4530f3ece2172e00374cc263202ba2c15f975" name="perl-IO-Socket-INET6" arch="noarch">
  <version epoch="0" ver="2.73" rel="6.fc37"/>
  <changelog author="Michal Josef &#x160;pa&#x10D;ek &lt;mspacek@redhat.com&gt; - 2.72-23" date="1621339200">- Patch for bad code in test and random test fail (#1207174)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.73-1" date="1639137600">- Update to 2.73
  - Deprecate in favour of IO::Socket::IP
- Fix dist tags for Alma, Rocky and CentOS Stream Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.73-6" date="1681819200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="f811c45c408ea0e0a562199572013ec9cbbea6acf789a4f4beac62df41a8a425" name="perl-IO-Socket-IP" arch="noarch">
  <version epoch="0" ver="0.43" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.41-492" date="1680004800">- Drop build dependency on perl(Socket6); IPv6 supported in perl(Socket)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.42-1" date="1690286400">- Update to 0.42
  - Put error string in `$IO::Socket::errstr` as done by IO::Socket v1.45
  - Updated for Perl v5.14 - use 'package NAME VERSION' syntax
  - Fix typo 'behvior' (CPAN RT#133467)
  - Fix for DragonflyBSD and IPV6_V6ONLY from core perl (CPAN RT#148293)
- Manually add provides for Perl 5.14 package syntax not handled by
  provides generator on old distributions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.43-1" date="1732536000">- Update to 0.43
  - Swapped unit tests from `Test::More` to `Test2::V0`
  - Fixed some documentation typos (CPAN RT#157201)
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
</package>
<package pkgid="c1c1f42d2cd8fa32ac4f6768d8007765d4a8e3e0a64bc756b79b5aa542ebf63b" name="perl-IO-Socket-SSL" arch="noarch">
  <version epoch="0" ver="2.098" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.087-2" date="1720612800">- Pick an upstream fix for runtime warning</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.088-1" date="1721044800">- Update to 2.088 (rhbz#2297795)
  - Minor fixes for use on ancient versions of perl and for building with newer
    versions of openssl</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.089-1" date="1724932800">- Update to 2.089
  - New option SSL_force_fingerprint to enforce fingerprint matching even if
    certificate validation would be successful without
  - Document _get_ssl_object and _get_ctx_object for cases where direct use of
    Net::SSLeay functions is needed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.090-1" date="1748952000">- Update to 2.090
  - Fix OCSP live test after Let's Encrypt has disabled OCSP support (GH#169)
  - public_suffix now preserves trailing dot (GH#167)
- Apply Crypto Policy patches unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.091-1" date="1749729600">- Update to 2.091
  - Fix behaviour on one-sided SSL shutdown; if the application continued to
    read after half-closing the SSL connection, this could result in reading
    encrypted data (i.e. close notify, SSL session tickets...)
  - See documentation of stop_SSL for detailed description of handling
    half-closed SSL connections</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.093-1" date="1750161600">- Update to 2.093
  - Rework for one-sided SSL shutdown, to implement a useful and secure
    behaviour without affecting existing applications</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.094-1" date="1750334400">- Update to 2.094
  - Fix memory leak introduced in 2.092</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.095-1" date="1752235200">- Update to 2.095
  - Regression: make sysread set buffer to empty string again when returning EOF
    (GH#171)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.096-1" date="1767614400">- Update to 2.096
  - Allow stacking TLS layers with SSL_usebio; this also allows LWP (after
    patches) to access https site through TLS-enabled proxy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.098-1" date="1767787200">- Update to 2.098
  - Fix GH#175 with upgrading from plain socket (no object) by using correct
    fdopen mode +&lt; instead of &lt;+
  - Another fix for GH#175 to make sure that an unblessed sockets gets blessed
    in place instead of using new_from_fd; document that it will not retain
    original class with unblessed sockets on error, since this never worked
    anyway (there is no native unbless)</changelog>
</package>
<package pkgid="6781a49df73663b5d90f56257eb8dc25a19f95e6c207e08a84a7f04706821950" name="perl-IO-Socket-Socks" arch="noarch">
  <version epoch="0" ver="0.74" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.74-17" date="1682337600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="1b715b95b75b3f76289bab06b74f5ada3a5cd6defd9f7c282d19d1ab607c2178" name="perl-IO-String" arch="noarch">
  <version epoch="0" ver="1.08" rel="47.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-47" date="1689422400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3edd292f4b4592e16bd1e766965c271f742474bedcbc1919679716ab15f0db81" name="perl-IO-Tty" arch="x86_64">
  <version epoch="0" ver="1.27" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.20-4" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.20-7" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.21-1" date="1774267200">- Update to 1.21
  Bug Fixes:
  - Fix slave fd leak on IO::Pty destruction; the slave pty file descriptor was
    not closed when the IO::Pty object was destroyed, leaking file descriptors
    until process exit (GH#14, GH#39)
  - Fix set_raw() to modify cflag for proper raw mode on BSD/macOS; set_raw()
    was not clearing CSIZE|PARENB or setting CS8 in cflag, causing incomplete
    raw mode on macOS, OpenBSD, and NetBSD (GH#12, GH#40)
  - Modernize function detection to use proper system headers instead of
    fragile K&amp;R-style forward declarations; the old approach conflicted with
    real prototypes on modern compilers (especially FreeBSD/Clang), causing all
    function checks to fail (GH#38, GH#41)
  Improvements:
  - Add BSD CI testing for FreeBSD, OpenBSD, and NetBSD via
    cross-platform-actions; also bumps actions/checkout from v2 to v4 (GH#42)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-1" date="1774440000">- Update to 1.23 (rhbz#2450189)
  Bug Fixes:
  - Fix function detection on Solaris by adding __EXTENSIONS__ to expose BSD
    extensions (like strlcpy) that are hidden when _XOPEN_SOURCE is defined
    (GH#47, GH#48)
  - Fix file descriptor leaks in open_slave() error paths; the master pty fd
    was not closed on several early-return error paths, causing fd leaks when
    falling through multiple pty allocation methods (GH#49)
  - Replace deprecated indirect object syntax (e.g. 'new IO::Pty') with direct
    method calls ('IO::Pty-&gt;new'); Perl 5.36+ disables indirect object calls,
    so this fixes forward compatibility (GH#52)
  Improvements:
  - Add unit tests for ttyname(), slave()/close_slave() lifecycle,
    set_winsize()/get_winsize() round-trips, pack_winsize/unpack_winsize, and
    constant importing (28 new tests) (GH#50)
  - Replace DynaLoader with XSLoader and bump minimum perl version to 5.8.8;
    XSLoader is simpler and has been in core since perl 5.6 (GH#51)
  - Add clone_winsize_from() test coverage (7 new tests) covering basic clone
    between slave ttys, non-tty master fast path, croak on non-tty source, and
    pixel dimension preservation (GH#53)
  Maintenance:
  - Fix stale POD versions, add Perl 5.38/5.40 to CI, and update repository
    URLs from toddr/IO-Tty to cpan-authors/IO-Tty (GH#44)
  - Remove dead Perl 5.003 compatibility code, modernize XS (Nullch to NULL,
    perl_get_sv to get_sv, sprintf to snprintf) (GH#45)
  - Modernize CI with dynamic perl version discovery via
    perl-actions/perl-versions and add a disttest job (GH#46)
  - Regenerate README from POD to fix stale version (GH#52)
  - Modernize 'use vars' to 'our' declarations in Tty.pm and Pty.pm; add
    missing 'use warnings' to Pty.pm (GH#53)
  - Add AI_POLICY.md for transparency on AI-assisted contributions
  - Convert README to Markdown and update MANIFEST</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.24-1" date="1774612800">- Update to 1.24 (rhbz#2452300)
  Bug Fixes:
  - Fix slave pty reopening on Solaris/illumos; after close_slave(), reopening
    with plain Perl open() skipped pushing STREAMS modules (ptem, ldterm,
    ttcompat), causing isatty() to return false - added _open_tty() XS function
    that opens the device and pushes STREAMS modules on platforms that support
    I_PUSH (GH#54, GH#55)
  - Fix undef warnings on Perl 5.8.8 by removing the undef operator on
    localized $SIG{__DIE__}, and fix XS ttyname() on older Perls by avoiding
    the InOutStream typemap, which can return NULL for filehandles created via
    new_from_fd (GH#56, GH#58)
  - Add __BSD_VISIBLE for FreeBSD in function probes; the _XOPEN_SOURCE
    definition hid BSD extensions like strlcpy, causing probe failures and
    subsequent compile errors from conflicting static/non-static declarations
    (GH#57, GH#59)
  Maintenance:
  - Modernize Makefile.PL: replace BUILD_REQUIRES with TEST_REQUIRES
    (EUMM 6.64+), add CONFIGURE_REQUIRES, upgrade META_MERGE to meta-spec v2,
    modernize generated Constant.pm to use 'our' instead of 'use vars', and
    remove dead PPD postamble (GH#60)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-1" date="1775131200">- Update to 1.25 (rhbz#2454158)
  Bug Fixes:
  - Fix IO::Pty DESTROY force-closing the slave pty: the DESTROY method (added
    in 1.21) explicitly closed the cached slave handle, breaking consumers like
    IPC::Run that hold a reference to the slave via $pty-&gt;slave() and expect it
    to survive master destruction; now just deletes the internal reference and
    lets Perl's refcounting handle fd closure correctly (GH#62, GH#64)
  Maintenance:
  - Simplify version variables to a single source of truth: extract version
    from Tty.pm in Makefile.PL using MM-&gt;parse_version() instead of hardcoding
    it, use VERSION_FROM in WriteMakefile, and remove $XS_VERSION from Tty.pm
    (GH#61)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-1" date="1775131201">- Update to 1.26 (rhbz#2454517)
  Bug Fixes:
  - Fix strlcpy detection on DragonFly BSD to avoid static/non-static
    declaration conflict; added __DragonFly__ guard to the function test
    (paralleling __FreeBSD__) and added a belt-and-suspenders check for
    perl's own HAS_STRLCPY in Tty.xs (GH#67)
  Maintenance:
  - Add 5-minute timeout to all CI test steps to prevent hung tests from
    consuming CI resources indefinitely (GH#66)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1775304000">- Update to 1.27 (rhbz#2454942)
  Bug Fixes:
  - Fix build on OpenBSD by including termios.h to detect openpty reliably and
    setting _BSD_SOURCE to find strlcpy in includes (GH#68)</changelog>
</package>
<package pkgid="d695080d855bd23c0092048d98d0ca48ec1578290c13cb210b5380d9bdd053e8" name="perl-IO-Zlib" arch="noarch">
  <version epoch="1" ver="1.15" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.12-1" date="1672401600">- Update to 1.12
  - Use a distinct test file, with pid in it, for each test
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.13-1" date="1673092800">- Update to 1.13 (no changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.14-1" date="1673438400">- Update to 1.14
  - Fix INSTALLDIRS option for newer perls</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.14-499" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.15-1" date="1709294400">- Update to 1.15 (rhbz#2267126)
  - Specify license in module metadata</changelog>
</package>
<package pkgid="787a1fc40ef7fd46ad921579231d731e1094aac956e5de1580b21cae2bed1f28" name="perl-IO-stringy" arch="noarch">
  <version epoch="0" ver="2.113" rel="11.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.113-11" date="1682337600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1b54e177dbb65259756986088d569beb12308e9ad5fff72c60aab85ab24719a2" name="perl-IPC-Cmd" arch="noarch">
  <version epoch="2" ver="1.04" rel="500.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.04-500" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="46cc313ab449bcd3271b1a46f0d0c3dbdcbd6b55274bdd2b7a8457fcd75313e1" name="perl-IPC-Run" arch="noarch">
  <version epoch="0" ver="20260402.0" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250809.0-1" date="1754913600">- Update to 20250809.0 (rhbz#2387443)
  - Reduce delays in detecting child exit (GH#172)
  - Add quickstart section at the top of the docs (GH#174)
  - Retry _read() on EINTR instead of losing pipe contents (GH#177)
  - In test suite, work around bug in NetBSD 10
- Use %{make_build] and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260322.0-1" date="1774267200">- Update to 20260322.0 (rhbz#2450190)
  Bug fixes:
  - Handle EAGAIN in _write() for non-blocking pipe writes (GH#126, GH#221)
  - Prevent fd leak in _do_kid_and_exit when TFD == KFD (GH#149, GH#218)
  - Suppress spurious "Filehandle STDIN reopened" warnings in child when $^W=1
    with pty redirection (GH#131, GH#219)
  - Make binmode the default on Win32 to prevent newline mangling of
    binary data (GH#116, GH#192)
  - Avoid undef warning in _cleanup when fork fails (GH#82, GH#197)
  - Wrap coderef in eval in _do_kid_and_exit to prevent child process from
    escaping into parent code path on die() (GH#97, GH#193)
  - Propagate CODE ref exceptions back to parent via error pipe
    (GH#122, GH#224)
  - Close external input handles in parent after fork to prevent hangs when
    child exits early (GH#57, GH#226)
  - Preserve $cur_kid when a Timer is encountered in harness(), fixing
    "No command before 'init'" errors (GH#134, GH#187)
  - Restore compat for bare undef params in harness() (GH#124, GH#190)
  - Passing undef as stdin/stdout/stderr no longer dies (GH#141, GH#184)
  - Avoid "Modification of a read-only value" when passing undef stdin
    (GH#139, GH#185)
  - Reject empty/undef command name in _search_path (GH#162, GH#182)
  - Limit input buffer chunk size to prevent exponential memory growth when
    streaming data to slow consumers (GH#154, GH#183)
  - Silently ignore undef arguments passed as timeout to harness()
    (GH#128, GH#189)
  - Correct two minor documentation issues in Run.pm (GH#133, GH#188)
  - Skip win32_compile.t when getprotobyname('tcp') is unavailable
    (GH#137, GH#186)
  - Survive SIGPIPE when child exits before consuming all stdin (GH#35, GH#204)
  - Handle EPIPE when child exits before consuming stdin (GH#92, GH#195)
  - Handle tied STDERR without FILENO in _debug_fd (GH#93, GH#194)
  - Invalidate path cache on $PATH change, add clearcache() (GH#82, GH#196)
  - Support scalar ref for '&gt;pipe' and '&lt;pipe' operators (GH#50, GH#201)
  - Use $type in IO::new error message instead of $_ (GH#49, GH#202)
  - Fix &lt;pipe documentation example order and equivalent pipe example
    (GH#66, GH#198)
  - Suppress spurious numeric warning in result() and results() (GH#65, GH#199)
  - Suppress numeric warnings from result() when SIGCHLD is IGNORE
    (GH#29, GH#205)
  - Handle scalar refs in Win32IO pipe operators (GH#213, GH#214)
  - Remove blanket TODO from win32_newlines.t, keep only for still-failing
    tests (GH#215, GH#216)
  - Prevent handle inheritance of caller-owned fds on Win32
    (GH#169, GH#181, GH#211)
  - Enable kill_kill test 1 on Win32 (CPAN RT#11215, GH#207)
  - Suppress filehandle warning during global destruction in tied_stderr.t
    (GH#237, GH#239)
  - Resolve File::Temp cleanup warning on Windows CI (GH#236, GH#238)
  - Suppress Socket::IPPROTO_TCP redefined warning in win32_compile.t
    (GH#230, GH#235)
  - Prevent tied_stderr.t from hanging on Win32 CI (GH#222, GH#225)
  Improvements:
  - Add env option to set child process environment variables without modifying
    parent %ENV (GH#178, GH#179)
  - Add started() method to query harness run state (GH#171, GH#180)
  - Add finished() method to distinguish exit-0 from not-yet-exited
    (GH#169, GH#181)
  - Add pid(), pids(), is_running(), full_path(), full_paths() convenience
    methods (GH#44, GH#203)
  - Add &lt;blocking_pipe operator for blocking writes to child stdin
    (GH#64, GH#200)
  - Add close_stdin() method to prevent unbounded memory growth when streaming
    to long-running children (GH#212)
  Maintenance:
  - Consolidate CI into single testsuite.yml with dynamic Perl version matrix
    (GH#208, GH#209)
  - Add CLAUDE.md with project guidelines for AI-assisted development (GH#220)
  - Add 5-minute timeout to all CI workflow steps
  - Remove TODO from Win32 autoflush test and align with Unix branch
    (GH#228, GH#234)
  - Clean up resolved TODO tests in win32_newlines.t (GH#223, GH#227)
  - Skip t/eintr.t early on Win32 to avoid SIGUSR1 warning (GH#231, GH#233)
  - Suppress File::Temp version-string warnings in test suite (GH#229, GH#232)
- Apply upstream fixes for compatibility with IO::Tty 1.21</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260401.0-1" date="1775131200">- Update to 20260401.0 (rhbz#2454159)
  Bug fixes:
  - Require IO::Pty 1.25, which fixes stale pty slave fd after close_terminal
    in child, replacing defensive workarounds (GH#240, GH#241, GH#266)
  - Close Win32IO socket/pipe handles explicitly in _cleanup to prevent handle
    leaks (GH#237, GH#246)
  - Handle $SIG{PIPE} set to 'DEFAULT' in _select_loop instead of crashing
    (GH#242, GH#244)
  - Handle $SIG{CHLD} set to '' or 'DEFAULT' in _select_loop (GH#262)
  - Fix PTYS typo in adopt() and missing TIMERS init in harness constructor
    (GH#260)
  - Handle PTY allocation failure gracefully in start() instead of dying with
    an unhelpful error (GH#267)
  - Correct Timer.pm POD typos, _parse_time error message, and remove redundant
    parse call (GH#251)
  - Prevent noexec probe from leaking TAP output in search_path_cache.t (GH#247)
  Improvements:
  - Correct broken POD links and code examples in documentation (GH#252)
  Maintenance:
  - Update GitHub URLs from toddr/IPC-Run to cpan-authors/IPC-Run (GH#263)
  - Replace GPL v2 full text with standard "same terms as Perl" license (GH#268)
  - Add AI policy document (GH#248)
  - Use File::Spec-&gt;devnull in autoflush.t for portability (GH#250)
  - Skip search_path_cache.t on noexec temp filesystems (GH#247)
  - Remove dead code from Run.pm (GH#266)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260402.0-1" date="1775217600">- Update to 20260402.0 (rhbz#2454677)
  Bug fixes:
  - Detect undefined command in arrayref at harness parse time instead of
    deferring to start() (GH#164, GH#271, GH#272)
  - pipe_writer dropped input when data is the string "0" due to redundant
    boolean test on input buffer (GH#264)
  - Callback filter evaluates return in list context to distinguish empty
    return from the string "0", preventing infinite loop on Win32 (GH#264)
  - Skip pty output assertions on BSD/Darwin due to known pty drain timing
    issues on short-lived children (GH#240, GH#274)
  - Implement proper Windows command-line parsing per Microsoft C/C++ rules,
    fixing argument parsing failures with single-quoted strings containing
    whitespace (GH#273)
  Maintenance:
  - Add shebang to eg/synopsis_scripting (GH#275)</changelog>
</package>
<package pkgid="525c56d93ffd523b2f6e1d6b9bf1f9e8be345b24adbf086ac2fb1fb604b4abfb" name="perl-IPC-Run3" arch="noarch">
  <version epoch="0" ver="0.049" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.048-28" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.049-1" date="1705838400">- Update to 0.049
  - Avoid some uninitialized warnings in ProfLogReader
  - Improve errno handling on Windows
  - Avoid leaking fds
  - Fix typos in docs</changelog>
</package>
<package pkgid="b3c74def69c416d31c6da84ee6c0e8c939f4e1f86abfccbd550f6d96b8166348" name="perl-IPC-System-Simple" arch="noarch">
  <version epoch="0" ver="1.30" rel="10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-10" date="1682424000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b00580a48f67afdf585fddbf028d99b711e209a31a3311e3599835f084a76dc5" name="perl-Import-Into" arch="noarch">
  <version epoch="0" ver="1.002005" rel="23.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.002005-23" date="1682424000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="56e98f1eea346882a2cc1bb7de32e0bad77aad264d72b215279edbb051c5000d" name="perl-Importer" arch="noarch">
  <version epoch="0" ver="0.026" rel="9.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.026-9" date="1689076800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="138f2d09c74fd37de1f99f1cb4ffa281485721c088dc56eb88687a35539f59d6" name="perl-JSON" arch="noarch">
  <version epoch="0" ver="4.11" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.11-1" date="1774180800">- Update to 4.11
  - Updated backportPP with JSON::PP 4.18
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="03e81b263abef5d2825b908e67f0b62f3c6e56860d3d2d24b98c6ea4ee9dcd66" name="perl-JSON-MaybeXS" arch="noarch">
  <version epoch="0" ver="1.004008" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004004-1" date="1663675200">- Update to 1.004004
  - Slight speed optimization for is_bool()
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004005-1" date="1682856000">- Update to 1.004005
  - to_json and from_json are now documented (GH#2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004007-1" date="1722772800">- Update to 1.004007
  - is_bool() now recognizes core booleans (perl 5.36+); note that JSON::PP
   4.11 and Cpanel::JSON::XS 4.38 are required to properly encode them</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004008-1" date="1723377600">- Update to 1.004008
  - Improved boolean testing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004008-2" date="1723550400">- Fix runtime dependency on Cpanel::JSON::XS 4.38 (rhbz#2304277)</changelog>
</package>
<package pkgid="2c82c42546908b0dbe5203f7d4c71002dd2c3232dd342e22f557c2008a55427a" name="perl-JSON-PP" arch="noarch">
  <version epoch="1" ver="4.18" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.16-522" date="1766491200">- Silence Getopt::Long warning (rhbz#2417867, PR#1, GH#88, GH#93)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.18-1" date="1774008000">- Update to 4.18
  - Fix duplicate specification warning (GH#88, GH#93)
  - Fix typo (GH#92, GH#96)
  - Fix decode_json prototype
  - Fix space_after (GH#89)
  - Fix a reentrancy issue (GH#61, GH#87)</changelog>
</package>
<package pkgid="1eb62dfad15a04811431f0365aa6d3f7108fe91ce714343edc331f77a36c463f" name="perl-JSON-XS" arch="x86_64">
  <version epoch="1" ver="4.04" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.03-14" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.03-17" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.04-1" date="1757419200">- Update to 4.03
  - Fix heap overflow causing crashes, possibly information disclosure or worse
    (CVE-2025-40928), and causes JSON::XS to accept invalid JSON texts as valid
    in some cases</changelog>
</package>
<package pkgid="454bcdeecbd84a9351e7df651c72845caba100160dff131622143f1a08018af6" name="perl-Jcode" arch="noarch">
  <version epoch="0" ver="2.07" rel="40.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.07-40" date="1682424000">- Use SPDX-format license tag
- Avoid use of deprecated patch tag</changelog>
</package>
<package pkgid="e86f7f04bc98ac3b288638c013f6173764674519da7e1e0b995281c7621db590" name="perl-LMAP-CID2SPF" arch="noarch">
  <version epoch="0" ver="0.9" rel="18.fc37"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 0.9-18" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8c383f2f066250015a5bfe6960e5bf2883b229f8191770d9eb3e5dd67c51dfaa" name="perl-Lingua-EN-Inflect" arch="noarch">
  <version epoch="0" ver="1.905" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.905-8" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c96267fff35a123fc680b400e2ce451024b5ea801352f16b67fa5774fdc70f81" name="perl-List-MoreUtils" arch="noarch">
  <version epoch="0" ver="0.430" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-8" date="1682424000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c4aefb4c977f49b72092adfa00019e4761d395badbd40648fd4f1eb00221f72e" name="perl-List-MoreUtils-XS" arch="x86_64">
  <version epoch="0" ver="0.430" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-6" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-8" date="1682510400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9e621fc5d39b3eef0d2a8f31b590d021683fc78d884a5b3728a16266b8811845" name="perl-List-SomeUtils" arch="noarch">
  <version epoch="0" ver="0.59" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.59-1" date="1670846400">- Update to 0.59
  - Require Module::Implementation 0.04; without this tests fail (GH#11)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.59-2" date="1689681600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="38342263d9f95e7aa40230c6c490e3df1b6fa53285f3257253d50ac629209752" name="perl-List-SomeUtils-XS" arch="x86_64">
  <version epoch="0" ver="0.58" rel="18.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.58-14" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.58-18" date="1689681600">- Perl 5.38 rebuild</changelog>
</package>
<package pkgid="af431b21f328e49f564fdce070c3e5e72d09e43208cc4c416b8b67a3ec525a76" name="perl-Locale-Maketext-Lexicon" arch="noarch">
  <version epoch="0" ver="1.00" rel="30.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.00-30" date="1689595200">- Drop support for building with rpm &lt; 4.9
- Use Lingua::EN::Sentence unconditionally
- Use %license unconditionally</changelog>
</package>
<package pkgid="fb2b9d76d825aacb877b51cf983b34c2fd5dc7d1019dfd6b907e46ddd66abd15" name="perl-Locale-Maketext-Simple" arch="noarch">
  <version epoch="1" ver="0.21" rel="499.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.21-486" date="1647604800">- Work around package note files breaking t/0-signature.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.21-499" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="3c74636b6f98e6dc4b8a9044398989f6f82e5f3a78166aa5cd998841b6bb3260" name="perl-Locale-US" arch="noarch">
  <version epoch="0" ver="3.04" rel="24.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.04-24" date="1682510400">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Use %license unconditionally
  - Don't package kruft2codes.pl as documentation; it's a maintainer script
    that is installed alongside the module itself</changelog>
</package>
<package pkgid="3d7332a132a2aef4351875603304a934a5f9c9b43ce6bf5824e3f178e56e2f3f" name="perl-MCE" arch="noarch">
  <version epoch="0" ver="1.902" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.896-1" date="1718193600">- Update to 1.896 (rhbz#2291411)
  - Weaken internal core MCE reference to reap workers automatically upon
    leaving the scope i.e. omitting shutdown
    - Note: No change to MCE models Flow, Grep, Loop, Map, Step, and Stream
    - Call finish explicitly to reap workers
    - This resolves the case when omitting calling $mce-&gt;run(), $mce-&gt;run(1) or
      $mce-&gt;shutdown() inside a scope, causing workers to linger around until
      completion of the script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-1" date="1718884800">- Update to 1.897
  - In scalar context, the init function in MCE Child and models Flow, Grep,
    Loop, Map, Step, and Stream returns a guard to call finish automatically
    upon leaving the { scope } (i.e. omitting finish)
  - Add out_iter_callback to MCE::Candy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.898-1" date="1724328000">- Update to 1.898
  - Fix for MCE::Child, Can't call method "len" on an undefined value
    during global destruction (GH#22)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.899-1" date="1725624000">- Update to 1.899
  - Fix for MCE::Child and MCE::Channel signal anomaly (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.900-1" date="1725969600">- Update to 1.900 (rhbz#2310966)
  - Improve MCE::Child exiting when signaled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-1" date="1735905600">- Update to 1.901 (rhbz#2335354)
  - Add MCE::Core package for future development</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-3" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.902-1" date="1757505600">- Update to 1.902 (rhbz#2394255)
  - Add support for Iterator:: classes
- Use Sereal unconditionally</changelog>
</package>
<package pkgid="74f3fc7d20d56b136db46ba56691380362ed75820079e678cd819cfb03913d93" name="perl-MCE-Shared" arch="noarch">
  <version epoch="0" ver="1.893" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.884-1" date="1686225600">- Update to 1.884
  - Add missing return statement(s) in Condvar and Queue
  - Move tests for condvar timedwait to xt/condvar_timedwait.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.885-1" date="1686312000">- Update to 1.885
  - Fix typo in Queue dequeue_timed documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.886-1" date="1694692800">- Update to 1.886
  - Add Android support; this required moving MCE::Shared::Base::Common out of
    MCE::Shared::Base to separate file MCE::Shared::Common
  - Bump MCE dependency to 1.889</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.887-1" date="1716724800">- Update to 1.887
  - Improve reaping of completed workers in MCE::Hobo</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.888-1" date="1717675200">- Update to 1.888
  - Apply workaround for PDL::srand in MCE::Hobo
    (https://www.perlmonks.org/?node_id=11159773)
  - Add PDL::srand (v2.062~v2.089) and PDL::srandom (v2.089_01+)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.889-1" date="1718020800">- Update to 1.889
  - Improve support for PDL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.890-1" date="1718107200">- Update to 1.890
  - Revert back to calling CORE::rand() to set the internal seed; MCE::Hobo
    cannot assume the srand or setter function used by the application for
    predictability
    - https://perlmonks.org/?node_id=11159834
    - https://perlmonks.org/?node_id=11159827
  - Add class method MCE::Hobo-&gt;seed to retrieve the seed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.891-1" date="1718884800">- Update to 1.891
  - In scalar context, MCE::Hobo-&gt;init returns a guard to call finish
    automatically upon leaving the { scope } (i.e. omitting finish)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.892-1" date="1724328000">- Update to 1.892
