<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="625">
<package pkgid="b6315526e521ce20d1b8c80cdf6092b1790b73ec48a124aa6e82065929d2befe" name="Judy" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="42.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-37" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-38" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-39" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-41" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-42" date="1769774400">- Start providing the lower-case 'judy-devel' name for compatibility with
  other RPM based distributions (rhbz#2435466)</changelog>
</package>
<package pkgid="8f6c5593fae464ebcb45c6c41fe110e29d4d8e85d6276ddc1b4635d96e016190" name="Judy-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="42.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-37" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-38" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-39" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-41" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.5-42" date="1769774400">- Start providing the lower-case 'judy-devel' name for compatibility with
  other RPM based distributions (rhbz#2435466)</changelog>
</package>
<package pkgid="d5aece1ad2cb061ed3a8b4caf10f5d334ef47211f94f541d1187f5f5f25642d0" name="ansible-collection-community-libvirt" arch="noarch">
  <version epoch="0" ver="2.3.0" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.1-1" date="1734436800">- Update to 1.3.1 (rhbz#2332772)
  - libvirt_lxc: add configuration for libvirt_lxc_noseclabel</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.0-1" date="1748260800">- Update to 1.4.0 (rhbz#2368572)
  - virt: implement basic check mode functionality (GH#98)
  - virt: implement the gathering of Dom UUIDs (GH#187)
  - virt: implement the gathering of Dom interface names and MAC addresses
    (GH#189)
  - virt: implement the removal of volumes for a Dom (GH#177)
  - New module community.libvirt.virt_volume: manage libvirt volumes inside a
    storage pool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0.0-1" date="1753099200">- Update to 2.0.0 (rhbz#2382300)
  - This is a major release of the community.libvirt collection
  - Many changes for virt_volume: see CHANGELOG.rst for details
  - New module community.libvirt.virt_install to provision new virtual machines
    using the virt-install tool</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-4" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1.0-1" date="1771243200">- Update to 2.1.0 (rhbz#2440142)
  - This is a minor release of the community.libvirt collection
  - virt_install:
    - Added support for memoryBacking source type configuration, including
      memfd for shared memory (GH#228)
    - Added support for primary value attribute (_value or value) in dynamic
      dict options that require a primary value alongside additional attributes
    - Enhanced cloud_init configuration handling for sub-options (meta-data,
      user-data and network-config) to support both string and dictionary inputs
    - Refactored common virt-install functionality into module_utils and
      doc_fragments to enable code reuse between modules
    - Fixed cloud_init configuration handling for meta-data, user-data and
      network-config
    - Fixed the dict-based options handling for events, resource and sysinfo
      options
  - virt_volume:
    - New return key/value pairs 'Type', 'Capacity' and 'Allocation' were added
      to command 'list_volumes' (GH#187)
    - Added ability to resize volumes if defined capacity is different; if
      volume already exists and defined capacity in XML differs, a resize is
      attempted
  - New module community.libvirt.virt_cloud_instance: Provision new virtual
    machines from cloud images via libvirt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.0-1" date="1774872000">- Update to 2.2.0 (rhbz#2452926)
  - This is a minor release of the community.libvirt collection
  - virt_cloud_instance: Added command's return field to provide visibility
    into executed commands during VM provisioning
  - virt_install: Added command's return field to provide visibility into
    executed commands during VM provisioning
  - libvirt_qemu: Vendor '_parse_clixml' locally to fix 'ImportError' on
    ansible-core devel (2.21+)</changelog>
  <changelog author="* Mon Mar 30 2026 Paul Howarth &lt;paul@city-fan.org&gt; - 2.3.0-1" date="1782820800">- Update to 2.3.0 (rhbz#2494563)
  - This is a minor release of the community.libvirt collection
  - inventory: Added option 'alternate_id_groups' (default 'true')
  - inventory: Added option 'filter' (default '.*') to include domains by name
    or uuid that match regex
  - inventory: Added checks to prevent powered-off hosts from being issued
    guest agent calls
  - plugins: Replaced deprecated imports from 'ansible.module_utils._text' with
    'ansible.module_utils.common.text.converters' to avoid ansible-core
    deprecation warnings and prepare for removal of the private import path in
    ansible-core 2.24
  - virt: Add 'get_ifaddresses' function to retrieve domain interface addresses
  - virt_cloud_instance: Add support for compressed base images (gzip, bzip2,
    xz)
  - virt_cloud_instance: Add passt network support via shared network schema
    (GH#231)
  - virt_cloud_instance: Added cloud-config header when converting cloud-init
    user-data from dictionary form
  - virt_cloud_instance: Check if instance exists and not running before
    calling 'create()'
  - virt_install: Add 'wait_timeout' parameter to wait for multi-phase
    unattended installs to complete
  - virt_install: Add 'wwn' parameter to disk specifications for setting the
    World Wide Name of a disk device (GH#271)
  - virt_install: Add passt network support with 'value' shorthand and
    structured 'type: user' form (GH#231)
  - virt_install: Added cloud-config header when converting cloud-init
    user-data from dictionary form
  - virt_install: Remove incorrect 'required=True' from 'install.os' parameter
    to allow 'install.no_install=true' without specifying an OS</changelog>
</package>
<package pkgid="cb8e7d10cba19dd9baca6dd5840976bd05c54b1088026c598cb54ae2da41d544" name="bluefish" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.17-5" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.18-1" date="1761912000">- Update to 2.2.18 (rhbz#2407559)
  - Much better CSS language support
  - The color editor now also supports hsl() and rgb() style colors
  - Show colors by just hovering the mouse over a color code
  - Reinstate feature to dynamically change a shortcut key by hovering the
    mouse over a menu item and pressing a new shortcut key again; this feature
    was present in all gtk2 applications and has not been working for bluefish
    gtk3 builds until now
  - Remove the infobrowser from the build since it no longer compiles with new
    libxml versions; this plugin was already deprecated and disabled by default
    for years</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.19-1" date="1763812800">- Update to 2.2.19 (rhbz#2416526)
  - Fix a regression in 2.2.18 that could cause a crash when right clicking in
    a document of type Text
  - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
    main menu is now also working in the snippets menu</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.19-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1770033600">- Update to 2.4.0 (rhbz#2435810)
  - Bluefish 2.4.0 has some new features and many small improvements; it is no
    longer  a 2.2 release because backwards compatibility with the 2.0 series
    of Bluefish has been removed
  - If you upgrade from 2.0 straight to 2.4, your config files and project
    files are no longer 100% correctly loaded
  - Starting from 2.4, Bluefish will place config files no longer in ~/.bluefish
    - On Linux it will be ~/.config and ~/.local/
    - On Windows it will be LocalAppData and RoamingAppData
    - On OSX it will be ~/Library/Application Support
  - The biggest new feature, still experimental, is that you can edit two
    documents side-by-side
  - You can change opening and ending tags in XML or HTML simultaneously if you
    hit [ctrl][t]
  - You can more easily save the current contents to a template
  - For new users, and also active in new projects, is a UI selection dialog,
    where you can choose between a UI optimised for web development,
    programming or just have everything enabled or disabled; this will help
    new Bluefish users to customize Bluefish in an easier way
  - There are a few fixes as well:
    - Selecting lines by dragging in the margin works more reliably
    - Paste special works more reliably
    - Line comments in Python are better detected, which is visible in the
      syntax highlighting
    - The toggle comment function is improved
    - The Windows build has better error messages when starting external
      commands fails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.1-1" date="1775131200">- Update to 2.4.1
  - Bluefish 2.4.1 is a minor maintenance release with a few notable changes
  - The experimental "side by side" feature that was introduced in 2.4.0 is no
    longer experimental and is fully stable now
  - A new feature is that Bluefish will automatically adjust the text colours
    for people that use a dark desktop theme
  - Translations for Ελληνικά (Greek) and தமிழ் (Tamiḻ) have been completely
    renewed
  - A critical bug and a regression in the split view function has been fixed
  - The windows build has some minor improvements
  - Several translations are updated</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.1-1.1" date="1779451200">- Rebuild to stay ahead of EPEL-10 for repoclosure</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.1-2" date="1780833600">- Rebuilt for Python 3.15 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.1-3" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.2-1" date="1784376000">- Update to 2.4.2
  - Bluefish 2.4.2 has a few new features and a few fixes
  - The most visible change is that Bluefish detects icon themes, and has
    built-in icon themes for "Breeze" and "Breeze-dark"; this is a big
    improvement for the visual integration of Bluefish on a KDE desktop
  - The most important fix is for a segfault that could occur if a filename on
    disk has a specific broken UTF-8 encoding
  - Some small improvements are reduced memory usage when working with 100+
    files simultaneously, some translation improvements, and the &lt;meta&gt;
    author field is now configurable</changelog>
</package>
<package pkgid="a7153f2934af9f42a148fd6970738eabf289079a4b56982c2a15cb232ccd37a4" name="bluefish-shared-data" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.17-5" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.18-1" date="1761912000">- Update to 2.2.18 (rhbz#2407559)
  - Much better CSS language support
  - The color editor now also supports hsl() and rgb() style colors
  - Show colors by just hovering the mouse over a color code
  - Reinstate feature to dynamically change a shortcut key by hovering the
    mouse over a menu item and pressing a new shortcut key again; this feature
    was present in all gtk2 applications and has not been working for bluefish
    gtk3 builds until now
  - Remove the infobrowser from the build since it no longer compiles with new
    libxml versions; this plugin was already deprecated and disabled by default
    for years</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.19-1" date="1763812800">- Update to 2.2.19 (rhbz#2416526)
  - Fix a regression in 2.2.18 that could cause a crash when right clicking in
    a document of type Text
  - The dynamic shortcut key setting that was re-introduced in 2.2.18 for the
    main menu is now also working in the snippets menu</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.19-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.0-1" date="1770033600">- Update to 2.4.0 (rhbz#2435810)
  - Bluefish 2.4.0 has some new features and many small improvements; it is no
    longer  a 2.2 release because backwards compatibility with the 2.0 series
    of Bluefish has been removed
  - If you upgrade from 2.0 straight to 2.4, your config files and project
    files are no longer 100% correctly loaded
  - Starting from 2.4, Bluefish will place config files no longer in ~/.bluefish
    - On Linux it will be ~/.config and ~/.local/
    - On Windows it will be LocalAppData and RoamingAppData
    - On OSX it will be ~/Library/Application Support
  - The biggest new feature, still experimental, is that you can edit two
    documents side-by-side