  - Fix for MCE::Hobo, Can't call method "len" on an undefined value during
    global destruction</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.893-1" date="1725969600">- Update to 1.893
  - Improve MCE::Hobo exiting when signaled</changelog>
</package>
<package pkgid="39b0090965987fef156d09c06f9c926642b923468cc2f48132126a76d79d616d" name="perl-MCE-tools" arch="noarch">
  <version epoch="0" ver="1.902" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.896-1" date="1718193600">- Update to 1.896 (rhbz#2291411)
  - Weaken internal core MCE reference to reap workers automatically upon
    leaving the scope i.e. omitting shutdown
    - Note: No change to MCE models Flow, Grep, Loop, Map, Step, and Stream
    - Call finish explicitly to reap workers
    - This resolves the case when omitting calling $mce-&gt;run(), $mce-&gt;run(1) or
      $mce-&gt;shutdown() inside a scope, causing workers to linger around until
      completion of the script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-1" date="1718884800">- Update to 1.897
  - In scalar context, the init function in MCE Child and models Flow, Grep,
    Loop, Map, Step, and Stream returns a guard to call finish automatically
    upon leaving the { scope } (i.e. omitting finish)
  - Add out_iter_callback to MCE::Candy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.898-1" date="1724328000">- Update to 1.898
  - Fix for MCE::Child, Can't call method "len" on an undefined value
    during global destruction (GH#22)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.899-1" date="1725624000">- Update to 1.899
  - Fix for MCE::Child and MCE::Channel signal anomaly (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.900-1" date="1725969600">- Update to 1.900 (rhbz#2310966)
  - Improve MCE::Child exiting when signaled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-1" date="1735905600">- Update to 1.901 (rhbz#2335354)
  - Add MCE::Core package for future development</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-3" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.902-1" date="1757505600">- Update to 1.902 (rhbz#2394255)
  - Add support for Iterator:: classes
- Use Sereal unconditionally</changelog>
</package>
<package pkgid="e8010dc2548e2137adc66f6c4eb40a017e72a7a2da2fe378410143f6df0d8191" name="perl-MIME-Base32" arch="noarch">
  <version epoch="0" ver="1.303" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.303-17" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="2ec4fe64546b3194a8e9a5226df68cd718882fd96c69aac485d8868fc2b26b4d" name="perl-MIME-Types" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-5" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-1" date="1707220800">- Update to 2.26
  - IANA updates
  - Support multi-level extensions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-3" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.27-1" date="1738929600">- Update to 2.27
  - IANA updates
  - Explicitly set $/ before reading the file by line</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1745064000">- Update to 2.28
  Fixes:
  - Some 'deprecated' texts made it to types.db
  Improvements:
  - text/ecmascript RFC9239
  - Default charsets according to RFC6657
  - Update reference to specs RFC6838 and RFC9694
  - IANA updates
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-2" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1757937600">- Update to 2.29
  - Require 5.16 (2012)
  - Remove xt/98perl.t
  - ::Type-&gt;defaultCharset()
  - Remove use of bareword filehandle
  - IANA updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1765195200">- Update to 2.30
  Fixes:
  - No undef when simplifying illegal type (GH#15)
  Improvements:
  - Add bugtracker to meta
  - Better OO use of attributes</changelog>
</package>
<package pkgid="0341d2fbd8e30809d7635d530e9cfe158f72156507dc5dd04fc1995be5f3d670" name="perl-MIME-tools" arch="noarch">
  <version epoch="1" ver="5.517" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-1" date="1714132800">- Update to 5.515
  -  Fix the "version" setting in META.yml (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-3" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-4" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-5" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.517-1" date="1770811200">- Update to 5.517
  - Handle MIME parameters of the form param= better (i.e. a parameter with no
    value at all); it's treated the same as param="" rather than aborting the
    parse
  - Diagnose additional types of malformed MIME as ambiguous; specifically, an
    empty boundary parameter like boundary= or boundary="" is treated as
    ambiguous</changelog>
</package>
<package pkgid="4db698b9e3050616da14689fc5a9ad489313e02f956518ca62cd72e303a3a636" name="perl-MLDBM" arch="noarch">
  <version epoch="0" ver="2.05" rel="34.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-29" date="1682510400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-32" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-34" date="1726574400">- Drop optional test dependency perl(DB_File) from Fedora 33 onwards due to
  deprecation of libdb</changelog>
</package>
<package pkgid="f4e23eb448a5551359bf0a39f8fd118958a3650634adf1b4ab8f4df09d7cce7a" name="perl-MRO-Compat" arch="noarch">
  <version epoch="0" ver="0.15" rel="6.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-1" date="1641643200">- Update to 0.15
  - Optimize pure perl DFS inheritance calculation on perl 5.8
  - Fix function prototypes to match core functions
  - Pod formatting fix
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-6" date="1679486400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="74e5b8d1e53d35933d60c1849613e1ea1d25f735e0e6dfdbedf4bb7ef30d66e0" name="perl-Mail-IMAPClient" arch="noarch">
  <version epoch="0" ver="3.43" rel="7.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.43-7" date="1689681600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="905670ecbfdeca79ea7ad470e4ba51e61d2e7f1c15a9228b745e8b05fcec466c" name="perl-Mail-Mbox-MessageParser" arch="noarch">
  <version epoch="0" ver="1.5111" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.5111-16" date="1682596800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="25747cae6368cc3aa4cbd59b497c758d57408eafe2550bf901f3c1d8dcbdce70" name="perl-Mail-SPF" arch="noarch">
  <version epoch="0" ver="3.20260331" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240617-1" date="1718625600">- Update to 3.20240617
  - Update INSTALL file for Dist::Zilla changes
  - Fix memory leak in Mail::SPF::Server when cacheing a Mail::SPF::MacroString
  - When mfrom is empty, create a synthetic mfrom (postmaster@helo) and check
    that identity using the mfrom scope as specified in RFC7208
  - Fix missing declare in Mail::SPF::Server
  - Require Mail::SPF::Mech when needed
  - Correctly handle empty labels
  - Use "try" instead of "eval"
  - Error out if the lookup fails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240827-1" date="1724760000">- Update to 3.20240827
  - Do not try to parse an IPv4 address unnecessarily
  - Import RFC7208 tests
  - Referencing the same TXT record through multiple CNAME aliases is not
    permitted by RFC7208
  - Make it clear that BlackMagic module is not available
  - Fix checks for IPv4-mapped IPv6 connections
  - Cache DNS results
  - Misc dzil/build/ci improvements
  - SPF explanation text is restricted to 7-bit ascii</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240923-1" date="1727092800">- Update to 3.20240923
  - Fix issue where certain DNS results would cause an exception to be thrown</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20250505-1" date="1746446400">- Update to 3.20250505
  - Avoid an 'Attempt to reload Mail/SPF/Mech.pm aborted' error
  - Remove empty record structure in order to stringify it correctly
  - Redirect all references to openspf.org to open-spf.org
  - Fix pod test errors
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20260331-1" date="1775044800">- Update to 3.20260331
  - Do not check for multiple CNAMEs if the included domain is a macro
- Drop build dependency on broken, dead upstream module Mail::SPF::Test</changelog>
</package>
<package pkgid="0161711e38564e7bbda3e14cee7c5c832cc0b7ff6627a5ca3944f84527f5943f" name="perl-Mail-SPF-Test" arch="noarch">
  <version epoch="0" ver="1.001" rel="11.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001-11" date="1680091200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="6a23b7774887dfd01ef9d5e97e84349a429c85fcd48d18f400c98718044ed885" name="perl-Mail-SRS" arch="noarch">
  <version epoch="0" ver="0.31" rel="15.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-15" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="9aaa46814e727947b7794181c8ecfb2e5f393ddecbfa89d066fd0761585eaeab" name="perl-Mail-Sender" arch="noarch">
  <version epoch="1" ver="0.903" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.903-21" date="1686312000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="21ee44d3e892cfab177776ec7b59f0b33b1e1645c26d426379a0d861447adc68" name="perl-Mail-Sendmail" arch="noarch">
  <version epoch="0" ver="0.82" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.80-17" date="1689681600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.82-1" date="1752580800">- Update to 0.82
  - Fixed typos (CPAN RT#88351, CPAN RT#119000)
 - Improvement to use Sys::Hostname::Long (CPAN RT#36112, GH#2)</changelog>
</package>
<package pkgid="1f6527fe15a018d97e38efc0a2b2a8d7a7952199ca8e952b43e32478480844b1" name="perl-MailTools" arch="noarch">
  <version epoch="0" ver="2.22" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.21-13" date="1682596800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.22-1" date="1731931200">- Update to 2.22 (rhbz#2326982)
  - To/Cc/Bcc/From fields may appear only once (GH#4)</changelog>
</package>
<package pkgid="ba7acdec9cfaf53ed9b37282ea11d237249e18772f3f0f753f81e21c407f9279" name="perl-Math-Base-Convert" arch="noarch">
  <version epoch="0" ver="0.13" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-1" date="1758024000">- Update to 0.13
  - Fix precedence issue highlighted by perl 5.42 (CPAN RT#168226)
  - Correct typo: 96 ASCII characters should be 95
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="5f1d8cff9d766f50ec839042d60c75390dce53db53bacb766480a6168d8ad36a" name="perl-Math-Round" arch="noarch">
  <version epoch="0" ver="0.08" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-25" date="1682596800">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1696939200">- Update to 0.08
  - NEILB has taken over maintenance
  - Added usual directory structure with lib/ and t/
  - Converted test.pl to traditional Test::More suite
  - Added LICENSE to doc and ensured metadata has license
  - Switched to dzil</changelog>
</package>
<package pkgid="859ed6b9cbf50be14b79a8eb1fbd06699c781f3a5bb982bc17dd242a8316f4fa" name="perl-Meta-Builder" arch="noarch">
  <version epoch="0" ver="0.004" rel="14.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-14" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="61972076b44ca80bc1593ba5cc98b0db4fc91dc8a2e0d196f0a853b3f7bb553d" name="perl-MetaCPAN-Client" arch="noarch">
  <version epoch="0" ver="2.042000" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.032000-1" date="1715860800">- Update to 2.032000
  - Fix scroller issues (GH#123)
  - Removed rating fetching (GH#124)
  - Fix example script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.033000-1" date="1732536000">- Update to 2.033000
  - Remove backpan_directory option (GH#127)
- Switch upstream source URL from cpan.metacpan.org to www.cpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.033000-2" date="1752148800">- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker ≤ 7.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.034000-1" date="1764849600">- Update to 2.034000
  - Add distribution to list of known fields in DownloadURL response (GH#129)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.035000-1" date="1767787200">- Update to 2.035000
  - Fix a compatibility issue for ES 8 in scroller setting (GH#131)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.037000-1" date="1767873600">- Update to 2.037000
  - Fix es_filter to merge into query (GH#132)
  - More ES 8 related fixes (GH#133)
  - Updated scripts in examples/ (GH#133)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.038000-1" date="1769774400">- Update to 2.038000
  - Support CVE index</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.039000-1" date="1772280000">- Update to 2.039000
  - Add more types that can be scrolled (GH#134)
  - Fix 'all' fetching from CVE and example scripts (GH#135)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.040000-1" date="1773057600">- Update to 2.040000
  - Use a boolean in reverse_deps term (GH#136)
  - Allow JSON-&gt;true and JSON-&gt;false (GH#137)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.042000-1" date="1777291200">- Update to 2.042000
  - Rating: Fail instead of silent empty response (GH#141)
  - CVE: Clean-up and updated (GH#142)
  - CVE: Fixed search + unbroke 'all' method (GH#144)</changelog>
</package>
<package pkgid="05b0a162465d6f9f556eef57aa0e8c1970483f2e61cf8e084c986f9ba9ffd935" name="perl-Mixin-Linewise" arch="noarch">
  <version epoch="0" ver="0.111" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.111-1" date="1672574400">- Update to 0.111
  - Update author information
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.111-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="de82abdadb7ae7d7c366313540fef24e7d97b25622177909c2c0b6e082e2046d" name="perl-Mock-Quick" arch="noarch">
  <version epoch="0" ver="1.111" rel="20.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.111-20" date="1681128000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3148887aa8673a716dd41db8e2320065b7b9a8ffdee8f3b181df689e76a59e54" name="perl-Module-Build" arch="noarch">
  <version epoch="2" ver="0.42.34" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.31-12" date="1648555200">- Handle missing ExtUtils::CBuilder as a missing compiler (#1547165)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.32-1" date="1670587200">- Update to 0.4232
  - Drop Pod::Man dependency for 5.8 compatibility
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.34-1" date="1682683200">- Update to 0.4234
  - PodParser now respects =encoding directives
  - Don't use libraries in t/bundled for Build.PL
  - make_tarball: workaround for broken tar on Darwin
  - Respect $Config{man1ext}/$Config{man3ext}
  - Do not require a compiler if c_source is an empty list
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="695b16c2b21e8ffe2052ff9cef638d40e10ebef96484cc221c42e9ec6de58d74" name="perl-Module-Build-Deprecated" arch="noarch">
  <version epoch="0" ver="0.4210" rel="26.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4210-26" date="1689681600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="a2095c0930acda5fb9420ed021119fae659f1e6f8aee8020e7d255f2dc475ae5" name="perl-Module-Build-Tiny" arch="noarch">
  <version epoch="0" ver="0.053" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.048-1" date="1714392000">- Update to 0.048
  - Implement dynamic prerequisites</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.049-1" date="1725451200">- Update to 0.049
  - Make CPAN::Requirements::Dynamic an optional dependency
- This package retains hard dependency for consistency of use</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.050-1" date="1725451201">- Update to 0.050
  - Revert "Make CPAN::Requirements::Dynamic an optional dependency"
    (GH#36)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.051-1" date="1725624000">- Update to 0.051
  - Make CPAN::Requirements::Dynamic an optional dependency
- This package retains hard dependency for consistency of use
- Run tests verbosely</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.052-1" date="1747137600">- Update to 0.052
  - Add extra_compiler_flags and extra_linker_flags command line arguments</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.053-1" date="1772625600">- Update to 0.053
  - Always set dynamic_config=0 in MYMETA
  - Set PERL_DL_NONLAZY=1 during testing</changelog>
</package>
<package pkgid="765aa863a96e10d97099f60cd6293d4a0b9f794fe500cf838cbd6c33285eca1b" name="perl-Module-Build-XSUtil" arch="noarch">
  <version epoch="0" ver="0.19" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.19-17" date="1674561600">- Spec tidy-up
  - Use SPDX-format license tag
  - Use %license unconditionally
  - Fix permissions of installed files
  - Avoid redundant perl(:MODULE_COMPAT_*) dependency</changelog>
</package>
<package pkgid="0311e564daef5ea21c44d187517165ef6b9fb6e5ddb8d6434d15269d10aee7b5" name="perl-Module-CPANTS-Analyse" arch="noarch">
  <version epoch="0" ver="1.02" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.01-11" date="1682683200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with ExtUtils::MakeMaker &lt; 6.58</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-1" date="1694347200">- Update to 1.02
  - Treat use v5.36 as use_warnings (GH#49)
  - Skip some of the manifest test if symlink is not available (GH#50)
  - Improve prereq sorting
  - Improve pod detection
  - Improve script detection
  - Use Parse::Distname to get a little more information from a distribution
    name
  - Dedupe possible licences
  - Add Object::Pad as use strict equivalent (GH#42)
  - Fix has_license_in_source_file for distributions that contain only a
    script under bin or scripts (GH#37)</changelog>
</package>
<package pkgid="f504526fbfb625483963de4677dba825300cde52f137dc6f7803cfcd668e4c6b" name="perl-Module-CPANfile" arch="noarch">
  <version epoch="0" ver="1.1004" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1004-12" date="1631534400">- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1004-16" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="92e579f0740bee473ec4a1d5a4787afbdc6876844d81ca7fd538134a31e2d15f" name="perl-Module-CoreList" arch="noarch">
  <version epoch="1" ver="5.20260420" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20250923-1" date="1758628800">- Update to 5.20250923
  - Updated for v5.43.3</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20251022-1" date="1761307200">- Update to 5.20251022
  - Updated for v5.43.4</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20251120-1" date="1763726400">- Update to 5.20251120
  - Updated for v5.43.5</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20251220-1" date="1766404800">- Update to 5.20251220
  - Updated for v5.43.6</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260119-1" date="1768910400">- Update to 5.20260119
  - Updated for v5.43.7</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260220-1" date="1771675200">- Update to 5.20260220
  - Updated for v5.43.8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260308-1" date="1773057600">- Update to 5.20260308
  - Updated for v5.42.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260320-1" date="1774180800">- Update to 5.20260320
  - Updated for v5.43.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260330-1" date="1774872000">- Update to 5.20260330
  - Updated for v5.42.2
  - Updated for v5.40.4</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260420-1" date="1776686400">- Update to 5.20260420
  - Updated for v5.43.10</changelog>
</package>
<package pkgid="1238da2d1e5b8fd0666cd4d198479ff956705710332a8740fcfcb6dcc5638248" name="perl-Module-Extract-Namespaces" arch="noarch">
  <version epoch="0" ver="1.026" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-4" date="1682683200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.024-1" date="1707652800">- Update to 1.024
  - Refresh distro, update email address, release under new PAUSE ID BRIANDFOY</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.025-1" date="1737979200">- Update to 1.025
  - Refresh distro
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.026-1" date="1744632000">- Update to 1.026
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="e1c45244a9cbd780a81770a4c28be337f4f2433f92bcd7f58e1d8c65c2046622" name="perl-Module-Extract-Use" arch="noarch">
  <version epoch="0" ver="1.055" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.053-1" date="1723896000">- Update to 1.053
  - More upstream metadata changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.054-1" date="1744632000">- Update to 1.054
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.055-1" date="1776600000">- Update to 1.055
  - extract_modules can now search PATH for file</changelog>
</package>
<package pkgid="d617e3d6b9f76e0f7e5110a75368de803a66319f66d101a7f799016fad78bcf4" name="perl-Module-Extract-VERSION" arch="noarch">
  <version epoch="0" ver="1.119" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.116-2" date="1689681600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.117-1" date="1707652800">- Update to 1.117
  - Refresh distro, update email address, move to BRIANDFOY</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.118-1" date="1737547200">- Update to 1.118
  - Refresh dist
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-1" date="1744718400">- Update to 1.119
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="cfbd0685903d7eda922ad36b99a682c6c6206a5d51efabd93e49990c00f2f607" name="perl-Module-ExtractUse" arch="noarch">
  <version epoch="0" ver="0.345" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.344-1" date="1630929600">- Update to 0.344
  - Fixed some spelling errors in the Pod
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.345-1" date="1673956800">- Update to 0.345
  - Auto generate meta_yml_has_provides experimental Kwalitee
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c4bfd39539c720b1778fab6d77fad5f2cf1c381c3f238f0b4e9192dba9edbd87" name="perl-Module-Find" arch="noarch">
  <version epoch="0" ver="0.17" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.16-3" date="1682596800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-1" date="1739793600">- Update to 0.17
  - Avoid warnings when extracting the distribution tarball, which prevented
    installation under cpanm and other tools (GH#13, CPAN RT#148978)</changelog>
</package>
<package pkgid="35bce633b32d6c4b9587a9326354ffa289e5865abb4860e39ad6989c7bde3e99" name="perl-Module-Implementation" arch="noarch">
  <version epoch="0" ver="0.09" rel="36.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-36" date="1682856000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="6e09e114d3152b0fe436d9fef7ec35b6b3c2e7304cddc48ee756d8782d2cd134" name="perl-Module-Info" arch="noarch">
  <version epoch="0" ver="0.39" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-22" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.39-1" date="1724846400">- Update to 0.39
  - Get rid of ' as package namespace separator
  - Fixed compatibility with 5.8.1 (CPAN RT#129677)</changelog>
</package>
<package pkgid="3de36d672416fd6444282ccc8d7356b512a0b42f45bf04ab59aea14ebb5a35a3" name="perl-Module-Load" arch="noarch">
  <version epoch="1" ver="0.36" rel="499.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.36-499" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="586aafde8a5cf771dd270b5a5d79e4e1045bd1a92634cdb79f11e7ce4cdc3882" name="perl-Module-Load-Conditional" arch="noarch">
  <version epoch="0" ver="0.74" rel="499.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.74-499" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="aaff5e74d6be92111694b845f1e1aecd2b46dfa65df07fe6b3264adf63374401" name="perl-Module-Manifest" arch="noarch">
  <version epoch="0" ver="1.09" rel="18.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-18" date="1689681600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="44ace4ee681e8bcf1552891e34a1b6dbcaf2f2495c5ba07da5346abd077485f0" name="perl-Module-Metadata" arch="noarch">
  <version epoch="0" ver="1.000039" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000039-1" date="1775304000">- Update to 1.000039
  - Adds recognition of attributes in "class" declarations (GH#39)
- User %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="af108a68452ed58ddcba16a1ebe0f9c258e84dcbb4eb6a1e9534b00ad853f545" name="perl-Module-Pluggable" arch="noarch">
  <version epoch="2" ver="6.3" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:5.2-25" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.1-1" date="1729684800">- Update to 6.1
  - Fix typo in examples
  - Fix spelling of "FatPacker"
  - Add before_instantiate and after_instantiate hooks
  - Use explicit test plan instead of done_testing
  - Don't use vars, use our
  - Ignore the .AppleDouble
  - Improve vim swapfile patterns
  - Fix behaviour of File::Find and symlinks on certain versions of Win32
  - Skip unreadable files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.2-1" date="1729857600">- Update to 6.2
  - Add search_dirs, searching filesystem, different from search_path,
    searching namespace</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.2-2" date="1730030400">- Fix clean-up of temporary directory in test (CPAN RT#156362)
- Work around failure of unreadable file test when running as root (CPAN RT#156367)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.3-1" date="1736596800">- Update to 6.3
  - Fix make_path() in t/29unreadable.t (CPAN RT#156362)
  - Fix t/29unreadable.t tests failing as root (CPAN RT#156367)</changelog>
</package>
<package pkgid="cd14511478f3b59f64096a7e90c5b1f0792db257ae76ffb394114540633362e5" name="perl-Module-Refresh" arch="noarch">
  <version epoch="0" ver="0.18" rel="5.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-1" date="1652184000">- Update to 0.18
  - Fix uninitialized warnings when modules were not successfully loaded</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-5" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="fb8638b5980b7faf8a2ba7bbcd356212fa87470734b5fdc64152dc80a2a2b1c0" name="perl-Module-Runtime" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.016-19" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1743940800">- Update to 0.017 (rhbz#2357698)
  - Fixed internal Pod links
  - Various internal formatting changes
  - Check for eval failures via return value, not $@
  - Update packaging to remove Module::Build and set x_static_install
  - Remove broken SIGNATURE file
- Switch to ExtUtils::MakeMaker flow
- Package LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1745236800">- Update to 0.018
  - Avoid xattr headers in release tarball
  - Minor code reformatting</changelog>
</package>
<package pkgid="0360aae3e6ec7844eb5c1f328193f49b77478e60f98b84639ac47f791311ae99" name="perl-Module-Runtime-Conflicts" arch="noarch">
  <version epoch="0" ver="0.003" rel="20.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-20" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="df2f38fa175b01a32a50b2cac13c24dc74f86e186fda248997771d556b62b86d" name="perl-Module-Signature" arch="noarch">
  <version epoch="0" ver="0.95" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.89-1" date="1726488000">- Update to 0.89
  - Replace keyserver with keyserver.ubuntu.com (GH#34, GH#38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.90-1" date="1749816000">- Update to 0.90
  - Fix fail on signature file with an unexpected empty line (CPAN RT#166901)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.92-1" date="1751025600">- Update to 0.92
 - Add SECURITY.md policy
 - Move to three-arg open
 - Remove spaces from eol
 - Change build process to Dist::Zilla
- Recommend perldoc and PAR::Dist, needed for some cpansign functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.93-1" date="1751112000">- Update to 0.93
  - The cpansign script was not installed with version 0.92 (GH#44)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.95-1" date="1777291200">- Update to 0.95 (rhbz#2461945)
  - Announce deprecation of the module</changelog>
</package>
<package pkgid="18b91a7604b25ec8ddaf75adc9c25f22101cb8377c8a4cce6fcbd1cbdca10613" name="perl-MojoX-MIME-Types" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-5" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-1" date="1707220800">- Update to 2.26
  - IANA updates
  - Support multi-level extensions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-3" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.27-1" date="1738929600">- Update to 2.27
  - IANA updates
  - Explicitly set $/ before reading the file by line</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1745064000">- Update to 2.28
  Fixes:
  - Some 'deprecated' texts made it to types.db
  Improvements:
  - text/ecmascript RFC9239
  - Default charsets according to RFC6657
  - Update reference to specs RFC6838 and RFC9694
  - IANA updates
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-2" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1757937600">- Update to 2.29
  - Require 5.16 (2012)
  - Remove xt/98perl.t
  - ::Type-&gt;defaultCharset()
  - Remove use of bareword filehandle
  - IANA updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1765195200">- Update to 2.30
  Fixes:
  - No undef when simplifying illegal type (GH#15)
  Improvements:
  - Add bugtracker to meta
  - Better OO use of attributes</changelog>
</package>
<package pkgid="07979f6ea86fd9eaf32b630e2e9d9cd78832ce3eb7f143497e56886187fbad09" name="perl-Moo" arch="noarch">
  <version epoch="0" ver="2.005005" rel="11.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.005005-11" date="1768996800">- Assume Sub::Util is always available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="34ffbd8a33a7a5642cbf8b00092423393d669c9644c18a737350f474ad180c4e" name="perl-Moose" arch="x86_64">
  <version epoch="0" ver="2.4000" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2203-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2205-1" date="1690113600">- Update to 2.2205 (rhbz#2224800)
  Tests
  - Adjust the expected list of UNIVERSAL methods, to account for changes in
    perl 5.39.1: some things, like the import method, could end up existing
    based on the perl version or based on a prerequite loading UNIVERSAL.pm
    (GH#183)
- Revert test change for Perl 5.39 if our perl is older than 5.22</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2206-1" date="1690113601">- Update to 2.2206