  - You can change opening and ending tags in XML or HTML simultaneously if you
    hit [ctrl][t]
  - You can more easily save the current contents to a template
  - For new users, and also active in new projects, is a UI selection dialog,
    where you can choose between a UI optimised for web development,
    programming or just have everything enabled or disabled; this will help
    new Bluefish users to customize Bluefish in an easier way
  - There are a few fixes as well:
    - Selecting lines by dragging in the margin works more reliably
    - Paste special works more reliably
    - Line comments in Python are better detected, which is visible in the
      syntax highlighting
    - The toggle comment function is improved
    - The Windows build has better error messages when starting external
      commands fails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.1-1" date="1775131200">- Update to 2.4.1
  - Bluefish 2.4.1 is a minor maintenance release with a few notable changes
  - The experimental "side by side" feature that was introduced in 2.4.0 is no
    longer experimental and is fully stable now
  - A new feature is that Bluefish will automatically adjust the text colours
    for people that use a dark desktop theme
  - Translations for Ελληνικά (Greek) and தமிழ் (Tamiḻ) have been completely
    renewed
  - A critical bug and a regression in the split view function has been fixed
  - The windows build has some minor improvements
  - Several translations are updated</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.1-1.1" date="1779451200">- Rebuild to stay ahead of EPEL-10 for repoclosure</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.1-2" date="1780833600">- Rebuilt for Python 3.15 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.1-3" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.2-1" date="1784376000">- Update to 2.4.2
  - Bluefish 2.4.2 has a few new features and a few fixes
  - The most visible change is that Bluefish detects icon themes, and has
    built-in icon themes for "Breeze" and "Breeze-dark"; this is a big
    improvement for the visual integration of Bluefish on a KDE desktop
  - The most important fix is for a segfault that could occur if a filename on
    disk has a specific broken UTF-8 encoding
  - Some small improvements are reduced memory usage when working with 100+
    files simultaneously, some translation improvements, and the &lt;meta&gt;
    author field is now configurable</changelog>
</package>
<package pkgid="d70302c806028bc3d2995e3d0518b346bad418593796093fd16650245556e10c" name="btcflash" arch="x86_64">
  <version epoch="11" ver="1.1" rel="2.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="e3990f429772ab3e60c27f23949b1577f47a538e1e115518be3a3fa72834ec2c" name="cdda2wav" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="d53b4133c991ca6df365c45b94fa1f9d610144ba020ca61448630b5e1b154579" name="cdrecord" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="f1d8bf4f395e5e6ca05e4289710c62d909d2886c2b3da569cd8beededdb19d8f" name="cdrtools-devel" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="4d5aaaf485e74d5700bb38fd0a841e41a4b3559683992fb32911b7016dc3f531" name="cdrtools-libs" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="66b3e9f948228cad367ddd858a085c539652f82b6925426a99cfeb9aa5d57734" name="check" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="dbfa9e8c1de2f671bf4e5f6dc75d3e2ce3bfeee67ea74c339e615de42bdad1fa" name="check-checkmk" arch="noarch">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="f66419ad7cb04087866434e1ecaf2020170de97ecacbcb2a4f4c3605767cb50c" name="check-devel" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="39585207aac08d0265338db52ae880240acfeebc04dedb75c19a20488b359fbe" name="check-static" arch="x86_64">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="875bc3b211e730a0b6f2ef292b8b8b5b1adad78b86536109cff17f23cabb4897" name="city-fan.org-release" arch="noarch">
  <version epoch="0" ver="3" rel="23.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-14" date="1723809600">- Add support for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-15" date="1730289600">- Fedora 41 rebuild complete and released</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-16" date="1738843200">- Fedora 42 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-17" date="1745236800">- Fedora 42 rebuild complete and released
- Drop support for EOL distros prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-18" date="1751889600">- Include GPG key for Fedora 43 in package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-19" date="1755086400">- Fedora 43 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-20" date="1761739200">- Fedora 43 rebuild complete and released</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-21" date="1770379200">- Fedora 44 branched</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-22" date="1771502400">- Fedora 44 rebuild complete</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3-23" date="1777896000">- Fedora 44 released</changelog>
</package>
<package pkgid="f119c4b8a624e167ef31db02cba2c2687c636e6e765f13aa6a7cef410ee74d82" name="contagged" arch="noarch">
  <version epoch="0" ver="0.8.0" rel="6.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8.0-5" date="1642507200">- Rebase code using actively-maintained fork at https://github.com/bob4os/contagged
- Drop support for old distributions prior to Fedora 19
  - Drop support for Apache httpd 2.2
  - Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8.0-6" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="3fe468ee616e59281000f893c7a56ac57fb2d71c814fc167be3b11316eb5fae8" name="curl" arch="i686">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="a9a80429b5be8511a00d0ff2b56a3da58a1e71f1c62cd58c86308e189a15f88d" name="curl" arch="x86_64">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="9c48047b82e7d41b38ffa02056b66b58680f1befab255a0a833bc0cf4bb38d96" name="davfs2" arch="x86_64">
  <version epoch="0" ver="1.7.3" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.0-7.0.cf" date="1730289600">- Add support for building with neon version 0.33</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-1.0.cf" date="1732276800">- Update to 1.7.1
  - The project has been moved to github, which will make it easier to track
    issues, receive PR requests, implement CI, etc.
  - Hide password prompt when -o username=myname is specified
  - Fix segfault on prop query on backup node
  - Fix autoload fuse module</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-1.1.cf" date="1733486400">- Add support for building with neon version 0.34</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-3.0.cf" date="1753876800">- Add sysusers.d config file to allow rpm to create users/groups automatically
  from Fedora 43 onwards
- Add support for building with neon version 0.35</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.1-4.0.cf" date="1753876801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.2-1.0.cf" date="1756209600">- Update to 1.7.2 (rhbz#2391098)
  - Add support for libneon 34, 35
  - Increase buf read size to 64 (fixes read issue on linux 6.16)
  - Allow setting a mount password via DAVFS_PASSWORD
  - Introduce sync_on_lookup option (off by default)
  - Don't compress man pages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.2-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7.3-1.0.cf" date="1773403200">- Update to 1.7.3 (rhbz#2447065)
  - Add musl support
  - Fix macro-substitution in manual pages
  - Remove hardcoded neon versions from configure.ac
- Use %{make_build} and %{make_install}
- Consider AUTHORS as a license file rather than just documentation</changelog>
</package>
<package pkgid="a54f85bac78ee93e73943361c8aa5d38a17bd663b25a94dc76bbbf10dc8f43a1" name="demoroniser" arch="noarch">
  <version epoch="0" ver="1" rel="3.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1-2" date="1651060800">- Modernize spec and add dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1-3" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="29eb284563fabeff098c05ea333fa12ff5f6d8140a6dfefe965c62b3c98b69e8" name="dovecot" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="c16910ebe719d61b398b4dc0a099125e92a34ef64e9a6eecf035284942ac6279" name="dovecot-devel" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="9137c3d8b8db721ba090727b76297600d4126c7a8e6d3bb3cad1a41251c4c068" name="dovecot-mysql" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="d785d6fef8f87a6ea696f34df36b3ad906afda643b4bb72f774c895565f5eb95" name="dovecot-pgsql" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="5657e230388c73d7e48fe00dac493a5b2531e3f93086bd2f67d3a842e12f6cf0" name="dovecot-pigeonhole" arch="x86_64">
  <version epoch="1" ver="2.3.21.1" rel="5.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-3.0.cf" date="1698235200">- Drop lucene to reduce dependencies from Fedora 40, EL-10 onwards; use solr
  for fts instead
- Drop now-redundant build dependency glibc-gconv-extra</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-4.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-5.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-6.0.cf" date="1706788800">- Rebuilt for ICU 74</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-7.0.cf" date="1711540800">- Drop i686 build from Fedora 40 onwards as per
  https://fedoraproject.org/wiki/Changes/EncourageI686LeafRemoval</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21-9.0.cf" date="1721304000">- Fix sieve crash when there are two missing optional scripts
- Do not use deprecated OpenSSL v3 ENGINE API if the Provider API is available
- Drop dependency on libstemmer on RHEL
- Use sysusers from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-1.0.cf" date="1724155200">- Update dovecot to 2.3.21.1
  - A large number of address headers in email resulted in excessive CPU usage
    (CVE-2024-23184)
  - Abnormally large email headers are now truncated or discarded, with a limit
    of 10MB on a single header and 50MB for all the headers of all the parts of
    an email (CVE-2024-23185)
  - oauth2: Dovecot would send client_id and client_secret as POST parameters
    to introspection server; these need to be optionally in Basic auth instead
    as required by OIDC specification
  - oauth2: JWT key type check was too strict
  - oauth2: JWT token audience was not validated against client_id as required
    by OIDC specification
  - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol
    specific error message on all errors, which broke OIDC discovery
  - oauth2: JWT aud validation was not performed if aud was missing from token,
    but was configured on Dovecot</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-2.0.cf" date="1728302400">- Update pigeonhole to 0.5.21.1
  - sieve: When saving to local storage failed after a successful action in
    sieve (e.g. redirect, vacation), the mail was reported as successfully
    delivered, although it was lost locally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-3.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.3.21.1-5.0.cf" date="1738843200">- Fix FTBFS in Rawhide
- Fix sysusers config file name</changelog>
</package>
<package pkgid="cfa78b9243d1429cc45af20c2c41aae732a78727f916ddc8f3dc2675a078ef0c" name="drive-google" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="2.gita42ab82.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-2.gita42ab82" date="1716811200">- Build using go modules since old method no longer works