  - Fix parsing error in test in 2.2205 release</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-1" date="1705838400">- Update to 2.2207
  - Remove test dependency on Test::CleanNamespaces (GH#184)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-2" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-5" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6.1" date="1745150400">- Add provide for Moose::Conflicts, used in test suite for MooseX-Types
- Use %{make_build} and %{make_install}
- Drop Obsoletes/Provides for perl-Class-MOP, merged into perl-Moose in Fedora
  15 (2011)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4000-1.0" date="1751889600">- Update to 2.4000
  Documentation
  - Clarified some wording regarding the interactions between attribute
    configuration options "init_arg" and "required" (GH#187)
  Other
  - The release schedule and numbering scheme has changed; see
    Moose::Manual::Support</changelog>
</package>
<package pkgid="e716cfa522d856ca94167e14c7b2c2a10c1c696647645d3f1a3443ef1c7a20c5" name="perl-MooseX-GlobRef" arch="noarch">
  <version epoch="0" ver="0.0701" rel="35.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0701-35" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="bf61999f60c039cf617219ef98f4614cb545b0492f0e967d026ba97ada954a14" name="perl-MooseX-InsideOut" arch="noarch">
  <version epoch="0" ver="0.106" rel="35.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.106-35" date="1682942400">- Use SPDX-format license tag
- Use author-independent source URL
- Use %license unconditionally</changelog>
</package>
<package pkgid="3afa97605aa4797bab5824e3ab739231ca2057d40c21c6c44c3d1fa032a79051" name="perl-MooseX-NonMoose" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-26" date="1682942400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1735905600">- Update to 0.27
  - Drop dependency on List::MoreUtils
  - New maintainer and repository: https://github.com/uperl/MooseX-NonMoose</changelog>
</package>
<package pkgid="97ba6a6ace21489027e06c90ab36c0e11e9d866b2048b63b6aad0277f11e0dcb" name="perl-MooseX-Role-Parameterized" arch="noarch">
  <version epoch="0" ver="1.11" rel="12.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-12" date="1682942400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="79287bd81807e3917ad32a531f77c799df97b4a6bf400d7f0a50f9471898f16a" name="perl-MooseX-Role-WithOverloading" arch="x86_64">
  <version epoch="0" ver="0.17" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-20" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-23" date="1654257600">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-25" date="1682942400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="79779393cb1ab48fe9b739707bbb780f0ed12cdff739952183f3a5b0f1b082a3" name="perl-MooseX-Types" arch="noarch">
  <version epoch="0" ver="0.51" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-19" date="1683028800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Fix permissions of installed files
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1745150400">- Update to 0.51
  - Use Sub::Util rather than Sub::Name, since Sub::Util is in core</changelog>
</package>
<package pkgid="31b7a1f8274f504b541986761795fbd0bb63f111ef19e90ecb892af6210a6d00" name="perl-Mouse" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-21" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-22" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-1" date="1722772800">- Update to 2.5.11
  - Use Devel-PPPort 3.59 (GH#113)
  - Mark "builtin" as foreign (GH#123)
- Update bundled ppport.h to version 3.62</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-4" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-5" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.0-1" date="1761825600">- Update to 2.6.0 (rhbz#2407306)
  - Update minimum perl version from 5.8 =&gt; 5.10 (GH#112)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-1" date="1766232000">- Update to 2.6.1 (rhbz#2424094)
  - Provide empty import on Mouse::Deprecated for imported Moose test
    (GH#120, GH#127)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.2-1" date="1775390400">- Update to 2.6.2 (rhbz#2455030)
  - Fix the conversion from floating point number to string with quadmath Perl
    (GH#126)</changelog>
</package>
<package pkgid="620e8f8e85c42e06d56ba2e66271e86f31c3b12a0dea4f5f1612b7136ee5c0d8" name="perl-Net-CIDR" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-1" date="1741521600">- Update to 0.22
  - Improve several error messages
  - Allow unabbreviated IPv6 addresses
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1741608000">- Update to 0.23
  - Allow unabbreviated IPv6 addresses</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1747742400">- Update to 0.24 (no changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24.1-1" date="1747828800">- Update to 0.24.1
  - Strip extra leading zeros from octets in addr2cidr (GH#4)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-1" date="1748088000">- Update to 0.25
  - Fix warning with Perl 5.40</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-1" date="1750593600">- Update to 0.26
  - cidrvalidate() should accept IPv6 addresses with one uncompressed 0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1755086400">- Update to 0.27
  - cidrvalidate() bug fix (GH#9)</changelog>
</package>
<package pkgid="9c6d53a4c2a97c7e27257d71be8b9822aa738cbca95cb907df0c054210d033ac" name="perl-Net-CIDR-Lite" arch="noarch">
  <version epoch="0" ver="0.23" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1775908800">- Update to 0.23
  - Security: Fix IPv4 mapped IPv6 packed length (CVE-2026-40199)
  - Security: Reject invalid uncompressed IPv6 (CVE-2026-40198)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="bea3d213d89447d42142a0ad8888f2c3cc1936fbf139d6d42ab6e9e4ec212aa2" name="perl-Net-DNS" arch="noarch">
  <version epoch="0" ver="1.54" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.49-1.0.cf" date="1735300800">- Update to 1.49
  - Add DSYNC package for Generalized Notification
  - EDNS: Add support for ZONEVERSION option
  - Fix "Use of uninitialized value" errors when using TCP connections
    (CPAN RT#157700)
  - Fix Net::DNS::Nameserver: SOA not present in NODATA response
    (CPAN RT#157669)
  - Fix EDNS option structure does not match JSON from $packet-&gt;edns-&gt;print
    (CPAN RT#157195)
  - Fix user-hostile return value from SVCB key methods (CPAN RT#157043)
- Stop running tests verbosely</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.49-2.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.50-1.0.cf" date="1740139200">- Update to 1.50
  - Minor code improvements in Resolver::Base
  - Add RESINFO package for resolver information
  - Documentation revision and reformatting
  - IPv4 loopback may be disabled in IPv6-only configuration (CPAN RT#158714)
  - Fix use of uninitialized value in _send_udp (CPAN RT#158706)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.0.cf" date="1751889600">- Update to 1.51
  - Resync with IANA DNS Parameters registry
  - Add prototype DELEG RR package
  - Minor code and documentation improvements
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.1.cf" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-1.0.cf" date="1753876800">- Update to 1.52
  - Refactor SVCB to avoid internal use of generic keyNN
  - DELEG documentation and code improvement
  - Fix bug in resolver base selection on non-Unix/Linux platforms
    (CPAN RT#168433)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1756814400">- Update to 1.53
  - Suppress autovivified undefined $rr-&gt;{class} and $rr-&gt;{ttl}
  - Rework test scripts for SVCB and DELEG</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-2.0.cf" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1768824001">- Update to 1.54
  - Resync with IANA DNS parameters registry
  - Resync with IANA DNSSEC algorithms registry
  - Implement DELEGI as derived subtype of DELEG RR
  - Backport DELEG parser to SVCB</changelog>
</package>
<package pkgid="3435f3f165e137f53cdec36770fa2535ecd68cb21e7c3b1161970901cfd3fdb9" name="perl-Net-DNS-Nameserver" arch="noarch">
  <version epoch="0" ver="1.54" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.49-1.0.cf" date="1735300800">- Update to 1.49
  - Add DSYNC package for Generalized Notification
  - EDNS: Add support for ZONEVERSION option
  - Fix "Use of uninitialized value" errors when using TCP connections
    (CPAN RT#157700)
  - Fix Net::DNS::Nameserver: SOA not present in NODATA response
    (CPAN RT#157669)
  - Fix EDNS option structure does not match JSON from $packet-&gt;edns-&gt;print
    (CPAN RT#157195)
  - Fix user-hostile return value from SVCB key methods (CPAN RT#157043)
- Stop running tests verbosely</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.49-2.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.50-1.0.cf" date="1740139200">- Update to 1.50
  - Minor code improvements in Resolver::Base
  - Add RESINFO package for resolver information
  - Documentation revision and reformatting
  - IPv4 loopback may be disabled in IPv6-only configuration (CPAN RT#158714)
  - Fix use of uninitialized value in _send_udp (CPAN RT#158706)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.0.cf" date="1751889600">- Update to 1.51
  - Resync with IANA DNS Parameters registry
  - Add prototype DELEG RR package
  - Minor code and documentation improvements
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.1.cf" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-1.0.cf" date="1753876800">- Update to 1.52
  - Refactor SVCB to avoid internal use of generic keyNN
  - DELEG documentation and code improvement
  - Fix bug in resolver base selection on non-Unix/Linux platforms
    (CPAN RT#168433)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1756814400">- Update to 1.53
  - Suppress autovivified undefined $rr-&gt;{class} and $rr-&gt;{ttl}
  - Rework test scripts for SVCB and DELEG</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-2.0.cf" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1768824001">- Update to 1.54
  - Resync with IANA DNS parameters registry
  - Resync with IANA DNSSEC algorithms registry
  - Implement DELEGI as derived subtype of DELEG RR
  - Backport DELEG parser to SVCB</changelog>
</package>
<package pkgid="3ce6d080bbe7fa39d4c7b7009ff685c8085db1305fd85744924ebca7851b2538" name="perl-Net-DNS-Resolver-Programmable" arch="noarch">
  <version epoch="0" ver="0.009" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-17" date="1680091200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="d8f9eefb70c226e743216b5b21f29ff8b05f88a1768e91fa0d874e48b8df71e5" name="perl-Net-Daemon" arch="noarch">
  <version epoch="0" ver="0.52" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1774267200">- Update to 0.51
  Bug fixes:
  - Fix Socket::INADDR_ANY constant for unix socket client auth (GH#1, GH#27)
  - Fix post_clone() hook - Clone() never called new(), so the
    $self-&gt;{'parent'} check in new() was dead code; added post_clone() method
    that Clone() calls after creating the new object (GH#2, GH#26)
  - Open logfile when filename string is provided via --logfile; OpenLog()
    previously returned the logfile value as-is when it was a defined string,
    causing Log() to fall through to STDERR (CPAN RT#76133, GH#3, GH#25)
  - Reap forked child processes to prevent zombie accumulation; SigChildHandler
    now uses a proper waitpid reaper instead of returning 'IGNORE', fixing
    zombie buildup on Windows/Strawberry Perl after ~64 connections
    (GH#5, GH#23)
  - Fix ReadConfigFile implementation traversing @INC (CPAN RT#123213, GH#8)
  - Detach threads in ChildFunc to prevent memory leaks; thread objects were
    never joined or detached, causing leftover thread mappings to accumulate
    (GH#12, GH#22)
  - Only load threads if forks hasn't already been loaded and threads exists
    (GH#16)
  Improvements:
  - Add post_clone() hook for per-connection initialization; sub-classes can
    override to perform per-connection setup (GH#2, GH#26)
  - Add --listen option to Options() to allow overriding the default listen
    backlog of 10 (GH#4, GH#24)
  Maintenance:
  - Modernize Makefile.PL metadata: add LICENSE, MIN_PERL_VERSION,
    TEST_REQUIRES, upgrade META_MERGE to meta-spec v2, update GitHub URLs
    (GH#28)
  - Modernize CI workflow: upgrade actions/checkout to v4, use
    perldocker/perl-tester images, dynamic Perl version matrix covering 5.8
    through devel, add disttest job (GH#29)
  - Disable t/ithreadm.t for Windows (GH#19)
  - Improve skip messages and detection of ithreads/forks in tests
  - Convert t/base.t to Test::More
  - Apply consistent perltidy formatting
  - Add strict/warnings, replace 'use vars' with 'our'
  - Remove perl 4-ish subroutine calls
- Use %{make_build} and %{make_install}
- Note that Net::Daemon::Test is GPL-2.0-or-later</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1775476800">- Update to 0.52
  Bug fixes:
  - Fix dead $RegExpLock that was never acquired in ithreads mode; the lock
    variable existed but was never actually locked before regexp compilation,
    leaving ithreads unprotected; also fix share() call to pass explicit ref
    for runtime-loaded prototype (GH#33)
  - Fix ithreads auto-detection to gate on Perl 5.10+ and exclude Windows; on
    Perl 5.8.x threads::shared is never loaded, making lock() a no-op; on
    Windows, DuplicateHandle() corrupts Winsock sockets - WSADuplicateSocket()
    is required instead (GH#19, GH#30, GH#34, GH#35, GH#50)
  - Correct $eventId hash key typo in Log.pm that prevented event IDs from
    being logged (GH#36)
  - Fix Done() call in test server Loop method - was called without arguments,
    preventing proper server shutdown (GH#38)
  - Clean up stale test artifacts (log, ndtest.cnt) (GH#40)
  - Harden ReadConfigFile against $@ contamination and $! errors (GH#44)
  - Skip pidfile write when pidfile option is not set, preventing spurious
    empty pidfile creation (GH#45)
  - Close cloned listening socket in ithreads handler threads; Perl ithreads
    dup every open handle into new threads; on Windows closing these at thread
    exit invalidated the parent's handle; also re-add Windows skip with
    root-cause documentation (GH#19, GH#30, GH#46)
  - Address CPAN testers failures in t/reap.t and t/fork.t (GH#48)
  - Skip ithread-detach.t on Perl &lt; 5.10 (GH#49)
  - Verify privilege drop succeeded in Bind(); assigning to $&gt;/$) silently
    fails without permission - the daemon would continue running as root (GH#51)
  - Use POSIX::setuid/setgid for permanent privilege drop in Bind(); the
    previous $&lt; = ($&gt; = $user) left saved-set-user-ID as root, allowing a
    compromised process to regain privileges (GH#55)
  Improvements:
  - Modernize open() calls to 3-arg form with lexical filehandles throughout
    the codebase (GH#41)
  Maintenance:
  - Fix POD typos and remove outdated alpha warning (GH#37)
  - Fix stale --mode=threads references and config example syntax in
    documentation (GH#39)
  - Update ancient FSF address in Net::Daemon::Test copyright (GH#35)
  - Convert server tests from raw TAP to Test::More (GH#42)
  - Convert ithreads tests to Test::More and fix Test.pm fd leak (GH#43)
  - Convert remaining tests (loop.t, loop-child.t, unix_clients.t, forkm.t) to
    Test::More (GH#47)</changelog>
</package>
<package pkgid="ed5536c4b755285c37c3521b24f3b96743f1f67f26c2d1f681a8a984c5e62865" name="perl-Net-FTPSSL" arch="noarch">
  <version epoch="0" ver="0.42" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.42-2" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="48514283ce76d700b3c12e4b0d755728c799ea3441ebe17ce0a8695024bbf927" name="perl-Net-HTTPTunnel" arch="noarch">
  <version epoch="0" ver="0.51" rel="4.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-4" date="1689681600">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="a7724273f7200cb80231eb8370b0fa2ba7886886f7e830e9998b6bb6784cc163" name="perl-Net-IDN-Encode" arch="x86_64">
  <version epoch="0" ver="2.500" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-13" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-17" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-21" date="1714737600">- Adapt to perl-5.38.0 and stricter GCC (rhbz#2241714)</changelog>
</package>
<package pkgid="24b16b0e0381331a60dae9bd6ca0abde35e09165f0655ce39f7c1ca5c27eccd2" name="perl-Net-IP" arch="noarch">
  <version epoch="0" ver="1.26" rel="30.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-30" date="1683288000">- Use SPDX-format license tag
- Switch upstream from search.cpan,org to metacpan.org
- Avoid use of deprecated patch syntax
- Use %license unconditionally
- Package README file</changelog>
</package>
<package pkgid="545f71163d1b7af7827b38a1a009114e6896db3aa3d100d749e209410043ba01" name="perl-Net-LibIDN" arch="x86_64">
  <version epoch="0" ver="0.12" rel="46.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-43" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-46" date="1689163200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="815b405625a5b51d259b96f27d7d79d023fcd9b2fd093254e387c50c19ee19a2" name="perl-Net-SMTP-SSL" arch="noarch">
  <version epoch="0" ver="1.04" rel="20.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-20" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="96808f7dd5d463a4e1b401b1909992784d7306cb8da87fe7095b4603de60f5a7" name="perl-Net-SMTP-TLS" arch="noarch">
  <version epoch="0" ver="0.12" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-2" date="1689768000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f1cafaec5557994df2a0f69639c16d1cf7373f263f74a70bf4b1140d9be2d938" name="perl-Net-SSLeay" arch="x86_64">
  <version epoch="0" ver="1.96" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-4.0.cf" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-5.0.cf" date="1720526400">- BR: openssl-devel-engine on Fedora 41 onwards, at least for now, as the
  build fails in the absence of &lt;openssl/engine.h&gt; (rhbz#2295331)
  (https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-7.0.cf" date="1721736000">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-9.0.cf" date="1742990400">- Fix for test suite compatibility with OpenSSL 3.4
  (https://github.com/radiator-software/p5-net-ssleay/pull/514)
- Drop support for old distributions prior to F-28, EL-8
  - Drop F-26 compatibility patch
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-10.0.cf" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.96-1.0.cf" date="1774180800">- Update to 1.96
  - Skip NPN tests when NPN is disabled in OpenSSL instead of assuming NPN is
    always enabled
  - Update GitHub Actions CI workflow; a number of test jobs were broken
    because some GitHub runners were discontinued, changes in QEMU setup,
    changes in Cygwin, etc.
  - Adjust test 32_x509_get_cert_info.t to match formatting changes in
    OpenSSL 3.4.0 and 3.4.1
  - OpenSSL 3.9.0 and later remove EVP_add_digest()
  - Increase timeout in 62_threads-ctx_new-deadlock.t to allow the test to pass
    on very slow platforms
  - Add missing documentation for STACK_OF() free functions sk_X509_free and
    sk_X509_INFO_free
  - Add $prefx/lib/64 to lib paths in Makefile.PL for Illumos
  - Support vendor-supplied OpenSSL 3.x on VMS and update %ENV modification in
    test 10_rand.t to work on VMS
  - Compiler -D switches Makefile.PL sets are no longer added to the MakeMaker
    CCFLAG attribute because of portability reasons; the switches are now
    passed either via WriteMakefile() or appending them to the
    'perl Makefile.PL ...' DEFINE argument
  - Update GitHub Actions CI testing:
    - Perl on Ubuntu 24.04: Add Perl 5.38, 5.40 and 5.42, add OpenSSL 3.3, 3.4
      and 3.5 minor releases, add LibreSSL 3.9, 4.0 and 4.1 release branches
    - Alpine Linux: Remove 3.15, 3.16 and 3.17; Add 3.19, 3.20, 3.21 and 3.22
    - Freebsd: Add 14.3 and replace 13.2 with 13.5
    - OpenBSD: Add 7.6 and 7.7. Remove 7.2 and 7.3
    - NetBSD: Add 10.1 and replace 9.3 with 9.4
  - Update test 62_threads-ctx_new-deadlock.t to work with LibreSSL 4.1.0
  - Support SSL_CTX_set1_sigalgs_list and SSL_CTX_set1_client_sigalgs_list
  - Support SSL_set1_sigalgs_list, SSL_set1_client_sigalgs_list,
    SSL_get_sigalgs and SSL_get_shared_sigalgs, and add the function
    SSL_CTX_set_cert_cb
  - Add test file 67_sigalgs.t for the sigalgs functions</changelog>
</package>
<package pkgid="0027f476ca146436f6b388abe6787afad9d50350e38cbeda7ccfa321441046aa" name="perl-Net-Server" arch="noarch">
  <version epoch="0" ver="2.018" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.014-6" date="1726574400">- Only initialize existing Net::SSLeay methods
  - https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
  - https://rt.cpan.org/Public/Bug/Display.html?id=154333
  - https://github.com/rhandom/perl-net-server/pull/38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.015-1" date="1769083200">- Update to 2.015
  - Compatibility fix to work with MakeMaker prior to 6.58 (GH#35)
  - Update META info from dzil (CPAN RT#94977)
  - Compatibility fix to work with Net::SSLeay prior to 1.34 (GH#38)
  - Multiplex fix for Perl 5.40.x (CPAN RT#172029)
  - Compatibility fix to work with Socket.pm prior to 1.93
  - Remove all bindv6only sniffing; always use setsockopt to set IPV6_V6ONLY
    flag appropriately based on {ipv}
  - Honour {ipv6_package} preference, if specified
  - Fix to work without deprecated "Socket6.pm" module (IO::Socket::IP can
    handle everything now)
  - Fix {reverse_lookups} with {udp_true}
  - Fix tests where "localhost" is not listed as IPv6 loopback
  - Add more various {ipv} and NO_IPV6 tests
  - Fix comments, wordings, messages, and POD (CPAN RT#85052)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.016-1" date="1769688000">- Update to 2.016
  - Honour platform-provided IPV6_V6ONLY value
  - Fix $xflags NIx_* logic emulation
  - Make stub honour wantarray context invocation
  - Don't require ipv6_package to run routines
  - Show correct line number if stub routine dies
  - Warn clean safe_* routines
  - Avoid "string" eval
  - Allow caller to import any Proto routine
  - Allow to import all exportable Socket macros</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.017-1" date="1770638400">- Update to 2.017
  - Address IO::Socket rudely force-importing random symbols
  - Warn-clean IO::Socket::INET6 "Subroutine redefined" spewage
  - Various patches generated with the help of Grok4 xAI
  - Various test suite framework improvements
    - Make test suites return non-zero upon failure
    - Fix IPv6 pre-check for tests
    - Timeout test server if client crashes, instead of rudely mooching on the
      listen port forever in the background
  - Warn-clean for older MakeMaker, such as 6.30
  - Fix POD errors
  - Allow static Proto methods to be imported as normal routines
  - Create Net::Server::IP compatibility wrapper module
  - Honour {ipv6_package} config preference more reliably
  - GetAddrInfoFlags compatibility patch for systems with spoofed networks on
    loopback interfaces using IO::Socket::IP
    - Now IPv4 and IPv6 finally work with OpenVZ or fake loopback or venet0 or
      even on IPv6-only machines even without public routability for that AF_*
      Address Family (these used to fail)
  - Handle special IPv6 behaviours, like OpenBSD and WinXP
  - Emulate IO::Socket::IP {V6Only} behaviour for IO:Socket::INET6
  - Fall back to IO::Socket::INET if no IPv6 module available
  - Various SSLEAY fixes:
    - Add more SSLEAY tests to help with debugging
    - Fixed errors on older Net::SSLeay &lt; 1.49
    - Fix tied SYSREAD $scalar input syntax instead of only ref \$scalar
      sysread FILEHANDLE,SCALAR,LENGTH,OFFSET
    - Fix SSLEAY-&gt;read_until logic
    - Fixed some errors with newer Net::SSLeay &amp; OpenSSL 3.x:
      167772454. error:0A000126:SSL routines::unexpected eof while reading
      167772567. error:0A000197:SSL routines::shutdown while in init
  - Get test suite to pass cleanly on all variations tested:
    - Linux Kernel: 2.6.18, 3.10.0, 4.18.0, 5.14.0, 6.2.16, 6.8.0
    - Flavour: Ubuntu 24.04, Debian 12, Fedora 42, RHEL5/6/7/8/9
    - Windows: Cygwin, MinGW64, WinXP, Win7, Win10, Win11, GitBash
    - Other OS: OpenBSD, Darwin, MacOSX, FreeBSD
    - OpenSSL 0.9.8e, 1.0.1e, 1.0.2k, 1.1.1k, 3.2.2, 3.5.1
    - Hypervisor: OpenVZ, KVM, VirtualBox, VirtIO, VMWare, Docker
    - Dual-Stack Networks: IPv4, IPv6, IPv*, IPv4-Only, IPv6-Only
    - Perl: 5.8.8 5.10.1 5.16.3 5.26.3 5.32.1 5.34.1 5.36.0 5.38.2 5.40.2
    - Net::SSLeay: 1.30, 1.35, 1.55, 1.88, 1.94
    - Socket: 1.78, 1.82, 1.97, 1.99, 2.010, 2.027, 2.031, 2.040
    - Socket6: None, 0.19, 0.23, 0.28, 0.29
    - IO::Socket::IP: None, 0.21, 0.38, 0.41
    - IO::Socket::INET6: None 2.51 2.56 2.66 2.67 2.69 2.72 2.73</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.018-1" date="1771416000">- Update to 2.018
  - Add more ipv6_package tests
  - Fix t/Options.t to expect 0.0.0.0 on IPv4-only systems
  - Get rid of requires_ipv6() sniffing
  - Make Proto-&gt;object always return a single object
  - Honour {ipv6_package} config preference even for IPv*</changelog>
</package>
<package pkgid="3355eaeb4194705038f8d79885f733b4604ca3e3d3a67153cc4c66963c703c22" name="perl-Net-Telnet" arch="noarch">
  <version epoch="0" ver="3.05" rel="6.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.05-6" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="98af652b7a8512fd7906ac6baaec341231d5aa2912875631c90754d8dc4570ee" name="perl-NetAddr-IP" arch="x86_64">
  <version epoch="0" ver="4.079" rel="26.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-20" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-23" date="1686139200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-24" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-26" date="1705233600">- Socket6 will be dropped by Fedora from Fedora 40 onwards</changelog>
</package>
<package pkgid="ba75c1881c6f6d506752191cc9ca70048b6cdddf14a5b382d9a02ba71ab2e557" name="perl-Number-Compare" arch="noarch">
  <version epoch="0" ver="0.03" rel="35.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-35" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3f568c4fabd50622c17507b0a76199d6fa193eb7bfe53fad1d710c410658cb82" name="perl-Object-HashBase" arch="noarch">
  <version epoch="0" ver="0.015" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-11" date="1670846400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-12" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-1" date="1698062400">- Update to 0.010
  - Documentation fixes (GH#3)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-3" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-1" date="1711108800">- Update to 0.013
  - Add support for Class::XSAccessor when it is installed
  - Documentation fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1724846400">- Update to 0.014
  - Add extra init() functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1725278400">- Update to 0.015
  - Fix double-import bug</changelog>
</package>
<package pkgid="c1312991226fdc890963e0a3109cd64095237a8a059c43fb308d01557f1308eb" name="perl-Object-HashBase-tools" arch="noarch">
  <version epoch="0" ver="0.015" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-11" date="1670846400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-12" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-1" date="1698062400">- Update to 0.010
  - Documentation fixes (GH#3)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-3" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-1" date="1711108800">- Update to 0.013
  - Add support for Class::XSAccessor when it is installed
  - Documentation fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1724846400">- Update to 0.014
  - Add extra init() functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1725278400">- Update to 0.015
  - Fix double-import bug</changelog>
</package>
<package pkgid="31a4aeadef9ac1e0d0e41db33ae652da0a5549e55b1b3ad4f958df48b8c64019" name="perl-Object-ID" arch="noarch">
  <version epoch="0" ver="0.1.2" rel="28.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.2-28" date="1683288000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f565fd8b7aaa80f94fb487a8c0653aca96d535cb3c250c134efa45472e52eafe" name="perl-PAR-Dist" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1683460800">- Update to 0.52
  - Change bug tracker to GitHub issues
  - Quote all version numbers in META.yml files in test *.par files
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1718798400">- Update to 0.53
  - PAR::Dist::blib_to_par quoted the version number of the dist when making
    the PAR file (GH#2)
  - Quote value of "version" in generated META.yml (if there is no (MY)META.yml)</changelog>
</package>
<package pkgid="3b374023b8c9c6ae65c0e847f0ae98537de312e161729710bc797600f7b487bf" name="perl-PPI" arch="noarch">
  <version epoch="0" ver="1.286" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.279-1" date="1724414400">- Update to 1.279
  - Implemented a cache to speed up sibling iteration (GH#287)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.281-1" date="1735387200">- Update to 1.281
  - Framework for recognition of parsing feature activation via:
    - 'use $PERL_VERSION' in code
    - 'use feature' in code
    - 'use $Common::CPAN::Module' in code
    - PPI::Document-&gt;new( feature_mods =&gt; ... )
    - PPI::Document-&gt;new( custom_feature_includes =&gt; ... )
    - PPI::Document-&gt;new( custom_feature_include_cb =&gt; ... )
    - $ENV{PPI_CUSTOM_FEATURE_INCLUDES}
  - Added ability to parse features:
    - signatures, as PPI::Structure::Signature
    - try catch, as PPI::Statement::Compound
- Drop support for using old List::Util versions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.283-1" date="1746360000">- Update to 1.283
  - Allow zero byte documents to have a location
  - Handle simple lists in feature arg decomposing
  - Warn on unknown feature arg decompose instead of die
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.284-1" date="1762257600">- Update to 1.284
  - Fix regex anchors in PPI::Statement::Compound-&gt;type (GH#316)
  - Fix author tests: pod-no404s.t (GH#315)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.286-1" date="1777291200">- Update to 1.286
  - Add support for dotted bitwise operators (GH#322)
  - File opening errors are now reported usefully by PPI::Document
  - Remove the executable bit on several files (GH#323)
  - Fix for performance degradation on initial parse (GH#318)
  - Better reporting of Document-&gt;new input errors</changelog>
</package>
<package pkgid="e86f0db6904d21555887689ed64f2c34c02dbb0a9185d5feff25c1ea041b2cf5" name="perl-PPIx-QuoteLike" arch="noarch">
  <version epoch="0" ver="0.023" rel="3.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1634904000">- Update to 0.018
  - Argument postderef is now fatal
  - Correct generation of 'provides' metadata
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.019-1" date="1637064000">- Update to 0.019
  - Add CONTRIBUTING file
  - Try to quell weird Win32 test failures that seem to occur only in tests
    where I am using 'use open' to put the standard handles into UTF-8 mode;
    the fix (hopefully) is to do this to the Test::Harness handles at run time
    instead of to the standard handles at compile time</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.020-1" date="1647518400">- Update to 0.020
  - Correct and optimize the computation of logical column position (the one
    that takes account of tabs)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.021-1" date="1648987200">- Update to 0.021
  - Recognize postfix deref in '@{[ ... ]}' for determining minimum Perl
    version; this recognizes all forms of postfix dereference, including -&gt;%*,
    -&gt;&amp;*, and -&gt;** (NOTE: for now, this remains a
    PPIx::QuoteLike::Token::Interpolation)
  - Require PPI 1.238 for postfix deref support, and prune code that dealt with
    PPI's old behaviour
  - Postfix %*, &amp;*, and ** do not interpolate
  - Correct perl_version_introduced() for interpolated postfix scalar deref</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.022-1" date="1650110400">- Update to 0.022
  - Remove 'postderef' argument to new(); postfix dereference is always
    recognized</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-1" date="1663329600">- Update to 0.023
  - Update discouragement notice for variables(), and add a TODO in
    t/variables.t for why
  - Correct normalization of ${^FOO} for PPI: if the caret is present the
    braces are not removed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-2" date="1663416000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-3" date="1689681600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="6777ecc92da1025a701eaa36967136581bf8956d377c8f9e3790a6f0ad246328" name="perl-PPIx-Regexp" arch="noarch">
  <version epoch="0" ver="0.091" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.088-4" date="1714737600">- Add workaround for "Subroutine name is a homonym for builtin keyword class"
  in Critic test</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.089-1" date="1747656000">- Update to 0.089
  - The /x modifier should not affect the parse of the replacement string in a
    substitution operator, i.e. the '#' in s/x/#/x does NOT introduce a comment
  - Correct POD link in PPIx::Regexp::Token::Literal
  - Annotate sub class(), since with Perl 5.38 it is a built-in
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.090-1" date="1758542400">- Update to 0.090
  - Explain s///eee... more than 2 'e' modifiers are permitted, and cause the
    result of the expression to be eval-ed n-1 times, where n is the number of
    'e' modifiers
  - Fix typo in comment
- Package new SECURITY policy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.091-1" date="1759924800">- Update to 0.091
  - Avoid "Possible attempt to escape whitespace" warning, which is emitted in
    perl-5.43.2 and forward
  - Revise internal usage of 'PPI::Document'</changelog>
</package>
<package pkgid="2091f16643517dc859c64749cc6a448ac18c80f822e0a62d812fe08ce7fb859e" name="perl-PPIx-Utilities" arch="noarch">
  <version epoch="0" ver="1.001000" rel="48.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001000-48" date="1683547200">- Use SPDX-format license tag
- Extra tests no longer include spell checks
- Use %license unconditionally</changelog>
</package>
<package pkgid="5657f98b806e5590b826c24b2614642eb29fe3258cb637a2a3e1e77bd34e5e22" name="perl-PPIx-Utils" arch="noarch">
  <version epoch="0" ver="0.004" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-9" date="1688731200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-1" date="1746360000">- Update to 0.004
  - Update LICENSE text
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="30c63d7a3f0f162ce9910069ade23e0ccb1997b1ebd8ae828a13cdc13ce26245" name="perl-Package-Anon" arch="x86_64">
  <version epoch="0" ver="0.05" rel="34.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-29" date="1621771200">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-32" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-34" date="1683547200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e137be6475ec925cdc040e921d9ac7353dfe858ea64234a437671addc08c2c18" name="perl-Package-Constants" arch="noarch">
  <version epoch="1" ver="0.06" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.06-27" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="e5a4746c7740af65d4511247fee35bee4989215e26c92f547c8acfe41fde358f" name="perl-Package-DeprecationManager" arch="noarch">
  <version epoch="0" ver="0.18" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-1" date="1676894400">- Update to 0.18
  - Use Sub::Util instead of Sub::Name, which is part of Scalar-List-Utils,
    which itself is already a dependency (GH#3)
- Use SPDX-format license tag
- Use %license unconditionally
- Package CODE_OF_CONDUCT.md
- Drop support for building with List::Util &lt; 1.33 since we require Sub::Util,
  which became available at the same time as List::Util 1.33</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="0434d67f6e8553089d9445da66972e1e5be1db0481a68a53a79f9786647dbe6a" name="perl-Package-Generator" arch="noarch">
  <version epoch="0" ver="1.106" rel="28.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.106-28" date="1680264000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="5dd7dd4fa71c8adf167e5193800dd8c1076227c0764e614a30d30d77f6f37a17" name="perl-Package-Stash" arch="noarch">
  <version epoch="0" ver="0.40" rel="4.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.40-1" date="1645444800">- Update to 0.40
  - Update bundled version of ExtUtils::HasCompiler, for new new Apple include
    paths
- Drop support for EOL distributions prior to EL-7:
  - BR: optional test dependency perl(Package::Anon) unconditionally
  - Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.40-4" date="1683547200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b8f8844599d8a55b9840ca2a51b18f208a9d2fcc5204dfeece0e431b9c628453" name="perl-Package-Stash-XS" arch="x86_64">
  <version epoch="0" ver="0.30" rel="3.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-10" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-13" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.30-1" date="1655121600">- Update to 0.30
  - Miscellaneous tooling updates
  - Fixed redundant argument in sprintf in tests (CPAN RT#143205)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.30-3" date="1683547200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c2f836ac122c72362dce77d44f04cdbd7be7e2b8243b5b7ede224dc55028f5dc" name="perl-PadWalker" arch="x86_64">
  <version epoch="0" ver="2.5" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-6" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-8" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="91d6a509eddfd43a7568e00bea9b124a877870734b35ab872091831b77814d2c" name="perl-Parallel-Runner" arch="noarch">
  <version epoch="0" ver="0.014" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-30" date="1681128000">- Use SPDX-format license tag
- Use https:// source URL
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1714132800">- Update to 0.014
  - Move to Dist::Zilla
  - Switch to Test2::V0</changelog>
</package>
<package pkgid="74367e509ae41787f2e894a678c02d98889afe659e7f44d4ba71f89e55d51758" name="perl-Params-Check" arch="noarch">
  <version epoch="1" ver="0.38" rel="491.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.38-491" date="1684843200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="80524fe5c0addd0505631a7f169b3f8e03c3814e9a090876183305ab7c566384" name="perl-Params-Classify" arch="x86_64">
  <version epoch="0" ver="0.015" rel="18.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-13" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-16" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-18" date="1681214400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="af99d90076aced97862190897481ce9514c0023c41d2a8e84f028136105806e1" name="perl-Params-Coerce" arch="noarch">
  <version epoch="0" ver="0.15" rel="9.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-9" date="1679918400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="77aa840033778e64c3de16d149ff2b11e01d4a2d38899a418563d99c283a940f" name="perl-Params-Util" arch="x86_64">
  <version epoch="0" ver="1.102" rel="11.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.102-7" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.102-11" date="1689076800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="908146ba4a7969274dd7f5bb5ddca0bdd7db010e4cc4d46bfba7f44d5790eadf" name="perl-Params-Validate" arch="x86_64">
  <version epoch="0" ver="1.31" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-3" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-6" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1666526400">- Update to 1.31
  - Include Devel::PPPort 3.68 for compatibility with Perls ≤ 5.8.5 (GH#25)
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b475444964477abf6bd210b6e78bdfa178e75bdf6453824191d693d77be5752a" name="perl-Params-ValidationCompiler" arch="noarch">
  <version epoch="0" ver="0.31" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-1" date="1673179200">- Update to 0.31
  - Require Class::XSAccessor 1.17+ when trying to load it; earlier versions
    cause test failures (GH#27)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="155bebb64ef4e802270fa28a2cc4e1cd432398622f3a03af6b2939c43ea294d1" name="perl-Parse-Distname" arch="noarch">
  <version epoch="0" ver="0.05" rel="5.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-1" date="1649419200">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-2" date="1651147200">- Incorporate feedback from package review (#2073377)
  - perl(strict) is a run-time dependency, not just a test dependency
  - Don't package the tests as documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-5" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e4f5f799892842652eb84e8806b29b2782bacef2cf2d14d5d1728cdd6fbe7a2d" name="perl-Parse-RecDescent" arch="noarch">
  <version epoch="0" ver="1.967015" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.967015-19" date="1689681600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with ExtUtils::MakeMaker &lt; 6.58</changelog>
</package>
<package pkgid="8c202d00879dee5520951813434cfbbe44c4316ab1ea0b3ff74c43453de3b9d7" name="perl-Path-Class" arch="noarch">
  <version epoch="0" ver="0.37" rel="24.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-24" date="1683633600">- Use SPDX-format license tag
- Switch to ExtUtils::MakeMaker flow
- Use %license unconditionally</changelog>
</package>
<package pkgid="bb2b2ef0f0d9ec4ab51aaf684b6cff7ad4695a3e9e68f37f7c7f82dd3087970e" name="perl-Path-FindDev" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5.3-19" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="71825aabc7c55e4704e91828587875dbc66446363c3ff7882e9cd2346ccc3676" name="perl-Path-IsDev" arch="noarch">
  <version epoch="0" ver="1.001003" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001003-19" date="1688990400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="5ccbb2e8b7f8627f60c52d3f18f38d9c85ee943ae6e81c9e01aaea6ad7271a77" name="perl-Path-Tiny" arch="noarch">
  <version epoch="0" ver="0.150" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.146-1" date="1715342400">- Update to 0.146
  - Improved error message spewing to a file in a non-existent directory</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.148-1" date="1742212800">- Update to 0.148
  - Invalid arguments when hash references are expected throw exceptions
  - Fixed problems with exceptions
  - Cross-referenced slurp and lines in documentation
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.150-1" date="1753099200">- Update to 0.150
  - Released with newest Dist::Zilla to avoid xattrs in the tarball</changelog>
</package>
<package pkgid="19366fb9637623b88db264c57b6e4f72db9f72d6c80dd5366fe79a928ac2ea97" name="perl-Perl-Critic" arch="noarch">
  <version epoch="0" ver="1.156" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-2" date="1688990400">- Use SPDX-format license tag for perl-Test-Perl-Critic-Policy sub-package
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-4" date="1695643200">- Fix for Perl::Critic::Policy::Subroutines::RequireArgUnpacking with PPI 1.277
  (GH#1048)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-1" date="1697544000">- Update to 1.152 (rhbz#2244582)
  - Fix a test failure for Subroutines::RequireArgUnpacking (GH#1048)
  - Fix a test failure in t/06_violation.t on Perl 5.39.1 or above (GH#1037)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-3" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-4" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-1" date="1729512000">- Update to 1.154 (rhbz#2320114)
  Enhancements
  - ProhibitedUnusedCapture now recognizes %+, %-, %{^CAPTURE} and
    %LAST_PAREN_MATCH (GH#1065)
  - Fixed a deprecation warning in the extras/perlcritic.el Emacs script
    (GH#1067)
  - RequireExplicitPackage now accepts a use VERSION as the first line
    (GH#1070)
  Fixes
  - Fix some false positives for function calls as a hash index (GH#1071)
  Documentation
  - Clarify package_exemptions rules (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-2" date="1729512001">- Require ExtUtils::Manifest for Perl::Critic::TestUtils::bundled_policy_names()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-1" date="1729684800">- Update to 1.156 (rhbz#2321227)
  - Subroutines::ProhibitManyArgs no longer gets confused by underscores in
    variable names (GH#1027)</changelog>
</package>
<package pkgid="1cc1b31e364722fc37d871aba7f5bd2e4b01043eac8cc0e6af332562e5d0cce2" name="perl-Perl-Critic-Deprecated" arch="noarch">
  <version epoch="0" ver="1.119" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-22" date="1641038400">- Dictionary aspell-en no longer needed for spelling check
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-27" date="1683720000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- No longer need to set LANG for spell check</changelog>
</package>
<package pkgid="8c0fb9f9d6f4886ee8a948e0f014d1585482a0f03192256c5dfac3fdcea9d344" name="perl-Perl-Critic-Lax" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1672574400">- Update to 0.014
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1689768000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="d832be71e2fff9fea603001926ebc6d9f128875482fb9ba62aede48cc354e2d0" name="perl-Perl-Critic-More" arch="noarch">
  <version epoch="0" ver="1.003" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.003-27" date="1688990400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="e350e04fe05cfd488d0f1457415662fdf5e719d6767e1ab1bb1c15ffd4344baf" name="perl-Perl-Critic-Pulp" arch="noarch">
  <version epoch="0" ver="100" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 100-1" date="1760356800">- Update to 100
  - ProhibitUnknownBackslash allow \F new in Perl 5.16
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="918d5872c89b3836d3210c14cbef8050e14bba50ca0ef6a041b19f1f9d8d32aa" name="perl-Perl-Destruct-Level" arch="x86_64">
  <version epoch="0" ver="0.02" rel="35.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-30" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-33" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-35" date="1683720000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8213b5dd8db9b348fe5756788836f374609acdfbac3d08e7b6dfa48b543d6dc2" name="perl-Perl-MinimumVersion" arch="noarch">
  <version epoch="0" ver="1.44" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.40-9" date="1688990400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1" date="1746360000">- Update to 1.44
  - Remove detection for Perl versions older than 5.008, which means that 5.006
    is now the minimum required version that will be reported (GH#7)
  - Fix formatting of the summary printed by the perlver script (GH#14)
  - Recognize the minimum required version for the tr///r flag (GH#25) and
    indented heredocs (GH#27)
  - Recognize the minimum required Perl versions for:
    - The "use re '/flags'" pragma (GH#29)
    - Postfix dereferences (GH#30)
    - The &lt;&lt;&gt;&gt; operator (GH#31)
  - Update LICENSE text
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="5416603513b5861b10943874a6846dfd8aace584d37a3e9fc56eda6d58405ab5" name="perl-Perl-OSType" arch="noarch">
  <version epoch="0" ver="1.010" rel="491.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.010-491" date="1683720000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="cc4c8ca0f6966711885dbe3611614a376cedccc1cbab8e64a8e435ae86641143" name="perl-Perl-PrereqScanner-NotQuiteLite" arch="noarch">
  <version epoch="0" ver="0.9918" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.9918-1" date="1775390400">- Update to 0.9918</changelog>
</package>
<package pkgid="a2997d77eec8a125913dcb28a0992ae2fad480f826b574701bf9c165f97ecb50" name="perl-Perl-Tidy" arch="noarch">
  <version epoch="0" ver="20260204" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250105-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250214-1" date="1739448000">- Update to 20250214 (see CHANGES.md for details) (rhbz#2345575)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250311-1" date="1741780800">- Update to 20250311 (see CHANGES.md for details) (rhbz#2351446)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250616-1" date="1750075200">- Update to 20250616 (see CHANGES.md for details)
- Use %{make_build} and %{make_install}
- Drop workaround for issue with EL-7 dependency generator</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250711-1" date="1752494400">- Update to 20250711 (see CHANGES.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250711-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250912-1" date="1757764800">- Update to 20250912 (see CHANGES.md for details) (rhbz#2394876)
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260109-1" date="1767873600">- Update to 20260109 (see CHANGES.md for details) (rhbz#2428067)
- Change Pod::Html dependency to Pod::Simple::XHTML, which is now the preferred
  back-end option for HTML generation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260109-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260204-1" date="1770120000">- Update to 20260204 (see CHANGES.md for details) (rhbz#2436356)</changelog>
</package>
<package pkgid="eb33ef1c9b1b6f4e9ca19af3a8e8da1a25e0ccb8d01a43451ed18074db123693" name="perl-Perl6-Caller" arch="noarch">
  <version epoch="0" ver="0.100" rel="28.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100-28" date="1683806400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f7e528a1792622ee0bdd409bfc1bc0fb323d9a6995756b81e1c4bdb7f4ac63f1" name="perl-Perl6-Junction" arch="noarch">
  <version epoch="0" ver="1.60000" rel="28.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60000-28" date="1683806400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="155d48fbac27c6f8261aa6a6783a98a57f64524f5a4a44dc043fec1625d7afde" name="perl-Perl6-Slurp" arch="noarch">
  <version epoch="0" ver="0.051005" rel="28.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.051005-28" date="1683806400">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="036f44a9b45c29fdc990cdac82f525a655d1cf7fd5b95cb83d8c889c0027cfe4" name="perl-PerlIO-gzip" arch="x86_64">
  <version epoch="0" ver="0.20" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-15" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-18" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-21" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0ca56e5894ac6924c6f1d5902e26f592aa76b93df69d192502d07aa759f74081" name="perl-PerlIO-utf8_strict" arch="x86_64">
  <version epoch="0" ver="0.010" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-3" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1641643200">- Update to 0.009
  - Mark functions that croak as noreturn</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-3" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-1" date="1666872000">- Update to 0.010
  - Re-release with updated ppport.h for 5.8.5 compatibility
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4199edf623b4b7903fc5b0e42a6761727ea1b77b03e5de67cc436de31aefbdd8" name="perl-PlRPC" arch="noarch">
  <version epoch="0" ver="0.2020" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.2020-15" date="1674561600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.2020-16" date="1695297600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="cb208da6d15c45566864beb2541020d9a9700a77d1889f246d255da2c8504b24" name="perl-Pod-Coverage" arch="noarch">
  <version epoch="0" ver="0.23" rel="29.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-29" date="1688990400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="6950b2cd1044bc6ceecfc141f6a29c42354fa40540ac9b9d52af40b6e235e193" name="perl-Pod-Coverage-Moose" arch="noarch">
  <version epoch="0" ver="0.08" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-23" date="1683720000">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Additional build requirements for optional tests
- Fix permissions of installed files
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1693051200">- Update to 0.08
  - Fix "Attempt to call undefined import method with arguments" error on
    perl 5.39.1
- Add patch to use US English spelling of LICENSE in pod</changelog>
</package>
<package pkgid="f6663a82943aef87f6dd16ce92c7526c63645f19f1b79220d6dbf3fba9083c0e" name="perl-Pod-Coverage-TrustMe" arch="noarch">
  <version epoch="0" ver="0.002001" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002000-1" date="1708689600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002001-1" date="1743249600">- Update to 0.002001
  - Encode test output when needed to avoid wide character warnings
  - Fix tests when Pod::Coverage is installed but not Test::Pod::Coverage
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="3ab6f342b7ee56fe12ac149c6cdd35149b53d3893ff50f4052342e11462380a9" name="perl-Pod-Coverage-TrustPod" arch="noarch">
  <version epoch="0" ver="0.100006" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100006-1" date="1672574400">- Update to 0.100006
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag
- Always assume we have rpm ≥ 4.9
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100006-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="c1113cb675c66897dee63fba478383c1bafa1b8d6c90c412ece1b5b8bdc5578e" name="perl-Pod-Escapes" arch="noarch">
  <version epoch="1" ver="1.07" rel="490.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.07-490" date="1688731200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0fc90aa7f65cebef796790d4c56f418cac2adcb5c0c0a90cca171791746c5a38" name="perl-Pod-Eventual" arch="noarch">
  <version epoch="0" ver="0.094003" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094003-1" date="1672574400">- Update to 0.094003
  - Update author contact info
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094003-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="38625c221fd2d0710206e1390fc17a1b196a1f6b4515d731a2636d41d45b96c3" name="perl-Pod-MinimumVersion" arch="noarch">
  <version epoch="0" ver="50" rel="37.fc37"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 50-37" date="1689768000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="9323faff673d1f78c46cc37f332a30f156d9046f3a079bb9b24dd4261cf98485" name="perl-Pod-Readme" arch="noarch">
  <version epoch="0" ver="1.2.3" rel="14.fc37"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 1.2.3-14" date="1683892800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="7ba5be03f23991dd80c1637d8c4aa7e236eb455173faa05212fbe7edfaa7a191" name="perl-Pod-Simple" arch="noarch">
  <version epoch="1" ver="3.48" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.46-1" date="1747051200">- Update to 3.46
  - XHTML: =over without =item should render as a blockquote
  - Add support for underlined text U&lt;&gt; formatting
  - Make 'temp' name checking more succinct
  - GitHub: Fix and add tests
  - Makefile.PL: Add missing 'warnings' prereq
  - Add select method compatible with Pod::Select
  - Modernize htmlbat.t, corpus.t
  - Fix links, typos, acknowledgments
  - Add documentation on subclassing
  - Fix version checking
  - Fix version number
  - Use rel2abs instead of abs_path
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.47-1" date="1747396800">- Update to 3.47
  - No git-related files in MANIFEST (GH#183)
  - Rename method and field to avoid conflicts (GH#185)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.48-1" date="1775476800">- Update to 3.48
  - Add sections to manpage URLs (GH#193)
  - Better fallback when no HTML::Entities (GH#189)
  - Don't call each on an anonymous hash (GH#191)
  - Fix encoding of Unicode URL fragments (GH#194)</changelog>
</package>
<package pkgid="e89ccd0b603a84b151784408cbf04c5d595d24b25414769a7ad005d7ad2ee030" name="perl-Pod-Spell" arch="noarch">
  <version epoch="0" ver="1.27" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-1" date="1678795200">- Update to 1.26
  - Encode output as UTF-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1729512000">- Update to 1.27
  - Fix encoding of output as UTF-8
  - Fix link in Pod</changelog>
</package>
<package pkgid="0c2d1aa88c221ffbf4cb6ee677a8db2f21488e996e65ee53068b8fa25496d41a" name="perl-Pod-Strip" arch="noarch">
  <version epoch="0" ver="1.100" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100-8" date="1683892800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="555993054a237a97bfdf4dc6044b27114b391209ad55da0f0ac089d6ce65dd7a" name="perl-Probe-Perl" arch="noarch">
  <version epoch="0" ver="0.03" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-27" date="1688644800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="aa9560473302cf8333062deaad0a0214c7974c77a545a34876b8e6b8989f3358" name="perl-Readonly" arch="noarch">
  <version epoch="0" ver="2.05" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-21" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop ancient obsoletes/provides for old tests sub-package</changelog>
</package>
<package pkgid="d4ba6141dbacf2362571d37a7550db55fe2577ffc8e9a2883334da3919394d16" name="perl-Readonly-XS" arch="x86_64">
  <version epoch="0" ver="1.05" rel="46.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-40" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-43" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-46" date="1683633600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="f657e86a64b736e6beea731fc9a8a4e2661e78bf2d05419f33f99b16d68900bb" name="perl-Ref-Util" arch="noarch">
  <version epoch="0" ver="0.204" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.204-17" date="1683720000">- SPDX migration
- Use %license unconditionally</changelog>
</package>
<package pkgid="8a4f3fccbda4364edb650a98b481790d928ff8abc768a6d662da69c33b86cfc2" name="perl-Ref-Util-XS" arch="x86_64">
  <version epoch="0" ver="0.117" rel="18.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-12" date="1621857600">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-15" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-18" date="1683806400">- SPDX migration</changelog>
</package>
<package pkgid="0524b929d1aef6216f8f9aed78e60651228dba472ac53a72f4b613409af583a8" name="perl-Regexp-Common" arch="noarch">
  <version epoch="0" ver="2024080801" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2017060201-21" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2024080801-1" date="1723204800">- Update to 2024080801
  + Eliminate 'use vars'
  + Update the MySQL comment pattern</changelog>
</package>
<package pkgid="a7082ef7ff683e074ca5e07e5b3244e2a2ed4fe681cf4eb3fd792e098df5d290" name="perl-Regexp-Parser" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1774008000">- Update to 0.24
  Features:
  - Add support for Perl 5.10+ regex constructs (GH#8):
    \K (keep), \R (linebreak), \h/\H, \v/\V, named captures (?&lt;name&gt;...),
    named backrefs \k&lt;name&gt;, possessive quantifiers
  - Add \g{N} and \g{-N} backreference syntax from Perl 5.10+ (GH#16)
  - Add /a, /d, /l, /u charset modifier flags from Perl 5.14+ (GH#16)
  - Add /n no-capture flag from Perl 5.22 (GH#16)
  - Support Perl 5.14+ (?^:...) caret flag reset syntax (GH#4)
  - Add optional flags parameter to regex() method (GH#5)
  Bug Fixes:
  - Treat trailing dash in character class as literal (GH#6)
  - Compare character values numerically in range validation (GH#3)
  - Support POSIX character classes with visual method (GH#7)
  Maintenance:
  - Migrate test suite from deprecated Test.pm to Test::More (GH#15)
  - Add round-trip and error rejection test suites; tests 200 -&gt; 409 (GH#19)
  - Modernize CI: consolidate into single testsuite.yml, update actions, use
    perldocker containers (GH#17)
  - Set minimum Perl version to 5.16
  - Add CLAUDE.md for AI-assisted development (GH#19)
  - Switch to GitHub Actions for CI
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-1" date="1774180800">- Update to 0.25
  Features:
  - Add recursive pattern support: (?R), (?0), (?1), (?+1), (?-1), (?&amp;name) for
    named subpattern recursion (GH#22)
  - Add Python-compatible regex syntax: (?P&lt;name&gt;...) named capture, (?P=name)
    named backref, (?P&gt;name) named recursion (GH#22)
  - Add \o{NNN} octal escape support from Perl 5.14+ (GH#20)
  - Add (*VERB) backtracking control verbs: FAIL, F, ACCEPT, SKIP, PRUNE,
    COMMIT, THEN, MARK with optional :arg (GH#20)
  - Add (?|...) branch reset groups from Perl 5.10+ (GH#20)
  - Add (*positive_lookahead:...) and other alphabetic assertion forms from
    Perl 5.28+ (GH#20)
  - Add (*script_run:...), (*sr:...), (*atomic_script_run:...), (*asr:...)