  (https://github.com/odeke-em/drive/issues/1144)</changelog>
</package>
<package pkgid="51f5420688c11d5a20f2f93f462d4a893a61cb55c866310abd928edaacdc8b63" name="geoipupdate" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.0.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.0-1" date="1732017600">- Update to 7.1.0
  - Allow the 'Host' configuration directive and the 'GEOIPUPDATE_HOST'
    environment variable to accept a value with the scheme set; if not set, it
    will continue to default to 'https://' (GH#310)
  - Export 'HTTPError' to enable fine-grained error handling for users of
    'github.com/maxmind/geoipupdate/client' (GH#341)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.0-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.1-1" date="1752235200">- Update to 7.1.1
  - Update dependencies and re-build binaries with new Go version; no
    substantive changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.1-2" date="1753876800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.1-3" date="1755345600">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.1-4" date="1760097600">- Rebuild for unknown reason</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.0.0-1" date="1784030400">- Update to 8.0.0</changelog>
</package>
<package pkgid="1e7d8fc9c664488ec8d9c8ccbb34fbf50fb66ce609b3f5a986e86ee222ee1d0c" name="geoipupdate-cron" arch="noarch">
  <version epoch="0" ver="8.0.0" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.0.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.0-1" date="1732017600">- Update to 7.1.0
  - Allow the 'Host' configuration directive and the 'GEOIPUPDATE_HOST'
    environment variable to accept a value with the scheme set; if not set, it
    will continue to default to 'https://' (GH#310)
  - Export 'HTTPError' to enable fine-grained error handling for users of
    'github.com/maxmind/geoipupdate/client' (GH#341)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.0-2" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.1-1" date="1752235200">- Update to 7.1.1
  - Update dependencies and re-build binaries with new Go version; no
    substantive changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.1-2" date="1753876800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.1-3" date="1755345600">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.1.1-4" date="1760097600">- Rebuild for unknown reason</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.0.0-1" date="1784030400">- Update to 8.0.0</changelog>
</package>
<package pkgid="aa5b96a7bc7fe70bd675658cf32ce405c698f6a069b63e8d83d37ce19cfb6bdb" name="grepmail" arch="noarch">
  <version epoch="0" ver="5.3111" rel="22.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-16.0.cf" date="1674129600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-17.0.cf" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-18.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-20.0.cf" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.3111-22.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="0aa06d524ee2b6d7ba5f93ffdcbde235c421aa7a1989356004627b454c57ff0c" name="gtkwave" arch="x86_64">
  <version epoch="0" ver="3.3.128" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.122-1" date="1745323200">- Update to 3.3.122
  - Buffer warning fix in fstVcdIDForFwrite
  - Warning fixes in vzt_read.c and fstapi.c
  - Prototype fixes for port to gcc15
  - Fixes for tcl9 compatibility
  - Added fixes for --saveonexit command line option
  - Fix for convert_real for TR_REAL traces
  - Fix for popen_san() in vcd2fst using fsdb binaries
  - Added fstWriterGetFlushContextPending() to fstapi.c/.h
  - Reenable wayland code for primary and baseline markers in wavewindow.c
  - Unnamed scope fix for fstReader
  - Opaque pointer warning fix for fstapi.c
  - Remove broken pseudo-2D array support in fst.c
  - Fix in fst.c for signals whose MSB/LSB/len mismatch
  - libfst #15: fstReaderOpen should not fail on empty FST file
  - Fix crash introduced in 3.3.120 with legacy VCD loader caused by
    "Fix case of missing newline at EOF for VCD loaders"
  - Fix fstminer not handling string transitions correctly (GH#423)
  - Fix in fst.c for duplicate string values
  - Remove duplicate string values from adjacent value changes
  - libghw: Add from upstream for ghdl_rtik_type_i64
  - Fix inconsistent handling of invalid vector bounds in VCD and FST loaders
    (GH#428)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.123-1" date="1746792000">- Update to 3.3.123
  - Fix broken autocoalesce of bitblasted vectors that fix for GH#428 in
    3.3.122 introduced
  - Fix improper autocoalesce of adjacent duplicate symbols
  - Preserve dimension on integer array element when expanded</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.124-1" date="1747224000">- Update to 3.3.124
  - Ensure type name in $var for VCD saver is &gt;0 length
  - Preserve bitblasted vector ordering with VCD saver.