    script run assertions from Perl 5.28+ (GH#20)
  - Add /xx flag support via (?xx:...) from Perl 5.26+ (GH#20)
  Maintenance:
  - Migrate t/08regex_flags.t and t/09backref_flags.t from deprecated Test.pm
    to Test::More - all test files now use Test::More (GH#21)
  - Update CLAUDE.md and modernize Parser.pm POD (GH#21)
  - Add CLAUDE.md and MANIFEST.SKIP to MANIFEST
  - Tests now 620 across 16 test files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-1" date="1774267200">- Update to 0.26
  Features:
  - Add \Q...\E (quotemeta) support for literal quoting in regular expressions
    (GH#23)
  - Add \b{type}/\B{type} extended boundary support including \b{gcb}, \b{wb},
    \b{sb}, and \b{lb} from Perl 5.22+ (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1774526400">- Update to 0.27
  Features:
  - Add (?(DEFINE)...) definition-only groups for defining named subpatterns
    without matching (GH#27)
  - Add (?(&lt;name&gt;)...) and (?('name')...) named capture conditions with new
    'define' and 'grouppn' object types (GH#27)
  Maintenance:
  - Replace `use base 'Exporter'` with `use parent 'Exporter'`; base is
    discouraged since Perl 5.12 (GH#25)
  - Remove unused 'use NEXT' from Objects.pm; recommend 'next::method' from mro
    (core since 5.10) instead (GH#25)
  - Remove duplicate 'use strict; use warnings;' in Parser.pm (GH#25)
  - Fix META_MERGE URLs to point to cpan-authors/Regexp-Parser with HTTPS and
    fix dead wiki.github homepage URL (GH#25)
  - Expand t/11errors.t from 17 to 240 tests covering all 28 RPe_* error codes
    in Diagnostics.pm (GH#26)
  - Add AI_POLICY.md for transparency</changelog>
</package>
<package pkgid="bd6be05b4c5df24df64730668a5df8bb9d241c9abdf0012381c89deb6dea15cd" name="perl-Regexp-Trie" arch="noarch">
  <version epoch="0" ver="0.02" rel="15.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-15" date="1684238400">- Use SPDX-format license tag
- Drop support for building with ancient distributions prior to EL-7
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="fab7bca4444b352a95c9b917169575dd310e9d1d415bb919f6107c28c29cf568" name="perl-Role-Tiny" arch="noarch">
  <version epoch="0" ver="2.002004" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002004-8" date="1683806400">- Use SPDX-format license tag
- Drop conflict with perl-Moo versions more than 10 years old</changelog>
</package>
<package pkgid="c7996c359dee2c9737c6a55e49b49d85ed38a365f4f468d9f2f0b3d15c8f731c" name="perl-SQL-Statement" arch="noarch">
  <version epoch="0" ver="1.414" rel="10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.414-10" date="1688644800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="58a896faf0976fc2e3bd841d019aad0a32876272ad47e8732f7b6e5afa0c9254" name="perl-SUPER" arch="noarch">
  <version epoch="0" ver="1.20190531" rel="14.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.20190531-14" date="1683201600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="8a8aafedf177d98ca5327aba649b6f278cb533148a222f474aa7a705dd6d1adc" name="perl-SVN-Notify" arch="noarch">
  <version epoch="0" ver="2.87" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.87-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="209cd352b59cf18502675e8aa90469c367b008e65cf5db5e3073c42175caa195" name="perl-Safe-Isa" arch="noarch">
  <version epoch="0" ver="1.000010" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000010-16" date="1684238400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="865a607726904cba77378bc7af0fb7198e35775ecf8cd502d888e56a2d41882a" name="perl-Scalar-Properties" arch="noarch">
  <version epoch="0" ver="1.100860" rel="34.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100860-31" date="1646913600">- Work around package note files breaking t/release-dist-manifest.t (#2062685)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100860-34" date="1683892800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="bad925174d944a40e1f7e44fe5cc388f562842e38bbfcabb68a2c10f4dcb8c2f" name="perl-Scope-Guard" arch="noarch">
  <version epoch="0" ver="0.21" rel="24.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-24" date="1680264000">- Use SPDX-format license tag
- Use author-indepentdent source URL</changelog>
</package>
<package pkgid="605b3e1a6151b085a98dca3c21e2b402a48176f46c0005810902aa1e5c96d9eb" name="perl-Search-Elasticsearch" arch="noarch">
  <version epoch="0" ver="8.12" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.717-1" date="1659009600">- Update to 7.717
  - Stable release for Elasticsearch 7.17</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.00-1" date="1672315200">- Update to 8.00
  - Stable release for Elasticsearch 8.5
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.00-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12-1" date="1706184000">- Update to 8.12
  - Stable release for Elasticsearch 8.12</changelog>
</package>
<package pkgid="c1e3471c88cc1667377cf3da63bcaaea2cbdd3d0ad22afb093dc09e0dcf57e12" name="perl-Sendmail-AccessDB" arch="noarch">
  <version epoch="0" ver="1.04" rel="4.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-4" date="1688644800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Drop support for building with ancient db4 packages
- Use %license unconditionally</changelog>
</package>
<package pkgid="37d4f3fa839b5666d8be0d48be56e4aacbb7301bb9f24ce32540d930383fe912" name="perl-Sendmail-PMilter" arch="noarch">
  <version epoch="0" ver="1.27" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.21-1" date="1657022400">- Update to 1.21
  - New maintainership (CPAN/GWHAYWOOD)
  - Test suite updates
  - Implement set multi-line reply function (CPAN RT#125090)
  - Documentation updates (CPAN RT#125040)
    - Fix POD errors
    - Add COPYRIGHT-&gt;LICENCE (file,link,=head1)
    - Remove obsolete doc/
  - SETSENDER-&gt;CHGFROM etc. (CPAN RT#115352)
  - ithread and postfork dispatcher fixes (CPAN RT#85833)
  - sig{CHLD}='DEFAULT'; (CPAN RT#85826)
  - Macro and headers fixes (CPAN RT#84941)
  - Define constant SMFIF_NONE (CPAN RT#78865)
  - Dummy functions setdbg() and settimeout() return 1 (CPAN RT#50144)
  - Fix memory leak in ithread dispatcher (CPAN RT#54794)
  - Removed requirement for Sendmail::Milter (CPAN RT#23921)
  - Full support for protocol negotiation, including support for setting milter
    data buffer sizes
  - Add get_sendmail_option() to read configuration file options
  - Propose to insist on Milter Protocol Version 6 in V1.21
  - Removed enable_chgfrom and some other some cruft
  - Partial support for negotiation
  - Comments invited via CPAN issues
  - Added file CONTRIBUTING
  - Added file COPYRIGHT
- New upstream maintainer GWHAYWOOD
- Switch upstream from search.cpan.org to metacpan.org
- Drop old obsolete of perl-Sendmail-Milter</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-1" date="1667217600">- Update to 1.23
  - Replace deprecated IO::Socket::INET6 with IO::Socket::IP (CPAN RT#144401)
  - Most callbacks were not recognized unless the appropriate flags were set
    during the negotiate callback (CPAN RT#144971, CPAN RT#144273)
  - Packaging improvements (CPAN RT#130084)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.24-1" date="1671192000">- Update to 1.24
  - Make no reply to MTA from the abort callback: such replies seem to cause
    problems for Postfix (CPAN RT#145263)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.24-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1707134400">- Update to 1.27
  - Proper handling of die (CPAN RT#150737)
  - Fix child_exit and add milter_exit (CPAN RT#150611)
  - Setconn with unix socket permissions (CPAN RT#150270)</changelog>
</package>
<package pkgid="e500a828e552e76a2120d62c29846f1aa8de564a224b24f94ef3b194d0fac506" name="perl-Set-Scalar" arch="noarch">
  <version epoch="0" ver="1.29" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-25" date="1688644800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b50a9d5c5f29aa078028e3313ab6646465a4ec0b62124d40775ef9922c456588" name="perl-Socket6" arch="x86_64">
  <version epoch="0" ver="0.29" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-10" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-11" date="1625659200">- Drop support for deprecated gethostbyname2
  https://src.fedoraproject.org/rpms/perl-Socket6/pull-request/2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-14" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-17" date="1679659200">- Use SPDX-format license tag
- Aviod deprecated patch syntax</changelog>
</package>
<package pkgid="c560fb6639d5f4058c5e2d173f2c011828b2f2d6765f15b9e266ecb77ca91aec" name="perl-Software-License" arch="noarch">
  <version epoch="0" ver="0.104007" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104003-1" date="1684497600">- Update to 0.104003
  - Add Artistic 1.0 Perl license and make Perl license use it
  - Remove extra "59" from LGPL-2.1
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104004-1" date="1684929600">- Update to 0.104004
  - Rename Perl Artistic License to avoid confusion in detecting license</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104005-1" date="1700568000">- Update to 0.104005
  - Explictly require perl v5.12.0, which was already effectively required
    because of upstream libraries
  - Update author metadata
- This release by RJBS ⇒ update source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104006-1" date="1707652800">- Update to 0.104006
  - Use valid SPDX identifier for BSD license
  - Undefine SSLeay spdx_expression
  - Update URL to SSLeay license
- This release by LEONT ⇒ update source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104007-1" date="1746360000">- Update to 0.104007 (rhbz#2363949)
  - Update GPL v1 text to current version
  - CPAN::Meta v1 "gpl" license is explicitly GPL v2
  - Improve recognition for Apache 1.1 and 2.0+
- Use %{make_build} and %{make_install}
- Drop explicit provides for support of old dependency generator</changelog>
</package>
<package pkgid="e7012d18a17fbb45919a35cf1211b6624448988eb800729b64497cf6cef84e1a" name="perl-Software-License-CCpack" arch="noarch">
  <version epoch="0" ver="1.11" rel="39.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-34" date="1684238400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-38" date="1706270400">- Drop test dependency Test::Vars from Fedora 39 onwards since Test::Vars is
  FTBFS with Perl 5.38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-39" date="1726574400">- Test::Vars is fixed</changelog>
</package>
<package pkgid="1c22c774954043f616ea1e5721b046487682e9f93c3ae8f3532ddf9c9626a4f8" name="perl-Specio" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-6" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-7" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1735041600">- Update to 0.49
  - Attempting to import any structured type caused a confusing
    "Can't store CODE items" error
  - Removed the "this is alpha" warning from Specio::Library::Structured; it's
    as production-ready as it's going to get</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1739966400">- Update to 0.50
  - Fixed a bug in the Int type that caused it to accept numbers like
    124512.000000000123, which when stringified, are stringified as integers
    (GH#22)
- Drop EL-7 support
  - Always have List::Util ≥ 1.33
  - Always have Sub::Util
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1750420800">- Update to 0.51
  - Made it possible to force Specio to use only pure Perl dependencies, by
    setting the SPECIO_IMPLEMENTATION environment variable to "PP" (GH#23)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1754913600">- Update to 0.52
  - Really made it possible to force Specio to use only pure Perl dependencies;
    the changes in 0.51 were incomplete, so lots of places still loaded the
    Clone (XS) module (GH#23)
- Package new GOVERNANCE.md, SECURITY.md and SUPPORT.md files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1759924800">- Update to 0.53
  - Fixed a test failure when trying to open $^X on some platforms</changelog>
</package>
<package pkgid="58a9b4f155bd0cfdb14f2d5333cc277712b05922da92ce7ef90d7be4bfb7f86a" name="perl-Spellunker" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-27" date="1683201600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="9db5996ed13bd437cc02411f98d1706a28d894f0d3d92af0830d58b41118767e" name="perl-Spiffy" arch="noarch">
  <version epoch="0" ver="0.46" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.46-27" date="1683201600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="bad4ce3ec2b820ff4d060decbf3cab1580ed311817fe329f34103609b4aa5a79" name="perl-String-Escape" arch="noarch">
  <version epoch="0" ver="2010.002" rel="39.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2010.002-39" date="1688472000">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1a15ada27bf76edc6d260886eff5393af388d9a9f0427d944933c74652da35d0" name="perl-String-Format" arch="noarch">
  <version epoch="0" ver="1.18" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.18-16" date="1684584000">- Use SPDX-format license tag
- Drop support for building with ExtUtils::MakeMaker &lt; 6.5702
- Use %license unconditionally</changelog>
</package>
<package pkgid="82566a4d2014a76075df8ef534f0bbb1ed59f95ba9c02c291cbfa70dbe98c95b" name="perl-Sub-Exporter" arch="noarch">
  <version epoch="0" ver="0.991" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.989-1" date="1672574400">- Update to 0.989
  - Update author contact info
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.989-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.990-1" date="1690027200">- Update to 0.990
  - Fixes to keep working in v5.39 (GH#17, GH#18)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.991-1" date="1700827200">- Update to 0.991
  - Make the requirement for perl v5.12.0 explicit; previously, it was only
    implicit because of prerequisites</changelog>
</package>
<package pkgid="73e016e7d54775f7243d0210cddc70f51ea5fcc36ccd71b86cf5a1b2d17a175b" name="perl-Sub-Exporter-ForMethods" arch="noarch">
  <version epoch="0" ver="0.100055" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100055-1" date="1672574400">- Update to 0.100055
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100055-2" date="1689422400">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="f25b8d3151d29dae98e5a8d6824d2c3c74365dd7e19535da2f4680cbf04aaf7b" name="perl-Sub-Exporter-Progressive" arch="noarch">
  <version epoch="0" ver="0.001013" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.001013-21" date="1683892800">- Spec tidy-up
  - Use SPDX-format license tag
  - Use %license unconditionally</changelog>
</package>
<package pkgid="7402a5b88f6cd6e6513e5b5e1ab6627961dbd415f8d4ce3103450909cc1570c6" name="perl-Sub-Identify" arch="x86_64">
  <version epoch="0" ver="0.14" rel="22.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-16" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-19" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-22" date="1680523200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1d66c256494f9b6318f3151f99d1bde652594fdcfc61b842c729f51ea8441f66" name="perl-Sub-Info" arch="noarch">
  <version epoch="0" ver="0.002" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002-21" date="1688299200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3b40f8a007fb1fb829357c9f04a221df44f6f8a2a8235511b6071b1d409df375" name="perl-Sub-Install" arch="noarch">
  <version epoch="0" ver="0.929" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.929-1" date="1672574400">- Update to 0.929
  - Update packaging and metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.929-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="44b2bf786d9587808a01da752088c318634c93f14f56dee8f3427e956defa83e" name="perl-Sub-Name" arch="x86_64">
  <version epoch="0" ver="0.28" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-12" date="1678104000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1682769600">- Update to 0.27
  - Skip quote-separator tests on newer perls that deprecate this behaviour</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-2" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-6" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.28-1" date="1734350400">- Update to 0.28
  - Fix version comparison logic for forward compatibility
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
</package>
<package pkgid="75c17264fc511ab7498f6ff025a9938c9cc212960299487864c36f03c011978d" name="perl-Sub-Quote" arch="noarch">
  <version epoch="0" ver="2.006009" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.006009-1" date="1755777600">- Update to 2.006009
  - Fix new warning for bare \ in qw()
  - Fix documentation for hintshash option
- Use %{make_build} and %{make_install}
- Assume Sub::Util always available</changelog>
</package>
<package pkgid="a0a470b0ac26654e95b71f60f8bd193211b219cb6e58a0e3a06027da7d084556" name="perl-Sub-Uplevel" arch="noarch">
  <version epoch="1" ver="0.2800" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.2800-19" date="1683979200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally
- Package examples</changelog>
</package>
<package pkgid="5f84bb7c3990c63478edcf5f8cdf91458a2d620e00d054c7e02f9b5a6fe843ca" name="perl-Symbol-Util" arch="noarch">
  <version epoch="0" ver="0.0203" rel="32.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0203-32" date="1684584000">- Use SPDX-format license tag
- Drop workaround for ancient hunspell versions prior to Fedora 14
- Use %license unconditionally</changelog>
</package>
<package pkgid="971aa271614e8c0279e3e183641c2daa45ea830a80c04fc6fdb2e46d8d18f69e" name="perl-Sys-HostAddr" arch="noarch">
  <version epoch="0" ver="0.993" rel="4.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.993-4" date="1689768000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="3017a524406d0a714caf5a8fcf63d00fc3db0b6f72d6eaca28c056baa5be2611" name="perl-Sys-Hostname-Long" arch="noarch">
  <version epoch="0" ver="1.5" rel="26.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.5-26" date="1684670400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="0c71cad77416c4ffccc490c935604a7ff3045c40f13cae8e2c2fa2084ff3c43b" name="perl-Taint-Runtime" arch="x86_64">
  <version epoch="0" ver="0.03" rel="48.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-42" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-45" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-48" date="1683979200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="002157fc1b2454c3fd0f66f61c36fae2aae03cd5af7676fb4c75b56c8c739ec1" name="perl-Taint-Util" arch="x86_64">
  <version epoch="0" ver="0.08" rel="32.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-30" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-32" date="1684756800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- BR: Pod::Man ≥ 2.26 to avoid man page issue (#998447)</changelog>
</package>
<package pkgid="31ee2f1d2f5e0169a03e7a647407953bda205affb5f7efebec350a4861039fbe" name="perl-Task-Weaken" arch="noarch">
  <version epoch="0" ver="1.06" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-16" date="1684065600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="d5cc0fde9001f76c04fbfa876cc49cafc0391fc8f3f595e4b5471de2afa4481a" name="perl-Term-ReadKey" arch="x86_64">
  <version epoch="0" ver="2.38" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-10" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-13" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-16" date="1684065600">- Port Configure.pm to C99</changelog>
</package>
<package pkgid="d4d30497aabc4de8e85776ccff59e42ad7176836de1730ce16d9596d05f4add0" name="perl-Term-ReadLine-Gnu" arch="x86_64">
  <version epoch="0" ver="1.47" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-2" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-7" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-8" date="1737633600">- Fix for C23 compatibility (GH#32, rhbz#2341037)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.47-1" date="1751889600">- Update to 1.46
  - Add readline-8.3 support
    - New functions: rl_reparse_colors, rl_print_keybinding
    - New variables: rl_full_quoting_desired, rl_macro_display_hook,
      rl_completion_rewrite_hook
    - New state values for rl_readline_state: RL_STATE_READSTR
  - Sample code updates
    - Import almost all examples from the GNU Readline Library
    - Use "/usr/bin/env" for sh-bang
    - Add eg/README.md
  - Make the check for being in emacs to be more like bash (GH#28)
  - Add a wrap function on every function that has Keymap as an argument
  - Add some constant functions
    - Add macro functions for rl_readline_state: RL_SETSTATE(),
      RL_UNSETSTATE(), RL_ISSTATE()
    - Export READERR
  - Fix for compilation in C23 mode (GH#32)
  - POD updates
    - Fix description of add_defun() in BUGS section (GH#23)
    - Fix formatting
  - GitHub actions: update OS and perl-version matrix</changelog>
</package>
<package pkgid="ea87bba02199482749b83fd4c66c4c68447bcd79889f05a69d16a08c6c4f2999" name="perl-Term-Table" arch="noarch">
  <version epoch="0" ver="0.028" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.020-1" date="1722945600">- Update to 0.020
  - Fix use cycle between Test-Simple and Term::Table now that Test2::Suite was
    merged into Test-Simple
  - Fix test broken on Test::More</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.022-1" date="1723032000">- Update to 0.022
  - Fix warnings in HashBase.t
  - Some initial support for non-ASCII systems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-1" date="1730030400">- Update to 0.023
  - t/honor_env_in_non_tty.t requires Test2::Tools::Tiny &gt;= 1.302097; use
    Test::More if not available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-2" date="1731240000">- Don't unbundle Object::HashBase from F-41 onwards (module in Perl Core)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-1" date="1735387200">- Update to 0.024
  - Additional changes to t/honor_env_in_non_tty.t, and adding debugging</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-519" date="1751976000">- Use %{make_build} and %{make_install}
- Assume that weak dependencies are always available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.025-1" date="1756900800">- Update to 0.025
  - Typo fix in comment
  - Hide some diagnostics when tests run in perl core</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.027-1" date="1763380800">- Update to 0.027
  - Fix terminal size detection
- Run the test suite within expect so that we get usable IO handles</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.028-1" date="1764244800">- Update to 0.028
  - Replace '//' with '||' for 5.8 support</changelog>
</package>
<package pkgid="af59b813551e2561d9ec2be9e4062b921602dd1debff4bb2fcf18bd7c78ad411" name="perl-Test-API" arch="noarch">
  <version epoch="0" ver="0.010" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-17" date="1684756800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="f28246bc182f199b3754b3ac16cce9c570ff65c7043a6c788922abfd2f3853f3" name="perl-Test-Assert" arch="noarch">
  <version epoch="0" ver="0.0504" rel="39.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0504-36" date="1647000000">- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0504-39" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e4b6de791852d21154e2d2c861f5df3e11c14b2e4a40b79f3bef8adbae63e0bf" name="perl-Test-Base" arch="noarch">
  <version epoch="0" ver="0.89" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.89-16" date="1688212800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="05398396b2fe4e372fed59b886204bed1d532aa14256e99a56a0d4a674a62558" name="perl-Test-CPAN-Meta" arch="noarch">
  <version epoch="0" ver="0.25" rel="33.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-33" date="1689163200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="dc037874e3c8043d546dbcfa2e3eae387e681a69333dbc47515b78b0dc2d97eb" name="perl-Test-CPAN-Meta-JSON" arch="noarch">
  <version epoch="0" ver="0.16" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.16-25" date="1684065600">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Use %license unconditionally</changelog>
</package>
<package pkgid="79ad0ce7617a35fc1e75ba5685c791f198254b984b6e026d0c9e0ed57248494d" name="perl-Test-CPAN-Meta-YAML" arch="noarch">
  <version epoch="0" ver="0.25" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-25" date="1684843200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="9258990e823811de6d0d08deb931080dc962d33d5b2b4d0792c559a1a3ee532c" name="perl-Test-CheckChanges" arch="noarch">
  <version epoch="0" ver="0.14" rel="38.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-38" date="1684843200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="dbc52d2742b5b334f89e0b374a20a9afed38e8bf8566f8e485187f20f3039405" name="perl-Test-CheckDeps" arch="noarch">
  <version epoch="0" ver="0.010" rel="37.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-37" date="1684843200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="507b2b6db158c7f3161a081eea465731b94c15391f91a24ae694da0d3c171316" name="perl-Test-ClassAPI" arch="noarch">
  <version epoch="0" ver="1.07" rel="24.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.07-24" date="1688212800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="dfc267d3a93acc743b77ecb5b1ce0322c330fd799d72944b84df754d38a54b53" name="perl-Test-CleanNamespaces" arch="noarch">
  <version epoch="0" ver="0.24" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-19" date="1684065600">- Use SPDX-format license tag
- Weaken dependency on Role::Tiny where possible
- Use %license unconditionally</changelog>
</package>
<package pkgid="8632b0ce9574729d848c6d35071e0efc2e51e9efb64ef477eae18ab3f314433d" name="perl-Test-Deep" arch="noarch">
  <version epoch="0" ver="1.205" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.204-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.205-1" date="1743508800">- Update to 1.205
  - Add "use v5.12" to Test::Deep, just for clarity
  - Fix a test so that if an "A" module is in @INC, the tests still pass
- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker &lt; 6.78</changelog>
</package>
<package pkgid="e2523acb368ee8328151ee24c10a3c63fd730e3aa628ca695c49299eae740321" name="perl-Test-Differences" arch="noarch">
  <version epoch="0" ver="0.7200" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7100-1" date="1697198400">- Update to 0.71
  - Stop pointless use of taint mode in tests, so tests pass when perl is
    built without taint support
  - Document and test different behaviour regarding Booleans in perl 5.38.0
    compared to earlier versions (GH#21)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7100-5" date="1724155200">- Fix version handling for build with different locales set</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7200-1" date="1751889600">- Update to 0.72
  - Changes to tests only, so tests pass when you have a new perl that supports
    bools, but an old Data::Dumper that doesn't
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="060c94717b5b9fa98cbcc550471f3b2d9450d253f8146c14488b28883bddf854" name="perl-Test-Directory" arch="noarch">
  <version epoch="0" ver="0.052" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.052-1" date="1677499200">- Update to 0.052
  - Fix error message on failure to remove directory in 'clean'
    (GH#2, CPAN RT#130570)
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="35e7d98f76b4873195bbf70f27fc7d47aa7b8eaea21bbae3586ad844c3cf2f25" name="perl-Test-DistManifest" arch="noarch">
  <version epoch="0" ver="1.014" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-23" date="1646136000">- Work around package note files breaking t/02manifest.t (#2059504)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-25" date="1662465600">- Drop workaround for package note files from Fedora 37 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-27" date="1688126400">- Use SPDX-format license file</changelog>
</package>
<package pkgid="493a1e5f85825605e485806528252440a78e9e7c929e9542f42dc8f0f522c4fa" name="perl-Test-Distribution" arch="noarch">
  <version epoch="0" ver="2.00" rel="42.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.00-42" date="1684929600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b65b6ce037738b8dcc49417b6663d5556c4f385327500cfced21944fd954bae1" name="perl-Test-EOL" arch="noarch">
  <version epoch="0" ver="2.02" rel="8.fc37"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 2.02-8" date="1684929600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="daf8f64a717d895307a13d226ead9fac8c5546bf717db23d49399b9c374fdf4b" name="perl-Test-Exception" arch="noarch">
  <version epoch="0" ver="0.43" rel="23.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.43-23" date="1684152000">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="28630186a33d76ab8dc397d4f1befaab33645126f09a726883316c1c1844ea7c" name="perl-Test-FailWarnings" arch="noarch">
  <version epoch="0" ver="0.008" rel="30.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-30" date="1685620800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4268dddd27312c5346d385940770f4a53fdc78dc34a2debd6b9d6b7ee03f8b1e" name="perl-Test-Fatal" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1762516800">- Update to 0.018
  - Now requires perl v5.12.0
  - Now tolerant of false exceptions coming from a boolean-overloaded object
- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker &lt; 6.78</changelog>
</package>
<package pkgid="ff52b2d40c9a0b7b096fe1aa3e0695c73fa4029f41df24def6d4e85b3963e75b" name="perl-Test-File" arch="noarch">
  <version epoch="0" ver="1.99.5" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.3-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.3-4" date="1691496000">- Fix FTBFS in Rawhide due to %rpmversion macro becoming an rpm built-in
  (rhbz#2229872)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.4-1" date="1735905600">- Update to 1.994
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.5-1" date="1744632000">- Update to 1.995
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="b419f6b6b72f263943118e6114921e80ec962b1ee0e88be6f7568aca63f633b6" name="perl-Test-File-ShareDir" arch="noarch">
  <version epoch="0" ver="1.001002" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001002-19" date="1688126400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="33bdde2824daaa2a0f41887d72f672caed5e799c63caede0ca20a290f758f5a1" name="perl-Test-HTML-Lint" arch="noarch">
  <version epoch="0" ver="2.32" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-10" date="1627128000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-11" date="1643198400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-12" date="1654603200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-13" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-14" date="1669809600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-15" date="1674475200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-16" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="48bf2217480c76c7c5df2a2b61c2fd90bf79ea9f1c35698171c9102319ded12e" name="perl-Test-Harness" arch="noarch">
  <version epoch="1" ver="3.52" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.44-491" date="1688126400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.46-1" date="1691496000">- Update to 3.46
  - Colour the "ok"s as well
  - Skip symlink tests on msys2
  - Use absolute path for executable tests
  - Space-quote executable if it has spaces
  - Avoid using Errno::EINTR directly for platforms without it
  - Stop calling import on App::Prove plugins</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.47-1" date="1691928000">- Update to 3.47
  - Add missing negation in EINTR check
  - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.48-1" date="1696334400">- Update to 3.48
  - Accept TAP version 14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.50-1" date="1723636800">- Update to 3.50
  - Simplify runtests for easier extension
  - Tidy up core dump file
  - Simplify injecting of @INC paths
  - Prevent double summary on bail-out
  - Prevent bail_out summary when no handler for it is defined
  - Better check for t/ directory in Perl handler</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.52-1" date="1746360000">- Update to 3.52
  - Support additional indicators on block scalars in YAML
  - Fix string comparisons with $] to use numeric comparison instead
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="9dedbf530afa4ab4332325f2c8ebe37f301aa0201533702b8f23a4160e7ca15a" name="perl-Test-HasVersion" arch="noarch">
  <version epoch="0" ver="0.014" rel="27.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-22" date="1685016000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-27" date="1725624000">- Add manpage for test_version</changelog>
</package>
<package pkgid="21cee4c879c489993032915fcfdd26236d65a6a762d397299c979a2d91c31bf9" name="perl-Test-InDistDir" arch="noarch">
  <version epoch="0" ver="1.112071" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.112071-21" date="1689768000">- Use %license unconditionally</changelog>
</package>
<package pkgid="54b0b15c6777df1074251092c25510ed1b6460e0be6a74cb106979231f7609e5" name="perl-Test-Kwalitee" arch="noarch">
  <version epoch="0" ver="1.28" rel="14.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-13" date="1685016000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-14" date="1727956800">- Avoid pulling in aspell</changelog>
</package>
<package pkgid="a5fda0b11c3e190b3aad88fb420101736e50f1f46d154e847250acebbb0e7a11" name="perl-Test-Kwalitee-Extra" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="20.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-20" date="1685016000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="fba805848cb93f1259b296899a50c5390d233eeaac562ba9a9b78a3a2d65f67a" name="perl-Test-LeakTrace" arch="x86_64">
  <version epoch="0" ver="0.17" rel="11.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-7" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-11" date="1680264000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="01ebde35ea67d738caf039f3f80c0930c5f7c995d253c65b3a3e98ec98173919" name="perl-Test-LongString" arch="noarch">
  <version epoch="0" ver="0.17" rel="26.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-26" date="1688040000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="24035b120055a631edb3ba37bbab7adc6028cfda8b830d1a1801d1474229a9e1" name="perl-Test-Manifest" arch="noarch">
  <version epoch="0" ver="2.026" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.023-5" date="1684152000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.024-1" date="1704801600">- Update to 2.024
  - Refresh distro</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.025-1" date="1736078400">- Update to 2.025
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.026-1" date="1744632000">- Update to 2.026
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="9ff44bda5fc7f349f16992c8e75a01a8771e2d8fee951a6b5903e7ec3417b820" name="perl-Test-Memory-Cycle" arch="noarch">
  <version epoch="0" ver="1.06" rel="23.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-23" date="1684152000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="eeb028baa83c48977aaaad0016f2a3ed5db8b35e2240a2e3d7eedf3445f40bfc" name="perl-Test-MinimumVersion" arch="noarch">
  <version epoch="0" ver="0.101083" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101083-1" date="1672574400">- Update to 0.101083
  - Update packaging and metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101083-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b62101a3b2316989b4c45c2d32d201675e6daa33c6b5df54bb92e56ae4fda802" name="perl-Test-MockModule" arch="noarch">
  <version epoch="0" ver="0.180.0" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.178.0-1" date="1714392000">- Update to 0.178.0
  - Simplify CI workflow (GH#61)
  - Multiple improvements (GH#62)
  - Add protection to _replace_sub (GH#60)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.179.0-1" date="1725019200">- Update to 0.179.0
  - Bump Module::Build requirement (GH#65)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.180.0-1" date="1751544000">- Update to 0.180.0
  - Remove Software::License from runtime dependencies (GH#67, GH#68)</changelog>
</package>
<package pkgid="d67caffb848501e331e0e6690ab7a251fe97498c70cf08b9c6008775b48f68f0" name="perl-Test-Modern" arch="noarch">
  <version epoch="0" ver="0.013" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-25" date="1685016000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="ec41b82d6f210de1588b3fc59c61700705060b609bd61832d129d019ac0cd316" name="perl-Test-Mojibake" arch="noarch">
  <version epoch="0" ver="1.3" rel="32.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-27" date="1685102400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-31" date="1706270400">- Drop BR: perl(Test::Vars) from Fedora 39 onwards as Test::Vars is FTBFS with
  Perl 5.38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-32" date="1726574400">- Test::Vars is fixed</changelog>
</package>
<package pkgid="dec98168eb7fedc157302f9ff943870374f7fed2342dcdc4ad5e6071e592dcba" name="perl-Test-Moose" arch="x86_64">
  <version epoch="0" ver="2.4000" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2203-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2205-1" date="1690113600">- Update to 2.2205 (rhbz#2224800)
  Tests
  - Adjust the expected list of UNIVERSAL methods, to account for changes in
    perl 5.39.1: some things, like the import method, could end up existing
    based on the perl version or based on a prerequite loading UNIVERSAL.pm
    (GH#183)
- Revert test change for Perl 5.39 if our perl is older than 5.22</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2206-1" date="1690113601">- Update to 2.2206
  - Fix parsing error in test in 2.2205 release</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-1" date="1705838400">- Update to 2.2207
  - Remove test dependency on Test::CleanNamespaces (GH#184)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-2" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-5" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6.1" date="1745150400">- Add provide for Moose::Conflicts, used in test suite for MooseX-Types
- Use %{make_build} and %{make_install}
- Drop Obsoletes/Provides for perl-Class-MOP, merged into perl-Moose in Fedora
  15 (2011)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4000-1.0" date="1751889600">- Update to 2.4000
  Documentation
  - Clarified some wording regarding the interactions between attribute
    configuration options "init_arg" and "required" (GH#187)
  Other
  - The release schedule and numbering scheme has changed; see
    Moose::Manual::Support</changelog>
</package>
<package pkgid="022b5c8f2ee43accf3e0cb4e17d4775094f9b7d9792d5d89d65c901235a8b711" name="perl-Test-More-UTF8" arch="noarch">
  <version epoch="0" ver="0.05" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-2" date="1687867200">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="627a6961816756d1f66ba263dff03ed087e58680f0545ef60bd605c00f1e6ea1" name="perl-Test-Most" arch="noarch">
  <version epoch="0" ver="0.38" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.38-1" date="1664020800">- Update to 0.38
  - Stop permanently altering Test::More's export list (CPAN RT#73299)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.38-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="da85c36bc5a868372f2f87a0124b67dab58e5f9da855ab81754142ada8bc4bfb" name="perl-Test-Mouse" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-21" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-22" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-1" date="1722772800">- Update to 2.5.11
  - Use Devel-PPPort 3.59 (GH#113)
  - Mark "builtin" as foreign (GH#123)
- Update bundled ppport.h to version 3.62</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-4" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-5" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.0-1" date="1761825600">- Update to 2.6.0 (rhbz#2407306)
  - Update minimum perl version from 5.8 =&gt; 5.10 (GH#112)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-1" date="1766232000">- Update to 2.6.1 (rhbz#2424094)
  - Provide empty import on Mouse::Deprecated for imported Moose test
    (GH#120, GH#127)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.2-1" date="1775390400">- Update to 2.6.2 (rhbz#2455030)
  - Fix the conversion from floating point number to string with quadmath Perl
    (GH#126)</changelog>
</package>
<package pkgid="fe55a8f908fef78b9db0dbc58611e50555538f40763b1cb8ede1fffab1facac4" name="perl-Test-Needs" arch="noarch">
  <version epoch="0" ver="0.002010" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002009-1" date="1622030400">- Update to 0.002009
  - Fix tests when @INC includes directories that shouldn't have their archname
    or version subdirectories added
  - Fix test compatibility with Windows
  - Fix warnings from Test::Builder if Test::Needs is loaded first, and is used
    to check for a Test module
  - Fix location in code reported when a module check fails
  - Support short forms of perl versions
  - Support perl versions greater than 5
  - Fix handling of v-string versions on perl 5.6</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002010-1" date="1674475200">- Update to 0.002010
  - Split main test into three separate scripts
  - Avoid outputting multiple plans if used with no_plan
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5c3572b14935c55ddbdceaf16e7e57e30ea093abdfc8d62b1e9165ed7eff6c8d" name="perl-Test-NoTabs" arch="noarch">
  <version epoch="0" ver="2.02" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.02-17" date="1685102400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="2830cf091990e15541c1a5e2315300e18bb188b1437d6bcc7054ac0536eb3d09" name="perl-Test-NoWarnings" arch="noarch">
  <version epoch="0" ver="1.06" rel="5.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-1" date="1627473600">- Update to 1.06
  - Clarify docs around tests without a plan
  - Documentation cleanups and typo fixes
  - Minor code cleanups
  - use warnings in tests
  - Skip fork test if perl can't fork
  - Note conflicts with Carp::Always in documentation
  - Made had_no_warnings turn off the checking at END time for use with
    done_testing based tests with no test count; also added docs
- Use %license unconditionally
- Distribution no longer includes Extra Tests
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-5" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2c860239b431e9fa36ed8ea872f7c09b631d2d358e0ecd3f2982915c1cc18f75" name="perl-Test-Object" arch="noarch">
  <version epoch="0" ver="0.08" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-17" date="1687867200">- Use SPDX-format license tag
-0 Use %license unconditionally</changelog>
</package>
<package pkgid="502d19ff78fcb53a649182fe518b935383922955411f98d8b5da009558ba563e" name="perl-Test-Output" arch="noarch">
  <version epoch="0" ver="1.036" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.034-1" date="1688558400">- Update to 1.034
  - Remove unnecessary -T from pod tests: now that v5.38 allows you to compile
    without taint support and those perls won't run if they see a -T, these
    tests needlessly fail there
  - Correct spelling mistakes (GH#10)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.034-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.035-1" date="1735905600">- Update to 1.035
  - Distro refresh and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.036-1" date="1744718400">- Update to 1.036
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="28bf188f805891c5ace17d1db5ed4189081c574bf797ba67fec6efeeda3584f3" name="perl-Test-Perl-Critic" arch="noarch">
  <version epoch="0" ver="1.04" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-14" date="1640952000">- Use %license unconditionally
- No spell checking done in package build</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-19" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b26f455b55ac3edc24bc498037a4eebdc6a1c08f2b8b8288700d0e3706955bdd" name="perl-Test-Perl-Critic-Policy" arch="noarch">
  <version epoch="0" ver="1.156" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-2" date="1688990400">- Use SPDX-format license tag for perl-Test-Perl-Critic-Policy sub-package
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.150-4" date="1695643200">- Fix for Perl::Critic::Policy::Subroutines::RequireArgUnpacking with PPI 1.277
  (GH#1048)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-1" date="1697544000">- Update to 1.152 (rhbz#2244582)
  - Fix a test failure for Subroutines::RequireArgUnpacking (GH#1048)
  - Fix a test failure in t/06_violation.t on Perl 5.39.1 or above (GH#1037)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-2" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-3" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-4" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-1" date="1729512000">- Update to 1.154 (rhbz#2320114)
  Enhancements
  - ProhibitedUnusedCapture now recognizes %+, %-, %{^CAPTURE} and
    %LAST_PAREN_MATCH (GH#1065)
  - Fixed a deprecation warning in the extras/perlcritic.el Emacs script
    (GH#1067)
  - RequireExplicitPackage now accepts a use VERSION as the first line
    (GH#1070)
  Fixes
  - Fix some false positives for function calls as a hash index (GH#1071)
  Documentation
  - Clarify package_exemptions rules (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-2" date="1729512001">- Require ExtUtils::Manifest for Perl::Critic::TestUtils::bundled_policy_names()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-1" date="1729684800">- Update to 1.156 (rhbz#2321227)
  - Subroutines::ProhibitManyArgs no longer gets confused by underscores in
    variable names (GH#1027)</changelog>
</package>
<package pkgid="3a72f490272e7172906d7790ee11eeecea0da36ca2cf227e969d06dce7af9c38" name="perl-Test-Pod" arch="noarch">
  <version epoch="0" ver="1.52" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-16" date="1687867200">- Use SPDX-format license tag
- Switch upstream from search.cpan,org to metacpan.org</changelog>
</package>
<package pkgid="d60a7ace79b0de9a36dbb8d6d977419ab95a7f8ac89224fb58a4de2bb5b053a8" name="perl-Test-Pod-Coverage" arch="noarch">
  <version epoch="0" ver="1.10" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10-25" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9f08b30f40a24e1c9c3c55df70c8315c765e0dd1821448c27168ca7fc466cdd1" name="perl-Test-Portability-Files" arch="noarch">
  <version epoch="0" ver="0.10" rel="18.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-15" date="1687780800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-18" date="1714737600">- Test::Vars unavailable after Fedora 39</changelog>
</package>
<package pkgid="52e91c77a19f1a8e5f3a3dc0f18f0864c0a01d68c64e069420c8b493bab1fdd4" name="perl-Test-Prereq" arch="noarch">
  <version epoch="0" ver="2.005" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.003-11" date="1685102400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.005-1" date="1735905600">- Update to 2.005
  - Refresh distro
  - Move to BRIANDFOY user
  - Add SECURITY.md policy
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="9302589575b8d1961aad7e0050ab55d3fdb89baa6836dba174deaf5b183dfcfa" name="perl-Test-Regexp" arch="noarch">
  <version epoch="0" ver="2017040101" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2017040101-21" date="1684152000">- SPDX migration</changelog>
</package>
<package pkgid="56c64d887a34d2f7a11affceac548421c368fc8a8c20bc29bd066fd746c77131" name="perl-Test-Requires" arch="noarch">
  <version epoch="0" ver="0.11" rel="11.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-11" date="1678104000">- Use SPDX-format license tag
- Drop decade-old obsoletes/provides for old tests sub-package
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="f3892d01f2a0037c74691ee3536fd1d98254ac37b15ceb154f544e03a35698e8" name="perl-Test-RequiresInternet" arch="noarch">
  <version epoch="0" ver="0.05" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-25" date="1684238400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="dc0e85d2c5ff6f700d1c8088f3036685c4781a6b9f771748cadcd904a0618492" name="perl-Test-Script" arch="noarch">
  <version epoch="0" ver="1.31" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-1" date="1754395200">- Update to 1.30
  - Documentation improvements (GH#42)
  - Fix bug where implicit function export would happen regardless of which
    functions were explicitly exported (GH#45, GH#46)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1755000000">- Update to 1.31
  - Fix bug introduced in 1.30 where exports were not happening correctly in
    legacy mode (GH#47)</changelog>
</package>
<package pkgid="e5049a24c5aaa8e0dcd67710ac4b8eea9462a2835532d6c916fa3e1ce4df03ad" name="perl-Test-Signature" arch="noarch">
  <version epoch="0" ver="1.11" rel="29.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-26" date="1647000000">- Work around FTBFS triggered by package note feature</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-29" date="1685102400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="ea4f26c764dfe406e3fa29ef9fff61404722e67f213a5d689b6f05491c4e1ff6" name="perl-Test-Simple" arch="noarch">
  <version epoch="3" ver="1.302219" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302209-1" date="1737633600">- Update to 1.302209
  - Don't use base as much (GH#1021)
  - Use PerlIO::get_layers without loading PerlIO.pm (GH#1022)
  - Move try_sig_mask to separate file to avoid always loading POSIX (GH#1023)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302210-1" date="1743336000">- Update to 1.302210
  - Fix typo in Test2::Util::Trace docs
  - Documentation fixes throughout for affect vs. effect
  - Test2::Tools::Warnings warns called in void context
  - Remove unnecessary empty list assignments
  - Calculate CAN_SIGSYS when called rather than as a constant
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302211-1" date="1746187200">- Update to 1.302211
  - Fix broken links in pod for Test2::Event and Test2::Event::Generic (GH#1035)
  - Fix broken link in pod for Test2::Manual::Tooling::TestBuilder (GH#1033)
  - Better error message if you use done_testing twice
  - Test2::Compare: Link to base class for Test2::Compare::* (GH#1038)
  - Test2::Manual::Anatomy::Event: Small typo in link (GH#1037)
  - Test2::EventFacet::Info::Table: Fix link to Test2::API::Context (GH#1036)
  - Test2::Manual::Anatomy::Context: Fix link to test2_stack function (GH#1034)
  - Spelling correction (GH#1042)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302212-1" date="1747569600">- Update to 1.302212
  - Add a workaround for Test::Class::Moose</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302213-1" date="1747656000">- Update to 1.302213
  - Fix duplicate words in Changes file (GH#1044)
  - Fix spelling issue (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302214-1" date="1748174400">- Update to 1.302214
  - Fix typo in documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302214-2" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302216-1" date="1763294400">- Update to 1.302216
  - Fix typos
  - Fix undef string bug in Test::Tester</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302218-1" date="1765195200">- Update to 1.302218
  - Add Test2::V1 bundle</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302219-1" date="1765368000">- Update to 1.302219
  - Fix downstream test not to install Test2::Suite
  - Fix documentation mistakes</changelog>
</package>
<package pkgid="a27140743fba1dbb3791e25231a73503e8bdb23944507b2cf4b28f6f5ba90522" name="perl-Test-Specio" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-6" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-7" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1735041600">- Update to 0.49
  - Attempting to import any structured type caused a confusing
    "Can't store CODE items" error
  - Removed the "this is alpha" warning from Specio::Library::Structured; it's
    as production-ready as it's going to get</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1739966400">- Update to 0.50
  - Fixed a bug in the Int type that caused it to accept numbers like
    124512.000000000123, which when stringified, are stringified as integers
    (GH#22)
- Drop EL-7 support
  - Always have List::Util ≥ 1.33
  - Always have Sub::Util
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1750420800">- Update to 0.51
  - Made it possible to force Specio to use only pure Perl dependencies, by
    setting the SPECIO_IMPLEMENTATION environment variable to "PP" (GH#23)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1754913600">- Update to 0.52
  - Really made it possible to force Specio to use only pure Perl dependencies;
    the changes in 0.51 were incomplete, so lots of places still loaded the
    Clone (XS) module (GH#23)
- Package new GOVERNANCE.md, SECURITY.md and SUPPORT.md files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1759924800">- Update to 0.53
  - Fixed a test failure when trying to open $^X on some platforms</changelog>
</package>
<package pkgid="d57bd2db5570e623febb4a76c1e4fca0e1c0e68063e927606d1831fa1cb05796" name="perl-Test-Spelling" arch="noarch">
  <version epoch="0" ver="0.25" rel="13.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-13" date="1685102400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="cb2694f298894ce8f088f00af23fa4950de7b36ea43f2b0aef73766a57301c18" name="perl-Test-SubCalls" arch="noarch">
  <version epoch="0" ver="1.10" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10-17" date="1685188800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4fabc44652c81b68d8845e6035d2b6027187aad0f45a7ea75ff006ac1821e99f" name="perl-Test-Synopsis" arch="noarch">
  <version epoch="0" ver="0.17" rel="7.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-1" date="1639396800">- Update to 0.17
  - Mention related module Test::Synopsis::Expectation in docs (GH#22)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-3" date="1647000000">- Work around FTBFS triggered by package note feature</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-7" date="1684238400">- Use SPDX-format license tag
- Bump Test::Spelling version requirement to 0.12 as per upstream</changelog>
</package>
<package pkgid="55e6bfba019846fdf960bf58bffbb2adec9f2ce5635fb4ae419a55fc19ba8dcf" name="perl-Test-Taint" arch="x86_64">
  <version epoch="0" ver="1.08" rel="13.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-10" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-13" date="1687780800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="141124e12db6cbb109a87bfe4e77de271d5ef512a39906b954c24df4aef1e430" name="perl-Test-TrailingSpace" arch="noarch">
  <version epoch="0" ver="0.0601" rel="6.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-1" date="1630065600">- Update to 0.0601
  - Split File::TreeCreate off to its own distribution
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-6" date="1685361600">- SPDX migration</changelog>
</package>
<package pkgid="3c44de83a29647fdeb347a91abc1775cab6e51961401731f045c45a7718bf2e5" name="perl-Test-TypeTiny" arch="noarch">
  <version epoch="0" ver="2.010001" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.0" date="1744804800">- Update to 2.008001
  Bug Fixes:
  - The Optional type constraint on its own, will now be treated the same as
    Optional[Any]; previously, when used for named parameters, it would fail to
    generate predicate methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.1" date="1745496000">- Fix test compatibility with MooseX-Types 0.51 (GH#176)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-1.0" date="1746100800">- Update to 2.008002
  Bug Fixes:
  - MooseX-Types 0.51 broke Type::Tiny's ability to reliably detect if Moose
    types were being used; this release fixes that</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-2.0" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008003-1.0" date="1756814400">- Update to 2.008003
  Bug Fixes:
  - Make sure methods fake-inherited from Moose (if it's loaded) are a last
    resort
  Other:
  - Slightly streamlined `Type::Tiny::can` and `Type::Tiny::AUTOLOAD`
  - When dumping structures via Data::Dumper (mostly in error messages),
    suppress any warnings Data::Dumper would emit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008004-1.0" date="1760702400">- Update to 2.008004
  Documentation:
  - Type::Tiny pod syntax fix
  Other:
  - Added: Type::Tiny::Duck (used by HasMethods) now includes a
    new_intersection constructor</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008005-1.0" date="1763726400">- Update to 2.008005
  - Minor optimization for Type::Params: sometimes it would construct an
    arrayref of hashref from the slurpy arguments to a function and then check
    that the arrayref it created was an arrayref, or check the hashref it
    created was a hashref; those checks seem unnecessary - if they had ever
    failed it would indicate something deeply wrong with Perl itself, so these
    superfluous checks are now avoided
  - Minor optimization for Type::Params: sometimes it would wrap a 'goto' in a
    'do' block for no reason, which could potentially slow down the call as
    Perl might create a new lexical context unnecessarily; it is unlikely to
    make a measurable difference</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008006-1.0" date="1764244800">- Update to 2.008006
  - Minor optimization for non-XS type check code for Enum types: if there are
    only a small number of valid strings (five or under), check using 'eq' and
    'or' operators instead of compiling a regexp to check against them all at
    once; this can be controlled by passing the 'use_eq' attribute to the
    Type::Tiny::Enum constructor, but is otherwise automatic</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010000-1.0" date="1767182400">- Update to 2.010000
  Added:
  - Added: Add 'check_coerce' method to Type::Coercion
  - Added: Add 'check_coerce' method to Type::Tiny
  - Added: Add environment variables to affect how 'signature_for' checks
    appear in stack traces, debugging, and profiling
  - Added: Type::Params args objects now provide __TO_LIST__, __TO_ARRAYREF__,
    and __TO_HASHREF__ methods
  - Added: Type::Params now provides hooks for the event of wrapping a sub in a
    signature
  Documentation:
  - Update NEWS file
  - Update Type::Tiny::Manual::Policies with planned changes for Type::Tiny 3
  - Add security policy to Type::Tiny::Manual::Policies
  - Fix syntax in some of the documentation for Type::Params
  - Update documentation to potential future changes to coercions in
    Types::Standard
  - Document that Type::Tiny::Enum defines its own sorter
  Test Suite:
  - Skip t/20-modules/Type-Tie/06clone.t on very old Perls
  - Add test suggestion dependencies on Devel::Hide and namespace::clean
  Other:
  - If you lexically import 't' from Type::Registry, then it will no longer be
    tied to the caller's per-package type registry
  - Type::Tiny::Enum now throws an exception if you try to pass a sorter
    coderef to the constructor
  - Minor optimization to avoid wrapping certain inlined checks in do {...}
    blocks</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010001-1.0" date="1767787200">- Update to 2.010001
  - Fix for $LIST_SEPARATOR changes breaking Type::Coercion, Types::Common,
    Types::Standard</changelog>
</package>
<package pkgid="3ef060aeafe5cc3a8b607dda88914fd25997434376ddc949a5f7d3372b733461" name="perl-Test-Unit-Lite" arch="noarch">
  <version epoch="1" ver="0.12.02" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.12.02-1" date="1665144000">- Make rpm version reflect upstream version better (rhbz#2132720)
- Assume build with rpm ≥ 4.9
- Use SPDX-format license tag
- Use %license unconditionally
- Use mktemp to create GNUPGHOME</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.12.02-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="f13e8b4153afed6fe788b3ec86ca52c1eabd50f7a7184663a3d249830479e86c" name="perl-Test-UseAllModules" arch="noarch">
  <version epoch="0" ver="0.17" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-25" date="1685448000">- Use SPDX-format license tag
- Line endings don't need fixing</changelog>
</package>
<package pkgid="fd60d41e07db6af9d97d4da7b67684af8f36188aa0ee3d47bf36ec88216205ce" name="perl-Test-Valgrind" arch="noarch">
  <version epoch="0" ver="1.19" rel="23.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-22" date="1684324800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-23" date="1690718400">- Fix FTBFS in Fedora 39 due to failing t/20-bad.t (rhbz#2222854)</changelog>
</package>
<package pkgid="3d75f810101bf7ded748f9eb14d5af9f597e9955250d579a54644db180073eae" name="perl-Test-Vars" arch="noarch">
  <version epoch="0" ver="0.017" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-9" date="1685448000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1726574400">- Update to 0.017
  - Support new opcodes introduced in 5.37 development cycle: PADSV_STORE
    and AELEMFASTLEX_STORE (GH#52)
  - Return build system to ExtUtils::MakeMaker (GH#54)
- Switch to ExtUtils::MakeMaker flow</changelog>
</package>
<package pkgid="7a9576ff570e52d9f4fd4431e0c83a86a034d0480e843225ac9de43843d161f7" name="perl-Test-Version" arch="noarch">
  <version epoch="0" ver="2.09" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.09-21" date="1685534400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="8a11f22dc11a50cb7ee4bb43906cc60e8e2686b95e5d3dbe56746cabeca86e1b" name="perl-Test-Warn" arch="noarch">
  <version epoch="0" ver="0.37" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-1" date="1660392000">- Update to 0.37
  - Allow duplicate warnings when using warnings_exist (GH#8)
- Use author-independent source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-2" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9c9f4ebf2b1bda35ee3f105d200c5a2258a8c6b9fc26bdd540decb4aa84b9152" name="perl-Test-Warnings" arch="noarch">
  <version epoch="0" ver="0.038" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.031-6" date="1684324800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.032-1" date="1696161600">- Update to 0.032
  - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
    temporarily turning failures into reports</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.033-1" date="1706011200">- Update to 0.033
  - Add Test2 compatibility in the test triggered by done_testing()
  - New long-awaited feature (!!!) "allow_patterns", to either
    temporarily or globally exempt particular warning patterns</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.034-1" date="1735905600">- Update to 0.034
  - Fix Test2 compatibility for done_testing()
  - Test2::Warnings added as a simple wrapper (for now)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.036-1" date="1736078400">- Update to 0.036
  - Allow tests to pass even when Import::Into is not installed (CPAN RT#158296)
  - Add backcompat shim for cases where Test::More is loaded in tests after
    Test::Warnings
  - Avoid redefinition warnings when $^W is enabled in tests (CPAN RT#158297)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.037-1" date="1736164800">- Update to 0.037
  - Remove unneeded use of Import::Into
  - Fix for tests that invoke Test::Warnings-&gt;import directly</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.038-1" date="1738497600">- Update to 0.038
  - Refrain from swapping out done_testing method if :no_end_test is configured</changelog>
</package>
<package pkgid="7804be13428710b27e9ad0ee2fab18014053aefc028dfdb6d484e6a5dd846558" name="perl-Test-Without-Module" arch="noarch">
  <version epoch="0" ver="0.23" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-1" date="1670846400">- Update to 0.21
  - Harden test suite against changed error message coming with 5.38
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-1" date="1720267200">- Update to 0.22
  - Fix test suite to not skip a failing test
- License changed to Artistic-2.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1721044800">- Update to 0.23
  - Lower minimum required Perl version back to 5.006 (GH#5)</changelog>
</package>
<package pkgid="3675f4df55066717df0782aabca8e3c22bb508343349838481d8b0e35f97bdc4" name="perl-Test-WriteVariants" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1687694400">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="a648f74427529fa91a4546fb339d6da2a4bae323889aeab57f64569630645514" name="perl-Test-YAML" arch="noarch">
  <version epoch="0" ver="1.07" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.07-16" date="1685534400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b7912ab0140dc26c95c3d5148dfbc6a8c77847b6b396c6dc25fb5756379828cd" name="perl-Test-YAML-Valid" arch="noarch">
  <version epoch="0" ver="0.04" rel="39.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-39" date="1685534400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="8337203076fc8088452b88bf778b91687fe3404354c260f8f758496947c8d962" name="perl-Test-utf8" arch="noarch">
  <version epoch="0" ver="1.03" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-10" date="1687780800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-1" date="1731672000">- Update to 1.03
  - Fix tests to adapt to Perl removing apostrophe as package separator
    (CPAN RT#154915)
  - Upgraded distro files like packaged Module::Install version and META.yml,
    to avoid other looming Perl deprecation issues
- Switch source URL from cpan.metacpan.org to www.cpan.org to work around
  ongoing issues with metacpan</changelog>
</package>
<package pkgid="b88c342cd60a0317e1d7358871e5e63488419a830cf3ab9128db2c0b3b6bbb1c" name="perl-Test2-Plugin-NoWarnings" arch="noarch">
  <version epoch="0" ver="0.10" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-9" date="1684324800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-1" date="1712491200">- Update to 0.10
  - Previously, when tests were run via prove without the verbose flag and
    there was a warning that caused a test failure, there was no output
    indicating that a warning caused the failure; this has now been corrected
    and you'll see output that includes "Unexpected warning"</changelog>
</package>
<package pkgid="3140ccdd04c04316baea4928c439f8c3f790b284543246e98503fd7b1bbc246e" name="perl-Test2-Tools-Explain" arch="noarch">
  <version epoch="0" ver="0.02" rel="12.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-12" date="1685534400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="596f9c160652aebece11b3c80e51ee04aa209c63c48b0d55ffdfb420e5aaeced" name="perl-Text-CSV_XS" arch="x86_64">
  <version epoch="0" ver="1.61" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1" date="1713528000">- Update to 1.54 (rhbz#2275976)
  - It's 2024
  - Fix comment_str with strict
  - Documentation fixes (CPAN RT#150757, CPAN RT#151546)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-2" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1" date="1718712000">- Update to 1.55 (rhbz#2292859)
  - More fixes for strict under bind_columns (GH#54)
  - Strict won't hide previous error (GH#56)
  - Update to Devel::PPPort-3.72</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1" date="1723377600">- Update to 1.56 (rhbz#2303862)
  - Yet another strict/comment_str conflict (GH#57)
  - Strict affected by column_names</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1" date="1731412800">- Update to 1.57 (rhbz#2325504)
  - Add on_error callback to csv()
  - Retain runtime error from csv()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1" date="1735560000">- Update to 1.58 (rhbz#2334923)
  - Add strict_eol (warnings default in csv())
  - Add XS line number in errors
  - Add streaming support (not set in stone)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1" date="1736078400">- Update to 1.59 (rhbz#2335660)
  - Fixed EOL test for Windows with crnl layer
  - It is 2025</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1" date="1738324800">- Update to 1.60 (rhbz#2343165)
  - Add SECURITY.md
  - CR/NL/CRNL inside quoted fields not affected by strict_eol
  - Fix incorrect error 2014 (GH#62)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-2" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1753617600">- Update to 1.61 (rhbz#2383739)
  - Add love letter to CSV from xan project with reference
  - Bugtracker to Github (long overdue) (GH#63)
  - Update to Devel::PPPort-3.73</changelog>
</package>
<package pkgid="f06b44268bd6f25d26e7ab52356ba5afde38bc2f0341738a1fea1db430350af1" name="perl-Text-Diff" arch="noarch">
  <version epoch="0" ver="1.45" rel="18.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-18" date="1686225600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b100484b4a13e4ab22df5dac1c9ad31a3e37e9cc24463639897d1eb704f25caf" name="perl-Text-Glob" arch="noarch">
  <version epoch="0" ver="0.11" rel="20.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-20" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0d5e1a7d76231f9a720d745c688044cc2315315a5016231381c0e7a97a2a93fb" name="perl-Text-Haml" arch="noarch">
  <version epoch="0" ver="0.990118" rel="21.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.990118-21" date="1689595200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="5646feb233e9f0f649deb531625922bb9d0a7c97997be95df107eab91608790e" name="perl-Text-Hunspell" arch="x86_64">
  <version epoch="0" ver="2.16" rel="3.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.14-25" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.16-1" date="1657886400">- Update to 2.16
  - Documentation improvements (GH#16, GH#18)
  - Add LICENSE file (GH#14)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.16-3" date="1685534400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with ExtUtils::MakeMaker &lt; 6.52</changelog>
</package>
<package pkgid="3421c65ea02bcb506b5f18198b3833ca3c2d2ceb6cdba92c169f6e799365af48" name="perl-Text-Template" arch="noarch">
  <version epoch="0" ver="1.61" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1" date="1630843200">- Update to 1.60
  - Fix another POD syntax error
- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-2" date="1647604800">- Work around package note files breaking t/author-signature.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1651233600">- Update to 1.61
  - Skip taint tests if perl was compiled with taint disabled (GH#20)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-2" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="02ebfb8e8b1e6e00efe99d2693dba78cdbfc5d6fa00d12c082085111fd3af599" name="perl-Text-Trac" arch="noarch">
  <version epoch="0" ver="0.24" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-2" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="869a2c0117617c1ef43425f7bf050d8a505931bf30f9e73b15108ae2423d3a3b" name="perl-Tie-IxHash" arch="noarch">
  <version epoch="0" ver="1.23" rel="35.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-35" date="1686225600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="35cd8f54c2ab4e9c4e6e7203350080321a36f9670bdcc7a1168e7c31e05ed451" name="perl-Tie-RefHash-Weak" arch="noarch">
  <version epoch="0" ver="0.09" rel="41.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-41" date="1685620800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="442389e88eb17fe1d01e2e27adca69fe481b12d21a99233bf060b9c8285e525e" name="perl-Tie-ToObject" arch="noarch">
  <version epoch="0" ver="0.03" rel="44.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-44" date="1682596800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c34ac51613a23bdb26d7d2934b97a7ac98415ce10a376edb3a30d24e6b792347" name="perl-Time-y2038" arch="x86_64">
  <version epoch="0" ver="20100403" rel="31.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20100403-29" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20100403-31" date="1685620800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b319dc7ec29a8581afbbe5eabd5d6cd50c55fdee6ac9a7465c0bfb13f8b29fa3" name="perl-TimeDate" arch="noarch">
  <version epoch="1" ver="2.35" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.34-1" date="1772366400">- Update to 2.34
  - Increase coverage in documentation
  - Refactor: Extract _build_lookups helper, remove hash-building duplication
  - Correct language data bugs and minor code review fixes
  - Fix up utf8 and add tests
  - Use Dist::Zilla for the distro
  - Rebase: Apply review feedback on GH#49 and GH#52
  - Fix: Uncomment Indian Standard timezone (IST)
  - Feature: Support boost C++ timestamp format (%Y-%b-%d %H:%M:%S.%f)
  - Correct typos across documentation and comments
  - Stop using 'use vars'
  - Remove limitation from Date::Parse
  - Create Arabic.pm
- Use %{make_build} and %{make_install}
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.35-1" date="1774180800">- Update to 2.35
  - Test: Document and pin CPAN RT#84075/GH#12 fix in regression suite
  - Fix: Add NST, NFT, and NDT (Newfoundland) timezone support
  - Fix: Add ICT and PHT timezone support
  - Fix: Restore rebase regressions and clarify first-century limitation
  - Fix: Normalize two-digit years in str2time to avoid Time::Local windowing
    mismatch
  - Fix: Use standard 2-letter German weekday abbreviations
  - Fix: Detect timegm/timelocal overflow for far-future dates (CPAN RT#88777)
  - Test: Add regression tests for CPAN RT#88777 (negative epoch for far-future
    dates)
  - Fix: Use stored epoch in format_Z/format_z to fix DST fall-back timezone
    name
  - Fix: Document MSK timezone history and add regression test (CPAN RT#98949)
  - Fix: strftime %s with timezone now returns correct epoch (CPAN RT#52387)
  - Test: Add POD validity regression test for CPAN RT#53557
  - Fix: Include day in year-inference for dates without an explicit year
  - Fix: Document MSK timezone history and add regression test (CPAN RT#81350)
  - CI: Install Pod::Checker via cpm in Linux CI
  - Docs: Add SECURITY.md with vulnerability reporting policy
  - Test: Add regression tests for CPAN RT#57800/GH#3 (numeric m/d/yyyy
    pre-1970 dates)
  - Fix: Normalize year offset for dates before 1901 in strptime
    (CPAN RT#106105)
  - Fix: Reject timezone-only inputs in strptime (CPAN RT#70650)
  - Test: Add failing tests for CPAN RT#70650 (ludicrous date parsing)
  - Fix: Prevent negative month from strptime for 6-digit inputs like '199001'
  - Test: Add Portuguese format and round-trip tests from GH#61
  - Fix: Treat number &gt; 31 after month name as year, not day (GH#2)
  - Fix: Translate timezone abbreviations (%Z) in language-specific formatting
  - Fix: tz_name() offset in seconds was treated as minutes (CPAN RT#59298)
  - Docs: Fix ISO-8601 example date in Date::Parse POD (GH#6)
  - Feat: Add optional LANGUAGE parameter to time2str()
  - Feat: Allow str2time() to accept a custom reference epoch (CPAN RT#64789)
  - Docs: Clarify strptime() return format for ISO 8601 dates (GH#44)
  - Feat: Add Portuguese language module
  - Fix: Prefer CEST over MEST as canonical Central European Summer Time name
  - Fix: Add ICT and PHT timezone abbreviations to Time::Zone (CPAN RT#123247)
  - Fix: Standardize Greek.pm to use native Unicode instead of \x{} escapes
  - Test: Add regression test for CPAN RT#105031/GH#17 (1965-12-31 maps to 2065)
  - Fix: Declare Carp as runtime prerequisite in Makefile.PL
  - Fix: Infer current year for future months when no year given (CPAN RT#92611)
  - Test: Add regression tests for CPAN RT#53413 (4-digit year mangling)
  - Fix: Handle leap day in year-only date parsing test
  - Fix: Support IANA timezone names in tz2zone and tz_offset (CPAN RT#76968)
  - Fix: Preserve comma as ISO 8601 decimal separator in strptime
  - Fix: Add French day ordinal suffix in format_o
  - Fix: Make tz_name tests deterministic across DST transitions</changelog>
</package>
<package pkgid="5526c2db366b2490b9ecaf42f57908690bfe7d3b8a59b6a846d378abdf20ed9c" name="perl-Tree-DAG_Node" arch="noarch">
  <version epoch="0" ver="1.35" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32-7" date="1685620800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33-1" date="1743336000">- Update to 1.33
  - Replace the discouraged File::Slurp::Tiny with File::Slurper
  - Add a security policy file SECURITY.md
  - Update Makefile.PL to include both ExtUtils::MakeMaker and perl
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34-1" date="1745841600">- Update to 1.34
  - Fix test failures due to line endings on Windows (GH#4)
  - The 2 test files t/tree.with*.txt ship as ISO-8859-1, while
    t/tree.utf8.attributes.txt ships as UTF-8; so...