  - Use full type names in VCD saver instead of abbreviations
  - Dump all bits for a bitblasted vector in VCD saver in order to ensure
    stray bit extractions do not cause a failure to reconstruct vectors in
    proper order in the extracted file</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.124-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.125-1" date="1755691200">- Update to 3.3.125
  - Added json2stems to distribution to support newer versions of Verilator
  - VCD parser fix for colon in VCD variable name
  - Parameter size 0 fix for Vivado: backs out very old fix (for MTI) that
    converts 0 size signals to reals
  - Update vcd2fst so that it handles MTI 0 size conversion</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.126-1" date="1767614400">- Update to 3.3.126
  - Added -H --noheader command line option for GTK3
  - Added headerbar rc variable to disable GTK3 headerbars
  - Fix for rendering multiline string constants in dumps
  - Add warning message for missing XPM loader
  - Updated libghw to current version
  - Changed behaviour of X search in pattern search so it is matched by a
    single X bit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.126-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.127-1" date="1776081600">- Update to 3.3.127
  - Fix for fixed point shift that does not disable it on the specify value
    change menu option
  - Changed ps2pdf to pstopdf on Mac as ps removed by Sonoma
  - Warnings fix in vcd2fst for missing string.h include
  - Added FST_ST_SV_ARRAY (FST) and "sv_array" (VCD) for arrays
    (gtkwave/libfst#17)
  - Wrote replacement for gdk_pixbuf_new_from_xpm_data
  - Update FSDB to handle FST_ST_SV_ARRAY (VCS emits this),
    FSDB_ST_SV_INTERFACEPORT_REF, and FSDB_VT_STRING
  - Added "SV_ST_ARRAY" to exclude file parsing on init
  - Fix use after free of GLOBALS-&gt;entrybox_text in regexp_highlight_generic()
- Drop dependency on gdk-pixbuf2-modules-extra, XPM support now done locally</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.127-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.3.128-1" date="1784721600">- Update to 3.3.128
  - Hurd compile fix
  - Update lz4 to 1.10.0</changelog>
</package>
<package pkgid="371ff6f746007758c0ce99f4fe32d471a7e3c3dec2c2c01099ccd2f3258c7e0b" name="libcurl" arch="i686">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="9aa0bb453b9f73a6d534900f1e5bd6b92728a67ca9ece4375451b078198686c6" name="libcurl" arch="x86_64">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="65f1d4b587a20b7e8079f7c1ea320b041b5b969329e1d8857d74f2c387911847" name="libcurl-devel" arch="i686">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="f2c0dc0ad7f54213c82275deb3bc311217b925a1f9d03874f6b6d076adef35b3" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="5c6823f09eeceda632d04edd75df5788099bc83de388661a4c981df3a459e008" name="libcurl-minimal" arch="i686">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="e2ed9978ef0342182d45c003a09ac3f9ce28b1e3afff035aebeec536f06a4f40" name="libcurl-minimal" arch="x86_64">
  <version epoch="0" ver="8.21.0" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.17.0-4.0.cf" date="1764849600">- Apply upstream patches for valgrind issues in HTTP/3 (#2408809)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-1.0.cf" date="1767787200">- Update to 8.18.0
  - build: Drop support for VS2008 (Windows)
  - build: Drop Windows CE / CeGCC support
  - gnutls: Drop support for GnuTLS &lt; 3.6.5
  - gnutls: Implement CURLOPT_CAINFO_BLOB
  - openssl: Bump minimum OpenSSL version to 3.0.0
  - _PROGRESS.md: Add the E unit, mention kibibyte
  - alt-svc: More flexibility on same destination
  - altsvc: Accept ma/persist per alternative entry
  - altsvc: Make it one malloc instead of three per entry
  - AmigaOS: Increase minimum stack size for tool_main
  - apple sectrust: Fix ancient evaluation
  - apple-sectrust: Always ask when 'native_ca_store' is in use
  - asyn-ares: Handle Curl_dnscache_mk_entry() OOM error
  - asyn-ares: Remove hostname free on OOM
  - asyn-thrdd: Fix Curl_async_getaddrinfo() on systems without getaddrinfo
  - asyn-thrdd: Release rrname if ares_init_options fails
  - auth: Always treat Curl_auth_ntlm_get() returning NULL as OOM
  - autotools: Add nettle library detection via pkg-config (for GnuTLS)
  - autotools: Drop autoconf &lt;2.59 compatibility code (zz60-xc-ovr)
  - autotools: Fix LargeFile feature display on Windows (after prev patch)
  - autotools: Tidy-up 'if' expressions
  - badwords: Add fist -&gt; first, fix fallouts
  - badwords: Catch and fix threading-related words
  - badwords: Fix issues found in scripts and other files
  - badwords: Fix issues found in tests
  - build: Add build-level 'CURL_DISABLE_TYPECHECK' options
  - build: Exclude clang prereleases from compiler warning options
  - build: Replace '-pedantic' with '-Wpedantic' when supported
  - build: Set '-Wno-format-signedness'
  - build: Tidy up MSVC CRT warning suppression macros
  - ccsidcurl: Make curl_mime_data_ccsid() use the converted size
  - cf-h1-proxy: Support folded headers in CONNECT responses
  - cf-https-connect: Allocate ctx at first in cf_hc_create()
  - cf-socket: Drop feature check for 'IPV6_V6ONLY' on Windows
  - cf-socket: Enable Win10 'TCP_KEEP*' options with old SDKs
  - cf-socket: Limit use of 'TCP_KEEP*' to Windows 10.0.16299+ at runtime
  - cf-socket: Return OOM error if socket() fails due to OOM
  - cf-socket: Trace ignored errors
  - cfilters: Make conn_forget_socket a private libssh function
  - checksrc.pl: Detect assign followed by more than one space
  - cmake: Adjust defaults for target platforms not supporting shared libs
  - cmake: Define dependencies as 'IMPORTED' interface targets
  - cmake: Delete unused file 'CMake/CMakeConfigurableFile.in'
  - cmake: Disable 'CURL_CA_PATH' auto-detection if 'USE_APPLE_SECTRUST=ON'
  - cmake: Fix 'ws2_32' reference in 'curl-config.cmake'
  - cmake: Honour 'CURL_DISABLE_INSTALL' and 'CURL_ENABLE_EXPORT_TARGET'
  - cmake: Replace deprecated 'OPENSSL_FOUND' with 'OpenSSL_FOUND'
  - cmake: Replace deprecated 'PERL_FOUND' with 'Perl_FOUND'
  - cmake: Save and restore 'CMAKE_MODULE_PATH' in 'curl-config.cmake'
  - cmake: Set found status to OFF when not found (for compression deps)
  - code: Minor indent fixes before closing braces
  - CODE_STYLE.md: Sync banned function list with checksrc.pl
  - compressed.md: Might generate a huge amount of bytes
  - config-win32.h: Delete obsolete, non-Windows comments
  - config-win32.h: Drop unused/obsolete 'CURL_HAS_OPENLDAP_LDAPSDK'
  - config2setopts: Add space in cookie header with multiple -b
  - config2setopts: Bail out if curl_url_get() returns OOM
  - config2setopts: Exit if curl_url_set() fails on OOM
  - configure: Delete unused variable
  - conncache: Silence '-Wnull-dereference' on gcc 14 RISC-V 64
  - conncontrol: Re-use handling
  - connect: Reshuffle Curl_timeleft_ms to avoid 'redundant condition'
  - connection: Attached transfer count
  - content_encoding: Avoid strcpy
  - cookie: Return proper error on OOM
  - cookie: Allocate the main struct once cookie is fine
  - cookie: Flush better
  - cookie: Only keep and use the canonical cleaned up path
  - cookie: Propagate errors better, clean up the internal API
  - cookie: Return error on OOM
  - cookie: When parsing a cookie header, delay all allocations until okay
  - cshutdn: Acknowledge FD_SETSIZE for shutdown descriptors
  - curl: Fix progress meter in parallel mode
  - curl_fopen: Do not pass invalid mode flags to 'open()' on Windows
  - curl_gssapi: Make sure Curl_gss_log_error() has an initialized buffer
  - curl_ntlm_core: Fix DES_* symbols for some wolfSSL builds
  - curl_quiche: Refuse headers with CR, LF or null bytes
  - curl_sasl: If redirected, require permission to use bearer (CVE-2025-14524)
  - curl_sasl: Make Curl_sasl_decode_mech compare case insensitively
  - curl_setup.h: Document more funcs flagged by '_CRT_SECURE_NO_WARNINGS'
  - curl_setup.h: Drop stray '#undef stat' (Windows)
  - curl_setup.h: Drop superfluous parenthesis from 'Curl_safefree' macro
  - curl_threads: Don't do another malloc if the first fails
  - curl_trc: Delete unused DoH remains
  - CURLINFO: Remove 'get' and 'get the' from each short desc
  - CURLINFO_SCHEME/PROTOCOL: They return the "scheme" for a "transfer"
  - CURLINFO_TLS_SSL_PTR.md: Remove CURLINFO_TLS_SESSION text
  - CURLMOPT_SOCKETFUNCTION.md: Fix the callback argument use
  - CURLOPT_ACCEPT_ENCODING.md: Warn about the expansion
  - CURLOPT_FOLLOWLOCATION.md: s/Authentication:/Authorization:/
  - CURLOPT_HAPROXY_CLIENT_IP.md: Emphasize reused connection use
  - CURLOPT_READFUNCTION.md: Clarify the size of the buffer
  - CURLOPT_SSH_KEYFUNCTION.md: Fix minor indent mistake in example
  - curlx/fopen: Replace open CRT functions with their '_s' counterparts (Windows)