    - Don't explicitly use UTF-8 encoding in DAG_Node.pm's sub read_tree();
      rather, use a regexp to standardize line endings after reading, and
      likewise, in t/read.tree.t, do the same
    - Un-comment the 2 extra tests at the end of t/read.tree.t; specifically,
      line 50 was 'for (qw/utf8/)# with without/)' and now says
      'for (qw/utf8 with without/)'
    - Reformat test data files t/tree.*.attributes.txt; this was done with the
      new files share/read.write.tree.(pl, sh), and it was done because some of
      the test data files had been written by old code with slightly different
      indenting
  - Add a new test data file, t/metag.cooked.tree.txt; it's a copy of
    MarpaX::Grammar::Parser's share/metag.cooked.tree, and the test program
    t/read.tree.t was edited to include this new file
  - Patch tree::DAG_Node.format_node() to output 'Attributes: {}' and not just
    'Attributes:' when the user does not want attributes reported; this makes
    the code match the sample trees shipped in t/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.35-1" date="1747051200">- Update to 1.35
  - Change sub hashref2string() so it does not generate an error or warning when
    the node or node name is '' (empty string), undef or 0 (zero)
  - Change test data so that when stringifying a tree, node names without
    attributes are output as (e.g.) 'lexeme: Attributes{}' rather than as just
    'lexeme'; this was supposed to have been done in 1.34, but was not done
    properly
  - The previous point also affects the related module Data::RenderAsTree,
    which ships with a range of test programs and sample scripts that futher
    exercise these features; the point of these latter samples is so that you
    can use them without having to fiddle about removing the test code in the
    corresponding test scripts</changelog>
</package>
<package pkgid="2bc2f3c4caacfaee71dcd10b066baddd595e878f2fd227f79415f959b68e07c5" name="perl-Try-Tiny" arch="noarch">
  <version epoch="0" ver="0.32" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-5" date="1680523200">- Avoid use of deprecated patch syntax
- Note that license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-6" date="1689249600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.32-1" date="1723896000">- Update to 0.32
  - Skip given, when tests on perls ≥ 5.41.3 which removed these constructs</changelog>
</package>
<package pkgid="45f86cb31dd775a3f180e6ffbba62ad604410fc7663bb3ddfac634a4a1e4a421" name="perl-Type-Tiny" arch="noarch">
  <version epoch="0" ver="2.010001" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.0" date="1744804800">- Update to 2.008001
  Bug Fixes:
  - The Optional type constraint on its own, will now be treated the same as
    Optional[Any]; previously, when used for named parameters, it would fail to
    generate predicate methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.1" date="1745496000">- Fix test compatibility with MooseX-Types 0.51 (GH#176)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-1.0" date="1746100800">- Update to 2.008002
  Bug Fixes:
  - MooseX-Types 0.51 broke Type::Tiny's ability to reliably detect if Moose
    types were being used; this release fixes that</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-2.0" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008003-1.0" date="1756814400">- Update to 2.008003
  Bug Fixes:
  - Make sure methods fake-inherited from Moose (if it's loaded) are a last
    resort
  Other:
  - Slightly streamlined `Type::Tiny::can` and `Type::Tiny::AUTOLOAD`
  - When dumping structures via Data::Dumper (mostly in error messages),
    suppress any warnings Data::Dumper would emit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008004-1.0" date="1760702400">- Update to 2.008004
  Documentation:
  - Type::Tiny pod syntax fix
  Other:
  - Added: Type::Tiny::Duck (used by HasMethods) now includes a
    new_intersection constructor</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008005-1.0" date="1763726400">- Update to 2.008005
  - Minor optimization for Type::Params: sometimes it would construct an
    arrayref of hashref from the slurpy arguments to a function and then check
    that the arrayref it created was an arrayref, or check the hashref it
    created was a hashref; those checks seem unnecessary - if they had ever
    failed it would indicate something deeply wrong with Perl itself, so these
    superfluous checks are now avoided
  - Minor optimization for Type::Params: sometimes it would wrap a 'goto' in a
    'do' block for no reason, which could potentially slow down the call as
    Perl might create a new lexical context unnecessarily; it is unlikely to
    make a measurable difference</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008006-1.0" date="1764244800">- Update to 2.008006
  - Minor optimization for non-XS type check code for Enum types: if there are
    only a small number of valid strings (five or under), check using 'eq' and
    'or' operators instead of compiling a regexp to check against them all at
    once; this can be controlled by passing the 'use_eq' attribute to the
    Type::Tiny::Enum constructor, but is otherwise automatic</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010000-1.0" date="1767182400">- Update to 2.010000
  Added:
  - Added: Add 'check_coerce' method to Type::Coercion
  - Added: Add 'check_coerce' method to Type::Tiny
  - Added: Add environment variables to affect how 'signature_for' checks
    appear in stack traces, debugging, and profiling
  - Added: Type::Params args objects now provide __TO_LIST__, __TO_ARRAYREF__,
    and __TO_HASHREF__ methods
  - Added: Type::Params now provides hooks for the event of wrapping a sub in a
    signature
  Documentation:
  - Update NEWS file
  - Update Type::Tiny::Manual::Policies with planned changes for Type::Tiny 3
  - Add security policy to Type::Tiny::Manual::Policies
  - Fix syntax in some of the documentation for Type::Params
  - Update documentation to potential future changes to coercions in
    Types::Standard
  - Document that Type::Tiny::Enum defines its own sorter
  Test Suite:
  - Skip t/20-modules/Type-Tie/06clone.t on very old Perls
  - Add test suggestion dependencies on Devel::Hide and namespace::clean
  Other:
  - If you lexically import 't' from Type::Registry, then it will no longer be
    tied to the caller's per-package type registry
  - Type::Tiny::Enum now throws an exception if you try to pass a sorter
    coderef to the constructor
  - Minor optimization to avoid wrapping certain inlined checks in do {...}
    blocks</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010001-1.0" date="1767787200">- Update to 2.010001
  - Fix for $LIST_SEPARATOR changes breaking Type::Coercion, Types::Common,
    Types::Standard</changelog>
</package>
<package pkgid="287effea7f8845eb7c7147fd4e751960ca8e0270e691e99f9633a048a340c336" name="perl-Types-Path-Tiny" arch="noarch">
  <version epoch="0" ver="0.006" rel="17.fc37"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.006-12" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-13" date="1636977600">- Import from Fedora</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-17" date="1689768000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c2812299012fef4ecc4cfa0f1c1b55f08c4c7ca2c747ec8ea7cb9c3cb17a983a" name="perl-Types-Serialiser" arch="noarch">
  <version epoch="0" ver="1.01" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.01-8" date="1684324800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="0aafd816ad479cf316378d23f850a29e57a39a30a326dc74228ada2da93ecc57" name="perl-UNIVERSAL-require" arch="noarch">
  <version epoch="0" ver="0.19" rel="7.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.19-7" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="4ae1323f035d9bc76346ee06827f2e372871bdb84313e59cd884cc3dd7a27778" name="perl-URI-cpan" arch="noarch">
  <version epoch="0" ver="1.009" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-1" date="1640088000">- Update to 1.008
  - Fix prereqs to rely on URI, not the unindexed URI::_generic
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-4" date="1685620800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.009-1" date="1693742400">- Update to 1.009
  - Updates to dist metadata only</changelog>
</package>
<package pkgid="b02802b92c20ebf86a2ff3680b1ba42337de7b4288ab5f1d809774b9133df54f" name="perl-Unicode-CheckUTF8" arch="x86_64">
  <version epoch="0" ver="1.03" rel="42.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-37" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-39" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-41" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-42" date="1726574400">- Correct URL
  (https://src.fedoraproject.org/rpms/perl-Unicode-CheckUTF8/pull-request/1)
- Use SPDX-format license tag
  (https://src.fedoraproject.org/rpms/perl-Unicode-CheckUTF8/pull-request/2)</changelog>
</package>
<package pkgid="074cd1ad01a8fe9fc0a93865be131fb543aa14c79fb091e95f5fbfbdd09b5e44" name="perl-Unicode-Map" arch="x86_64">
  <version epoch="0" ver="0.112" rel="59.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-57" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-59" date="1685620800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2c70ccdda18aad7e23519d9a221bb1076c7ecf14ca7d4cac207f03e9ea445ccd" name="perl-Unicode-Map8" arch="x86_64">
  <version epoch="0" ver="0.13" rel="43.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-41" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-43" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="c78f0f2fd8b61cbf1157a57874decf293212015a7cad3bc1da87c9c56139ce8c" name="perl-Unicode-MapUTF8" arch="noarch">
  <version epoch="0" ver="1.14" rel="10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.14-10" date="1685707200">- SPDX license migration</changelog>
</package>
<package pkgid="26847f7bcd92ee58d9151d3f87fc63769f8a5bd085980b0c82ed7802f3c6e2cd" name="perl-Unicode-String" arch="x86_64">
  <version epoch="0" ver="2.10" rel="22.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.10-20" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.10-22" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="3cd514c5f8b205a6adf214e7c227cc61b91a5d17cddafaea354d324102ef322d" name="perl-Unicode-UTF8" arch="x86_64">
  <version epoch="0" ver="0.70" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-25" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-28" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-1" date="1766404800">- Update to 0.63
  - Remove the non-portable tests for Perl's "super" code points; testing
    values beyond 0x7FFF_FFFF isn’t necessary
  - Documentation typo corrections</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-1" date="1771848000">- Update to 0.64
  - Unicode::UTF8 now allows noncharacters; they receive no special handling
    and are processed like any other code point
  - According to Corrigendum #9, noncharacters (the values U+nFFFE and U+nFFFF
    (where n is from 0 to 10^16) and the values U+FDD0..U+FDEF) are permanently
    reserved but should be allowed in interchange:
    https://www.unicode.org/versions/corrigendum9.html</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.65-1" date="1771934400">- Update to 0.65
  - C99-compliant compiler is now required for Unicode::UTF8
  - Scan 16 bytes at a time to detect non-ASCII bytes, falling back to sequence
    validation for non-ASCII input; this approach resulted in a 900% throughput
    improvement on English text and a 200% improvement on Swedish text compared
    with Encode.pm</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-1" date="1772020800">- Update to 0.66
  - Rewrote the UTF-8 validator using a shift-based DFA from
    https://github.com/chansen/c-utf8-valid by the same author; benchmarks show
    up to 10x faster decoding compared with Encode.pm</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.68-1" date="1772452800">- Update to 0.68
  - Fix SIMD feature gating for x86; avoid SSE2 intrinsics on non-SSE2 i686
    builds
  - Use Dist::Zilla for the distro
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.70-1" date="1774008000">- Update to 0.70
  - Update the c-utf8 library code: improved GCC code generation, including
    with -O2, resulting in higher throughput
  - Use utf8_check_ascii with a 16-byte ASCII fast path</changelog>
</package>
<package pkgid="dd3806f310f4c80f91388fd7032ae24f0909e03dde4f6df5f66b83b370ba0e01" name="perl-Unix-Syslog" arch="x86_64">
  <version epoch="0" ver="1.1" rel="45.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-40" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-43" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-45" date="1684411200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b41823c3b077a7172abab782b3653e81ec0741651bb7753e93b9353b19799702" name="perl-Variable-Magic" arch="x86_64">
  <version epoch="0" ver="0.64" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-16" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-1" date="1663761600">- Update to 0.63
  - Add support for 5.37.3's PADSV_STORE optimization; B.pm-related tests have
    been taught about this new thing (CPAN RT#144052)
  - Updated contact information
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-3" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-1" date="1710849600">- Update to 0.64
  - This is a maintenance release; the code contains no functional change
  - Contributing guidelines are now listed in the new CONTRIBUTING file
  - Fix for t/18-opinfo.t broken under blead (CPAN RT#151104)</changelog>
</package>
<package pkgid="e16f35e50b2b4b07577360c96d5313c404b88ee7cea708dbe97451c2421e66ce" name="perl-Variable-OnDestruct" arch="x86_64">
  <version epoch="0" ver="0.09" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-1" date="1709121600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1711540800">- Update to 0.08
  - Revert not catching exceptions from destruct handlers
  - Restore functionality on perl ≤ 5.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-1" date="1711800000">- Update to 0.09
  - Further fix on older perls</changelog>
</package>
<package pkgid="b3bea93f87dbf89f91807285da7023ee70131a2f39bcaebdb6a0a14b25eeb1e0" name="perl-Version-Requirements" arch="noarch">
  <version epoch="0" ver="0.101023" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101023-25" date="1685707200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="881b04307aaebdf74cbac484107e0711f13192cf72f7c9aaa947dc9eafae92a7" name="perl-WeakRef" arch="x86_64">
  <version epoch="0" ver="0.01" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-24" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-25" date="1687521600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5730e020326df9c19bda3eb6e98f95a462cd004798ec2688cce622141abf9c5f" name="perl-XML-DTDParser" arch="noarch">
  <version epoch="0" ver="2.01" rel="34.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.01-34" date="1687521600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="cbb9c3a64b097b9b3a55bf4a0ac74d254f6557ddfaa03ec7b465a1492653a727" name="perl-XML-LibXML" arch="x86_64">
  <version epoch="1" ver="2.0210" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0207-6.0" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0208-1.0" date="1664539200">- Update to 2.0208
  - The createElementNS and setNamespace functions were getting confused by
    Readonly scalars (CPAN RT#144415)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0208-2.0" date="1687435200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0208-3.0" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0209-1.0" date="1689508800">- Update to 2.0209
  - t/35huge_mode.t: fix test with libxml2 2.11 (GH#80)
  - Add clearer reference to using cloneNode to extract node with namespaces
    (GH#74)
  - Initialize xmlValidCtxt (GH#73)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0209-3.0" date="1701259200">- Restore compatibility with libxml-2.12.0 (#2251181)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0210-1.0" date="1706097600">- Update to 2.0210
  - Fix copying external entity from an ext_ent_handler handler (GH#81)
  - libxml-mm: Fix function prototypes in function pointers</changelog>
</package>
<package pkgid="f8a934f1748dcac2389c5775da7f59713637d0e42ac508f1d7d238f018396623" name="perl-XML-LibXSLT" arch="x86_64">
  <version epoch="0" ver="2.003000" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-1" date="1676030400">- Update to 2.002001
  - Corrections and refactorings in Makefile.PL
- Use author-independent source URL
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-6" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.003000-1" date="1718452800">- Update to 2.003000
  - lib/XML/LibXSLT/Quick.pm:
    - Add an 'implicit' type to $dest
    - Correct a type spelling ('file' instead of 'path')</changelog>
</package>
<package pkgid="1a2a11c2b786dadb8c6fbaa64befa4abedd661b4a2cc161cba44d2b0ad3d0621" name="perl-XML-NamespaceSupport" arch="noarch">
  <version epoch="0" ver="1.12" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-19" date="1687435200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a113192f55c1e6f4d82135af61ff25b31f08417410f6bd7ea81ac6faae1bef1a" name="perl-XML-Rules" arch="noarch">
  <version epoch="0" ver="1.16" rel="30.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-30" date="1687435200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="ae90440a36a49ee9b2dc012ba9fb0833b33c2724c0ee19dbb38daeb8d19c5690" name="perl-XML-SAX" arch="noarch">
  <version epoch="0" ver="1.02" rel="12.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-12" date="1687435200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="e525d53627f901fe96d10696b8a6b9698ef49ceb8b70a261908bcc039f723a02" name="perl-XML-SAX-Base" arch="noarch">
  <version epoch="0" ver="1.09" rel="19.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-19" date="1687435200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a95d33e9b03a340711f3f390690e0a6e2e75311b6a88333e1ccb47a9e151732a" name="perl-XML-SAX-Expat" arch="noarch">
  <version epoch="0" ver="0.51" rel="5.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-5" date="1680091200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="1d08c1187c2806bfde352e219ba5c49d54a5177518f826e914e952e9fc7e5729" name="perl-XML-Simple" arch="noarch">
  <version epoch="0" ver="2.25" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.25-17" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="35e32c7718a043f80a2679c9df24c652e6cd01e33a5c793b4298f13bc635c6d2" name="perl-XString" arch="x86_64">
  <version epoch="0" ver="0.005" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-3" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-6" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-8" date="1684411200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="d95f5b27e2fa68d0d2bef7f3a76f9d5329fa2f2c3a2d99cbae5e60739bafdc99" name="perl-YAML" arch="noarch">
  <version epoch="0" ver="1.31" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-15" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for ancient distributions with rpm &lt; 4.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1703764800">- Update to 1.31 (rhbz#2255994)
  - Update docs to recommend YAML::PP
- Package description updated as per upstream documentation</changelog>
</package>
<package pkgid="f5145098f9fd3417c842f70f67aacc4d92ebd1e574aa0530801ccc81d28b7360" name="perl-YAML-LibYAML" arch="x86_64">
  <version epoch="1" ver="0.906.0" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.89-4" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.901.0-1" date="1725883200">- Update to 0.901.0 (rhbz#2310535)
  - Change from Zilla::Dist to Dist::Zilla
  - Change version scheme
  - Fix missing linebreak in pod from Dist::Zilla conversion</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.902.0-1" date="1727092800">- Update to 0.902.0 (rhbz#2313873)
  - Loaded builtin booleans are no longer readonly for perl ≥ v5.36</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.903.0-1" date="1738584000">- Update to 0.903.0 (rhbz#2343445)
  - Security fix: use 3-arg form of open in LoadFile (GH#120. GH#121)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.904.0-1" date="1746705600">- Update to 0.904.0 (rhbz#2365093)
  - Add experimental OOP interface, YAML 1.2
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.904.0-2" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.906.0-1" date="1777291200">- Update to 0.906.0
  - Fix memory leak for trailing UTF8 octets (GH#123)
  - Fix detecting floats in YAML 1.2 Core Schema (GH#125)
- Package new document SECURITY.md</changelog>
</package>
<package pkgid="b19b9ac32dd2a1a89a7447aa2e8c2fd77b5e6711403dd3963784c453aac10df2" name="perl-YAML-Old" arch="noarch">
  <version epoch="0" ver="1.23" rel="4.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-4" date="1687435200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="0c513a0bac00edbf96a6c420a7565d8100ae7ff02569f43821fa704c7fc97048" name="perl-YAML-Syck" arch="x86_64">
  <version epoch="0" ver="1.45" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34-17" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.35-1" date="1760097600">- Update to 1.35
  - Address parsing error related to string detection on read for empty strings</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-1" date="1760184000">- Update to 1.36
  - Address memory corruption leading to 'str' value being set on empty keys</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1773921600">- Update to 1.37
  Features:
  - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
  Fixes:
  - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
  - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
  - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
  - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
  - Fix dumping of tied hashes (GH#31)
  - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
  - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
  - Fix double-dash YAML parsing (RT#34073, GH#35)
  - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
  - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
  - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
    (GH#40)
  - Fix growing !!perl/regexp objects in round-trips (GH#43)
  - Fix quoted '=' being transformed into 'str' (GH#45)
  - Fix backslash-space escape in double-quoted YAML strings (GH#61)
  - Fix flow sequence comma separator not recognized without trailing space
    (GH#60)
  - Fix wide character warning in DumpFile (GH#28)
  - Fix inline arrays without space after comma (GH#25)
  - Fix: quote strings matching YAML implicit types to prevent round-trip
    failures (GH#26)
  - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
  - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
  - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
  - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
  - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
  - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
  - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
  - Fix: correct $SortKeys POD default from false to true (GH#100)
  - Fix: correct POD documentation errors (GH#103)
  Maintenance:
  - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
  - Silence macOS compiler warnings (GH#92)
  - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
  - Guard stdint.h include in syck_st.h for portability (GH#24)
  - Update ppport.h to 3.68
  - Add regression tests for magical variable dumping (GH#32)
  - CI: modernize GitHub Actions workflow (GH#123, GH#124)
  - CI: add disttest job to validate MANIFEST completeness
- Use %{make_build} and %{make_install}
- Drop workaround for C23 incompatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1" date="1774180800">- Update to 1.39
  Bug Fixes:
  - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
    (GH#125, GH#130)
  - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
  - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
  - Fix: guard against NULL type from strtok in tag parsing (GH#135)
  - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
  - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
    (GH#138, GH#139)
  Improvements:
  - Resolve TODO tests for empty/invalid YAML to match actual behaviour
    (GH#127, GH#129)
  Maintenance:
  - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
  - Add comprehensive implicit type resolution test suite (GH#137)
  - Update MANIFEST to include all unit tests
  - Clean up test names to remove unnecessary numbering</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1" date="1774267200">- Update to 1.41
  Bug Fixes:
  - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
    strtod() so that floats like -3.14 are not corrupted by double-precision
    rounding artifacts (GH#140, GH#141)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1" date="1774612800">- Update to 1.42
  Bug Fixes:
  - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
    perl_syck.h (GH#145)
  - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
  - Fix: Skip %TAG and %YAML directives in document header (GH#151)
  - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
  - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
  - Fix: Remove spurious %type &lt;nodeId&gt; for indent_open in gram.y
    (GH#157, GH#158)
  - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
  Improvements:
  - Implement YAML merge key (&lt;&lt;) support (GH#149)
  Maintenance:
  - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
  - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
  - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
  - Remove unneeded TODO in t/json-basic.t (GH#154)
  - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
  - Do not require a .y file to build YAML::Syck; add brew support for bison
  - Don't ship docs/ directory in tarball</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1" date="1775131200">- Update to 1.43
  Bug Fixes:
  - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
  - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
  - Fix: Load() in list context returns empty list for empty/undef input; also
    applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
  - Fix: DumpCode serializes prototype string instead of code body (GH#168)
  - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
    (GH#170)
  - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
    (GH#175, GH#176)
  - Fix: Add TODO guard for eval_pv leak on Perl &lt; 5.14 (GH#179, GH#180)
  - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
  - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
  Improvements:
  - Modernize META_MERGE for CPANTS compliance (GH#162)
  - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
  Maintenance:
  - Restore TODO guard for Dump code leak test on Perl &lt; 5.26 (GH#167)
  - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
  - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1" date="1775217600">- Update to 1.44
  Bug Fixes:
  - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
  - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1" date="1777291200">- Update to 1.45
  Bug Fixes:
  - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
    base64 encode/decode buffers; also plugs a memory leak (GH#189)
  - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
    no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
  - Fix: Negative float#base60 values produce wrong results; strip sign before
    accumulating and avoid negative zero for portable stringification (GH#191)
  - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
  Maintenance:
  - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
  - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
  - Update README</changelog>
</package>
<package pkgid="cffdafb27a2027df1439b29322d27ab2558f6de381641e68747e043469e8aa81" name="perl-YAML-Tiny" arch="noarch">
  <version epoch="0" ver="1.76" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.74-1" date="1679572800">- Update to 1.74
  - A few documentation tweaks
- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.75-1" date="1734350400">- Update to 1.75 (rhbz#2332503)
  - Fixed regression in %QUOTE (GH#60)
  - Fix version comparison logic for forward compatibility (GH#63)
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-1" date="1734350401">- Update to 1.76
  - Revert change from GH#60: "yes", "y", etc. are not actually booleans (GH#66)</changelog>
</package>
<package pkgid="e24422200b1f47eaba611cd96b584c03e6a1873041c5400bbfefa72e5a101b43" name="perl-aliased" arch="noarch">
  <version epoch="0" ver="0.34" rel="25.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.34-25" date="1683633600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e98f8b967d6b3651d3aafb2e8ce9c8ba4bdf0eb51aab455fb3ed2bddd6692df9" name="perl-autodie" arch="noarch">
  <version epoch="0" ver="2.37" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.35-1" date="1674907200">- Update to 2.35
  - Prepare for 5.38 changes to deprecate smartmatch
  - Remove +x bit from pm and t files
  - CI - Turn off Pod coverage and critic tests below 5.12
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.36-1" date="1675166400">- Update to 2.36
  - Remove the use of ' as a package separator
  - Fix spelling errors in POD</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.37-1" date="1703851200">- Update to 2.37
  - Deprecate smartmatch handling (GH#117)
  - Remove mention of cpanratings.perl.org (GH#118)
  - Fix typo in changelog (GH#119)</changelog>
</package>
<package pkgid="a546bd446d3d971c7e82b094127e6a8619ac17acca7e3a2d320bb09e4ab1e53e" name="perl-common-sense" arch="x86_64">
  <version epoch="0" ver="3.7.5" rel="14.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-9" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-12" date="1683201600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-13" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-14" date="1691582400">- Fix FTBFS due to %rpmversion macro being built-in in rpm-4.18.92</changelog>
</package>
<package pkgid="4a864e0af6b706af51dd64acb418b881dc3b5034b96339734b7118783bd5f4fb" name="perl-constant-boolean" arch="noarch">
  <version epoch="0" ver="0.02" rel="37.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-37" date="1685707200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="54501f795c92575e67a1203cd739e4d4df096f3d8540711a56f0d24d83f5948c" name="perl-namespace-autoclean" arch="noarch">
  <version epoch="0" ver="0.31" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-15" date="1683115200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-1" date="1728820800">- Update to 0.31
  - Switch from Sub::Identify to Sub::Util (core in modern perls), falling back
    to B.pm as needed</changelog>
</package>
<package pkgid="397268b0926d9b5533aa42d99c65ef75a04cd97344e2d05759723fdde2d76484" name="perl-namespace-clean" arch="noarch">
  <version epoch="0" ver="0.27" rel="23.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-23" date="1683115200">- Use SPDX-format license tag
- Drop support for building with perl &lt; 5.14
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="1b6dde384f9f85aa3eef05d9e76465f37a094d777de24ebaa3625a74aa45b941" name="perl-parent" arch="noarch">
  <version epoch="1" ver="0.244" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.240-1" date="1676376000">- Update to 0.240
  - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
    deprecated, as ' isn't allowed as package separator in an upcoming version
    of Perl (GH#13)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.241-1" date="1676462400">- Update to 0.241
  - Actually include the changes documented for version 0.240</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.242-1" date="1723636800">- Update to 0.242
  - Don't test for apostrophe as package separator on Perl versions after 5.41
  - Protect against modules changing @_</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.243-1" date="1732881600">- Update to 0.243
  - Reinstate test for apostrophe as package separator, as that package
    separator is allowed again (no code change, only tests have been amended)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.244-1" date="1734091200">- Update to 0.244
  - Update (commented) comparison with $] to use quotes</changelog>
</package>
<package pkgid="39005d0c80d9502044f0e73ba0e5895350feff0fe18d66824425fb57ca8f71a4" name="perl-strictures" arch="noarch">
  <version epoch="0" ver="2.000006" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.000006-16" date="1688558400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="b15865228963536dfde2c5f70de83018617080d2739020385e075449cf9f1166" name="perl-superclass" arch="noarch">
  <version epoch="0" ver="0.003" rel="4.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-4" date="1688299200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="07b576dad8fa1e6d907d7ca3d60d9ba40017d57c4c3161d14f1085555aaf77ea" name="perl-true" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="8.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-6" date="1654257600">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-8" date="1685966400">- Use SPDX-format license tag
- Drop support for building with EOL distributions prior to EL-7</changelog>
</package>
<package pkgid="931668c33bff31751d860a71dc4a62ca9b7936dc6d0d243905684239fa373568" name="perl-version" arch="x86_64">
  <version epoch="8" ver="0.99.34" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.32-1" date="1714305600">- Update to 0.9932
  - Add to_decimal and to_dotted_decimal methods
  - Add tuple and from_tuple methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.32-3" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.33-1" date="1724760000">- Update to 0.9933
  - Fix two warnings in recent code</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.33-519" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.34-1" date="1776081600">- Update to 0.9934
  - Reorder "v" check to avoid forward goto
  - Fix string comparisons with $] to use numeric comparison instead
  - Remove unnecessary shebang in version.pm</changelog>
</package>
<package pkgid="103b3000198722264bbe958e2f7e401a3149bad7f3a54690aa08abde90609f23" name="php-Smarty" arch="noarch">
  <version epoch="0" ver="3.1.48" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.40-1" date="1642507200">- Update to 3.1.40 (see CHANGELOG.md for details)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.44-1" date="1642507201">- Update to 3.1.44 (see CHANGELOG.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.48-1" date="1680177600">- Update to 3.1.48 (see CHANGELOG.md for details)
- License corrected to LGPL-3.0-or-later</changelog>
</package>
<package pkgid="7de66010780f91d09737849d81aa5e06d292b73cc4c432d4a6ccdda250eb131d" name="plusnet-fttc" arch="noarch">
  <version epoch="0" ver="0.10" rel="3.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-2" date="1651060800">- Add dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-3" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="924c69815c7a0f6aeabaaf323f3f5c7423b99892528654078a3efdec4eca0825" name="pptp" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="22.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-16.0.cf" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-17.0.cf" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-18.0.cf" date="1702468800">- Rebuild to sync with Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-20.0.cf" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-22.0.cf" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="964096dfb4e470726dbac40a36facf9b804f959056fa26edb49ff978d53893f8" name="pptp-setup" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="22.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-16.0.cf" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-17.0.cf" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-18.0.cf" date="1702468800">- Rebuild to sync with Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-20.0.cf" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-22.0.cf" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="d06027d0711513976688465ff9766246ad7816ea2e4f88dc621541b6371e5149" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-5.0.cf" date="1711713600">- Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
- Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6.0.cf" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-7.0.cf" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8.0.cf" date="1727697600">- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-9.0.cf" date="1732017600">- Fix RADIUS Message-Authenticator verification in mod_radius
  - https://github.com/proftpd/proftpd/issues/1840
  - https://bugzilla.redhat.com/show_bug.cgi?id=2325448</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
</package>
<package pkgid="d567a195a90d1e44c8b1ebf754ffde97a22f0bc6af7c629b400be382627546a9" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-5.0.cf" date="1711713600">- Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
- Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6.0.cf" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-7.0.cf" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8.0.cf" date="1727697600">- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-9.0.cf" date="1732017600">- Fix RADIUS Message-Authenticator verification in mod_radius
  - https://github.com/proftpd/proftpd/issues/1840
  - https://bugzilla.redhat.com/show_bug.cgi?id=2325448</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
</package>
<package pkgid="e76071c2df5094ffcd0f6794c023acc64abe0e3eb7c0416b437ab9baeb1eb535" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-5.0.cf" date="1711713600">- Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
- Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6.0.cf" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-7.0.cf" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8.0.cf" date="1727697600">- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-9.0.cf" date="1732017600">- Fix RADIUS Message-Authenticator verification in mod_radius
  - https://github.com/proftpd/proftpd/issues/1840
  - https://bugzilla.redhat.com/show_bug.cgi?id=2325448</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
</package>
<package pkgid="413ecd9c5a153cf04b75e1769917ca44ab1dab9b43b79bfe89fa9eeedfbb3eae" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-5.0.cf" date="1711713600">- Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
- Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6.0.cf" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-7.0.cf" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8.0.cf" date="1727697600">- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-9.0.cf" date="1732017600">- Fix RADIUS Message-Authenticator verification in mod_radius
  - https://github.com/proftpd/proftpd/issues/1840
  - https://bugzilla.redhat.com/show_bug.cgi?id=2325448</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
</package>
<package pkgid="847af5c36fb03535266e9275fc69f48711947191f93b526d745e709543d77326" name="proftpd-postgresql" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-5.0.cf" date="1711713600">- Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
- Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6.0.cf" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-7.0.cf" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8.0.cf" date="1727697600">- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-9.0.cf" date="1732017600">- Fix RADIUS Message-Authenticator verification in mod_radius
  - https://github.com/proftpd/proftpd/issues/1840
  - https://bugzilla.redhat.com/show_bug.cgi?id=2325448</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
</package>
<package pkgid="6fd0d2ec620219cf0f9f9f6acbe9833d45b96b6f5908c0bc936ab24f6153cfbd" name="proftpd-proxy" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-5.0.cf" date="1711713600">- Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
- Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6.0.cf" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-7.0.cf" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8.0.cf" date="1727697600">- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-9.0.cf" date="1732017600">- Fix RADIUS Message-Authenticator verification in mod_radius
  - https://github.com/proftpd/proftpd/issues/1840
  - https://bugzilla.redhat.com/show_bug.cgi?id=2325448</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
</package>
<package pkgid="7e33e774a09231e9c191fcf30abd1c059f8776a27550c46702cb8e63118a3f3b" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-5.0.cf" date="1711713600">- Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
- Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6.0.cf" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-7.0.cf" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8.0.cf" date="1727697600">- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-9.0.cf" date="1732017600">- Fix RADIUS Message-Authenticator verification in mod_radius
  - https://github.com/proftpd/proftpd/issues/1840
  - https://bugzilla.redhat.com/show_bug.cgi?id=2325448</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
</package>
<package pkgid="16bc03562ec7d67f6952f00509b682a4801e6e4c2729c4c9b6d6c02b1683ceb7" name="proftpd-utils" arch="x86_64">
  <version epoch="0" ver="1.3.9" rel="1.1.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-5.0.cf" date="1711713600">- Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
- Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6.0.cf" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-7.0.cf" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8.0.cf" date="1727697600">- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-9.0.cf" date="1732017600">- Fix RADIUS Message-Authenticator verification in mod_radius
  - https://github.com/proftpd/proftpd/issues/1840
  - https://bugzilla.redhat.com/show_bug.cgi?id=2325448</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-1.0.cf" date="1734004800">- Update to 1.3.8c
  - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SSH ECDSA host key algorithms were not used as expected despite configuring
    appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-2.0.cf" date="1737115200">- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8c-3.0.cf" date="1739448000">- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
  - https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8d-1.0.cf" date="1742299200">- Update to 1.3.8d
  - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
    unexpected behaviour (GH#1855)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1.1.cf" date="1742472000">- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled
- Drop support for old distributions prior to F-28, EL-8
  - Build mod_proxy unconditionally
  - Enable libsodium support unconditionally
  - Enable pcre2 support unconditionally
  - Disable libwrap support unconditionally
  - Use mariadb client library for MySQL support unconditionally
  - Use OpenSSL Cipher Profiles unconditionally
  - Always use systemctl try-reload-or-restart in logrotate script</changelog>
</package>
<package pkgid="51f84412d0268185bf184bca628e252f757508063de03b1baf00f67fc5045245" name="python2-bcrypt" arch="x86_64">
  <version epoch="0" ver="3.1.7" rel="4.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.7-3" date="1597665600">- Create python2-bcrypt package from last python-bcrypt package version that
  supported Python 2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.7-4" date="1658836800">- Use %license unconditionally</changelog>
</package>
<package pkgid="d5ece4ae3fa91ce99f79dcde15182176d13e05277f8be7ebb0f9fc510ea32619" name="python2-cffi" arch="x86_64">
  <version epoch="0" ver="1.15.0" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12.3-3" date="1617624000">- Explicitly add python2.7dist(cffi) provide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.15.0-1" date="1648555200">- Update to 1.15.0</changelog>
</package>
<package pkgid="11bf6fbff37c195b83f517283d885942f9a802ec71986509911430622a1115f8" name="python2-mod_wsgi" arch="x86_64">
  <version epoch="0" ver="4.9.4" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.9.0-1" date="1631534400">- Update to 4.9.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.9.4-1" date="1680091200">- Update to 4.9.4
- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Avoid use of deprecated provides filter</changelog>
</package>
<package pkgid="4d30df7e0b888770e92b460a324662b0d177516e49ed4cbdee49b3c599db1a05" name="python2-nose" arch="noarch">
  <version epoch="0" ver="1.3.7" rel="30.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.7-29" date="1676376000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.7-30" date="1718280000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="909ff1ff2ec390e2575a25b8ceab866e7a18e72bbe7776d874d212b33e62ebb6" name="python2-passlib" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="eaf765cadd4cd1debb54803a8d24c08826277328d7628d3395a9ba637142b950" name="python2-pycparser" arch="noarch">
  <version epoch="0" ver="2.20" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.14-22" date="1617624000">- Explicitly add python2.7dist(pycparser) provide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.20-1" date="1648555200">- Update to 2.20</changelog>
</package>
<package pkgid="1e17017421fd5e454dbfb37ba48b533d651750860fdde87fba987c7511009920" name="python2-setuptools" arch="noarch">
  <version epoch="0" ver="41.6.0" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 41.6.0-1" date="1680091200">- Update to 41.6.0
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="729997ad3333e48b788a6b1a2f11a3d02da3a9bb3438bc6745189aabecadcdb7" name="python2-six" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16.0-1" date="1680091200">- Update to 1.16.0
  - Port _SixMetaPathImporter to Python 3.10 (GH#341, GH#343, GH#349)
- Note: license is SPDX MIT</changelog>
</package>
<package pkgid="39c46e8c898a101514961bd7160e15490f59790b7512bd3327b7434374e50a26" name="python2-xapian" arch="x86_64">
  <version epoch="0" ver="1.4.22" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-2" date="1623153600">- Sync with xapian-bindings-1.4.18-2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-3" date="1624881600">- Rebuild with C++ 11.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-4" date="1627300800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-5" date="1643198400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.18-6" date="1643544000">- Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_3.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.19-1" date="1648641600">- Update to 1.4.19</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.19-2" date="1655726400">- Sync with xapian-bindings-1.4.19-2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.20-1" date="1659528000">- Update to 1.4.20</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.20-2" date="1674561600">- Sync with xapian-bindings-1.4.20-2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.22-1" date="1684411200">- Update to 1.4.22</changelog>
</package>
<package pkgid="32e157e538b147b3c6c210280411c540e104fe9dc592c45ccdc83c8b1ef8c3fe" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.12.10" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-2.0.cf" date="1705665600">- Update to 2.12.4
  Regressions:
  - parser: Fix regression parsing standalone declarations
  - autotools: Re-add --with-xptr-locs configuration option
  - parser: Fix build --without-output
  - parser: Don't grow or shrink pull parser memory buffers
  - io: Fix memory lifetime issue with input buffers
- Update license to include ISC-Veillard
- Reinstate Xpointer locations support for Fedora &lt; 40, RHEL &lt; 10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.4-3.0.cf" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.5-1.0.cf" date="1707134400">- Update to 2.12.5
  Security:
  - xmlreader: Don't expand XIncludes when backtracking (CVE-2024-25062)
  Regressions:
  - parser: Fix crash in xmlParseInNodeContext with HTML documents</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.6-1.0.cf" date="1710763200">- Update to 2.12.6
  Regressions:
  - parser: Fix detection of duplicate attributes in XML namespace
  - xmlreader: Fix xmlTextReaderConstEncoding
  - html: Fix htmlCreatePushParserCtxt with encoding
  - xmllint: Return error code if XPath returns empty nodeset</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.7-1.0.cf" date="1716379200">- Update to 2.12.7
  Security:
  - Fix buffer overread with 'xmllint --htmlout' (CVE-2024-34459)
  Regressions:
  - xmllint: Fix --pedantic option
  - save: Handle invalid parent pointers in xhtmlNodeDumpOutput</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-1.0.cf" date="1718280000">- Update to 2.12.8
  Regressions:
  - parser: Fix performance regression when parsing namespaces</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
</package>
<package pkgid="2ea5d98909e47234338b13a563b2670d239323cb88f350812ee95cc822f0896b" name="python3-libxslt" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="bc676ae3691eeb8cf6d6de8daf96909ac3b9de8253d45488c578142578648185" name="python3-passlib+argon2" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="3c466111c1749954f1d6af1de2758819d67a890efd0c8b414aa28714ca8c0a27" name="python3-passlib+bcrypt" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="70350667378bc289d8fc951ed20887996b5c015774eb2f6dae2703842720de96" name="python3-passlib+totp" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="ec98388f6701c4a021631e4874efe4eee24811787227ca4d321afb7f01f39fd8" name="python3-passlib" arch="noarch">
  <version epoch="0" ver="1.7.4" rel="17.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-7" date="1655726400">- Rebuilt for Python 3.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-8" date="1658750400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-9" date="1666699200">- Run Python 3 tests with pytest instead of deprecated nose
- Switch license field to SPDX identifiers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-10" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-11" date="1685880000">- Update license field with SPDX approved UnixCrypt identifier
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-12" date="1688558400">- Rebuilt for Python 3.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-13" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-15" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.4-17" date="1709035200">- Add buildrequires for extra sub-packages</changelog>
</package>
<package pkgid="0610d59e5db3b87ca876c416eb5cc8b1159a5a98a6da75e5313445e8f22250d3" name="rbldnsd" arch="x86_64">
  <version epoch="0" ver="0.998b" rel="20.fc37"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-13" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-14" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-15" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-16" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.998b-17" date="1739361600">- Add sysusers.d config file to allow rpm to create users/groups automatically
  from Fedora 43 onwards</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-18" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.998b-19" date="1758888000">- Fix base template replacement issue (GH#18, GH#19, GH#22, rhbz#2398024)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-20" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="a88e9a660446777104eec9a908f094607e55d269e176ac868090e52effe7ddef" name="sendmail" arch="x86_64">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="ac725e08d7f87f7607d1cf5ea8f66298dfc2ccdc9c37c6937cd058f751639c23" name="sendmail-cf" arch="noarch">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="35d0ca8ba8937a95ec9d28b3eef266ba92915a8370da5e72d4b3271174fcc8be" name="sendmail-doc" arch="noarch">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="78140c6620f03c97d2d637084857ee61014ccc537638f1add41e62286b8478c7" name="sendmail-milter" arch="i686">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="f64992c04c4ddfd848e0a5c6bc677116368327c71cb207dce07d8cc9c8d3e596" name="sendmail-milter" arch="x86_64">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="2251346645ab750c9d1c7b82c53a873c93d789576c700891dbcea69e6cf509a7" name="sendmail-milter-devel" arch="i686">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="f475796b050ce4c1d9b0ca7b5c1faf8e3c566da1e58c692fe040c94385581f0f" name="sendmail-milter-devel" arch="x86_64">
  <version epoch="0" ver="8.18.2" rel="2.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.2-6.0.cf" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-1.0.cf" date="1706788800">- Update to 8.18.1 (rhbz#2228229)
  - See RELEASE_NOTES for details
  - Includes fix for SMTP Smuggling issue (CVE-2023-51765)
- Switch upstream source URL from ftp:// scheme to https:// scheme</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="a1625f76b8c7b8d66612c18da9e09c56b8c5c8ad05e69b770d16217296e5fb3e" name="shorten" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="5.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.6.1-5" date="1680177600">- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="c560ddb296686a8b465ebede0a728bfd868e025c92afadd72c1f4d625cb75bca" name="smbldap-tools" arch="noarch">
  <version epoch="0" ver="0.9.11" rel="28.fc37"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-24" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-27" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-28" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="e3960840d7a17908a8190f0580e68d22527f7c49fd51314355a766e45fdbf37d" name="smf-sav" arch="x86_64">
  <version epoch="0" ver="2.1" rel="7.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1-6" date="1730289600">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1-7" date="1761739200">- Build with -DSM_CONF_STDBOOL_H=1 to avoid issues with libmilter API</changelog>
</package>
<package pkgid="eceb4e183a151e59113a9b1110a1c8b31d1557406a4f8ba11ebc4d550131a635" name="smf-spf" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="2.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.1-1" date="1690027200">- Switch upstream to https://github.com/jcbf/smf-spf/
- Update to 2.5.1 (see README.md for details)
- Don't package ChangeLog, which refers to original unmaintained version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.1-2" date="1744632000">- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)
- Build with -std=gnu17 due to issues with milter API (#2336394)</changelog>
</package>
<package pkgid="b03cbdbafbe4c898a58123e517614789105ef17c4e2da3b7d86721cf5b9fce27" name="spamass-milter" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="30.fc37"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.4.0-27" date="1717848000">- Add quarantine option</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-28" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-29" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-30" date="1739534400">- Drop EL-7 support
- Drop homedir fix for upgrades from packages built in 2009 and earlier
- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)</changelog>
</package>
<package pkgid="9264d444d0dab257e925cd0ae61562a4dc76987187e0f094d458fb2609387a93" name="spamass-milter-postfix" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="30.fc37"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.4.0-27" date="1717848000">- Add quarantine option</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-28" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-29" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-30" date="1739534400">- Drop EL-7 support
- Drop homedir fix for upgrades from packages built in 2009 and earlier
- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)</changelog>
</package>
<package pkgid="fdd0f82b6caf1aa55bc056c1f8fc1838f457dcdb5cfe01c9a47e2ffa80861182" name="symlinks" arch="x86_64">
  <version epoch="0" ver="1.7" rel="2.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-2.0.cf" date="1744632000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="149a1ce201b9ffebb5ec3014ac50db16dfea58aee5b2f7b63d390445575a0baf" name="treescan" arch="noarch">
  <version epoch="0" ver="4.81" rel="1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.78-1" date="1662465600">- Update to 4.78
  - Add IO::AIO::mount and IO::AIO::umount
  - Add a bunch of symbols from sys/mount.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-1" date="1664193600">- Update to 4.79
  - The autoconf result of the mount check was not used, so it failed to
    compile on most systems
  - Fix format string usage for croak in extract_stringvec function</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.79-2" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-1" date="1680436800">- Update to 4.8
  - Remove long-obsolete "paths must be absolute" text in aio_open/stat
    descriptions
  - Another workaround for the low-quality musl libc
  - Test for umount separately, as it is more portable
  - Some low-quality posix attempts (openbsd, osx) declare the availability of
    fexecve() but then don't even bother to implement a stub
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-4" date="1702468800">- Fix use of incompatible pointer type in configure test for fexecve()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-6" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-1" date="1708516800">- Update to 4.81
  - Work around a bug in musl w.r.t. to O_SEARCH and use EIO_O_PATH instead,
    verifying the semantics against the subset of O_PATH and O_SEARCH
  - aio_copy now tries to preallocate the destination file
  - fexecve configure test used the wrong pointer type</changelog>
</package>
<package pkgid="549d085dff13a9f0340b2515aa49824dfb6d65f55f4ae7cd9e46c7a053fc4823" name="tzip" arch="x86_64">
  <version epoch="0" ver="1.12" rel="14.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-14" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use distribution linker flags</changelog>
</package>
<package pkgid="39b0fe0e6f0af9a3b8b77279305b52c047fc2e411ef132b706f14abf47cf5b63" name="ud" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.1-10" date="1744632000">- Drop redundant initscript patch
- Always assume signal handlers are void functions (configure test gets this
  wrong)
- Use systemd scriptlet macros</changelog>
</package>
<package pkgid="2937890e8fa2fd77ca62ac3eb5cb676a9290598221469bdbf20a97ecde9db34e" name="unrar" arch="x86_64">
  <version epoch="0" ver="7.21" rel="0.1.0.cf.beta1.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.11-1.0.cf" date="1742817600">- Update to 7.11
- Update debian files to 7.1.5-3</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-0.1.0.cf.beta1" date="1749643200">- Update to 7.12 beta 1
- Update debian files to 7.1.7-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
</package>
<package pkgid="78ab669f4f98197f9e78cb46cf5652cffb86d1494ad515646c26fff786b583de" name="weblint++" arch="noarch">
  <version epoch="0" ver="1.15" rel="10.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.15-10" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="a785d154ee188dd5b6596c15aea3c99099a118149faf61c56e4baeada431208c" name="weblint" arch="noarch">
  <version epoch="0" ver="1.9.3" rel="16.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9.3-16" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="1aeba87f60b2221f34d371d8e20f6c4cccda1398eee45a98ceeabfec9e59605e" name="xv" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.0-1.0" date="1719403200">- Update to 5.2.0
  - Made some improvements to WEBP support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.0-1.0" date="1723550400">- Update to 6.0.0
  - Add basic HiDPI support
  - Improve the compatibility of the source code with more modern C standards
    (e.g., C23)
  - Fix the build with link-time optimization (GH#25)
  - Fix many other bugs
- Package NEWS.txt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.1-1.0" date="1727179200">- Update to 6.0.1
  - xvjpeg.c, xvpng.c: Fix gcc warnings on -Wclobbered
  - xvjpeg.c: Fix a bad memory access on jpegs with inverted data
  - Fix xvtext.c overwrite exposed by the link-time optimization fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.2-1.0" date="1728993600">- Update to 6.0.2
  - Added -isize option to control the icon size in the browser: the syntax is
    -isize &lt;width&gt; or -isize &lt;width&gt;x&lt;height&gt;
    If the height is omitted, it defaults to the width * 3/4
  - xv now checks the XV_OPTIONS environment variable before reading the
    command line; xv splits it into words and parses it like command line
    options
    Use XV_OPTIONS to set default options</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.4-1.0" date="1755864000">- Update to 6.0.4
  - Updated URLs for the xv website
  - Fix crash when freeing JPEG comments (GH#37)
- Drop redundant scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-1.0" date="1764590400">- Update to 6.1.0
  - Add support for EXIF orientation tags (GH#40)
  - Add support for depth 30, or 10bit/colour, for compatibility with modern
    graphics stack (GH#39)
  - Fix wasJpegUp → wasJp2kUp (GH#38)
- Build with EXIF (orientation) and XRANDR support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.2.0-1.0" date="1772452800">- Update to 6.2.0
  - Make EXIF orientation support generic rather than being tied to JPEG
  - Add orientation support to WebP images
  - Add sample WebP image with EXIF orientation flags set (not packaged)</changelog>
</package>
<package pkgid="84d1ce44078d7f81a7e26dc2d9bd1de7b7fe93b030540ff727ff9f5f5c951972" name="xv-doc" arch="noarch">
  <version epoch="0" ver="6.2.0" rel="1.0.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.0-1.0" date="1719403200">- Update to 5.2.0
  - Made some improvements to WEBP support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.0-1.0" date="1723550400">- Update to 6.0.0
  - Add basic HiDPI support
  - Improve the compatibility of the source code with more modern C standards
    (e.g., C23)
  - Fix the build with link-time optimization (GH#25)
  - Fix many other bugs
- Package NEWS.txt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.1-1.0" date="1727179200">- Update to 6.0.1
  - xvjpeg.c, xvpng.c: Fix gcc warnings on -Wclobbered
  - xvjpeg.c: Fix a bad memory access on jpegs with inverted data
  - Fix xvtext.c overwrite exposed by the link-time optimization fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.2-1.0" date="1728993600">- Update to 6.0.2
  - Added -isize option to control the icon size in the browser: the syntax is
    -isize &lt;width&gt; or -isize &lt;width&gt;x&lt;height&gt;
    If the height is omitted, it defaults to the width * 3/4
  - xv now checks the XV_OPTIONS environment variable before reading the
    command line; xv splits it into words and parses it like command line
    options
    Use XV_OPTIONS to set default options</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.4-1.0" date="1755864000">- Update to 6.0.4
  - Updated URLs for the xv website
  - Fix crash when freeing JPEG comments (GH#37)
- Drop redundant scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-1.0" date="1764590400">- Update to 6.1.0
  - Add support for EXIF orientation tags (GH#40)
  - Add support for depth 30, or 10bit/colour, for compatibility with modern
    graphics stack (GH#39)
  - Fix wasJpegUp → wasJp2kUp (GH#38)
- Build with EXIF (orientation) and XRANDR support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.2.0-1.0" date="1772452800">- Update to 6.2.0
  - Make EXIF orientation support generic rather than being tied to JPEG
  - Add orientation support to WebP images
  - Add sample WebP image with EXIF orientation flags set (not packaged)</changelog>
</package>
<package pkgid="5b5f94bbecba530f9ec6ea93a1b0164348686545579f1f7a71bd8c5f7f6a3cc7" name="xz" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="590af92b75013f1a8c25f23ca0d117c3c9a66e5aca6949787c9eda1174d06a17" name="xz-devel" arch="i686">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="7f287eea27cdd06a064ced125c96f17bc9e3f623b30b1527753d8a1f5bd18ee4" name="xz-devel" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="604e39ecd8b411fcb923fcef1435fef56b83b3c1233d26de1143886b09b98192" name="xz-libs" arch="i686">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="87cbcbeb9b75690e0a9b56046fc45d33bcc088888fd14c67705d764df4a26c1f" name="xz-libs" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="2c05bf0d702b76cd331fc46b27cb0481c781d8170505190a3250a958415f6640" name="xz-lzma-compat" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="cdf0e853fb78b5d98c1dad1d43fd2c21877292c5bc68ff2e20b033750ded3e03" name="xz-static" arch="i686">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
<package pkgid="a0e9bba56960ed20681911b855115ae25d54d341f6f21c16d170f10968ef57e5" name="xz-static" arch="x86_64">
  <version epoch="0" ver="5.4.1" rel="1.0.cf.fc37"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-5.0.cf" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-7.0.cf" date="1627214400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
- Remove the ancient PPC64 hack</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-8.0.cf" date="1643025600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-9.0.cf" date="1650283200">- xzgrep: Arbitrary-file-write vulnerability (#2073310, CVE-2022-1271)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.5-10.0.cf" date="1658664000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.6-1.0.cf" date="1661947200">- Update to 5.2.6 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.7-1.0.cf" date="1665662400">- Update to version 5.2.7 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.9-1.0.cf" date="1669896000">- Update to version 5.2.9 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.4.1-1.0.cf" date="1674475200">- Update to version 5.4.1 (see NEWS for details)</changelog>
</package>
</otherdata>