  - curlx/multibyte: Stop setting macros for non-Windows
  - curlx/strerr: Use 'strerror_s()' on Windows
  - curlx: Add 'curlx_rename()', fix to support long filenames on Windows
  - curlx: curlx_strcopy() instead of strcpy()
  - curlx: Limit use of system allocators to the minimum possible
  - curlx: Replace 'mbstowcs'/'wcstombs' with '_s' counterparts (Windows)
  - curlx: Replace 'sprintf' with 'snprintf'
  - curlx: Use curl alloc in 'curlx_win32_stat()' (Windows)
  - curlx: Use curlx allocators in non-memdebug builds (Windows)
  - DEPRECATE: Add CMake &lt;3.18 deprecation for April 2026
  - digest: Fix OWS and escaped quote handling
  - digest_sspi: Fix a memory leak on error path
  - digest_sspi: Properly free sspi identity
  - DISTROS.md: Add OpenBSD
  - DISTROS: Fix a Mageia URL
  - DISTROS: Remove broken URLs for buildroot
  - doc: Some returned in-memory data may not be altered
  - Dockerfile: Update debian:bookworm-slim digest to e899040
  - docs/libcurl: Fix C formatting nits
  - docs: Add a note about --compressed to note about binary output
  - docs: Clarify how to do unix domain sockets with SOCKS proxy
  - docs: Fix checksrc 'EQUALSPACE' warnings
  - docs: Fix time_posttransfer output unit as seconds
  - docs: Mention umask need when curl creates files
  - docs: Remove dead URLs
  - docs: Rename CURLcode variables to 'result'
  - docs: Spell it Rustls with a capital R
  - docs: Switch more URLs to https://
  - docs: Use .example URLs for proxies
  - docs: Use mresult as variable name for CURLMcode
  - escape: Add a length check in curl_easy_escape
  - example: Fix formatting nits
  - examples/crawler: Fix variable
  - examples/multi-uv: Fix invalid req-&gt;data access
  - examples/threaded-ssl: Delete in favour of 'examples/threaded'
  - examples/threaded: Fix race condition
  - examples: Fix minor typo
  - examples: Make functions/data static where missing
  - examples: Tidy-up headers and includes
  - examples: Use 64-bit 'fstat' on Windows
  - FAQ/TODO/KNOWN_BUGS: Convert to markdown
  - FAQ: Fix hackerone URL
  - file: Do not pass invalid mode flags to 'open()' on upload (Windows)
  - formdata: Validate callback is non-NULL before use
  - ftp: Make EPRT connections non-blocking
  - ftp: Refactor a piece of code by merging the repeated part
  - ftp: Remove #ifdef for define that is always defined
  - ftp: Return better on OOM in two places
  - ftp: Return from ftp_state_use_port immediately on OOM
  - getenv: Drop internal 1-to-1 wrapper
  - getinfo: Improve perf in debug mode
  - gnutls: Add PROFILE_MEDIUM as default
  - gnutls: Report accurate error when TLS-SRP is not built-in
  - gtls: Add return checks and optimize the code
  - gtls: Call keylog_close in clean-up
  - gtls: Skip session resumption when verifystatus is set
  - h2/h3: Handle methods with spaces
  - headers: Add length argument to Curl_headers_push()
  - hostcheck: Fail wildcard match if host starts with a dot
  - hostip.h: Drop redundant 'setjmp.h' include
  - hostip: Don't store negative lookup on OOM
  - hostip: Make more functions return CURLcode
  - hostip: Only store negative response for CURLE_COULDNT_RESOLVE_HOST
  - hsts: Propagate and error out correctly on OOM
  - hsts: Use one malloc instead of two per entry
  - http: Acknowledge OOM errors from Curl_input_ntlm
  - http: Avoid two strdup()s and do minor simplifications
  - http: Error on OOM when creating range header
  - http: Fix OOM exit in Curl_http_follow
  - http: Handle oom error from Curl_input_digest()
  - http: Replace atoi use in Curl_http_follow with curlx_str_number
  - http: Return OOM errors from hsts properly
  - http: The :authority header should never contain user+password
  - http: Unfold response headers earlier
  - idn: Avoid allocations and wcslen on Windows
  - idn: Clarify null-termination on Windows
  - idn: Fix memory leak in 'win32_ascii_to_idn()'
  - idn: Use curlx allocators on Windows
  - imap: Check buffer length before accessing it
  - imap: Make sure Curl_pgrsSetDownloadSize() does not overflow
  - inet_ntop: Avoid the strlen()
  - INSTALL-CMAKE.md: Document static option defaults more
  - krb5: Fix detecting channel binding feature
  - krb5_sspi: Unify a part of error handling
  - ldap: Call ldap_init() before setting the options (CVE-2025-14017)
  - ldap: Drop PP logic for old, unsupported, Windows SDKs
  - ldap: Improve detection of Apple LDAP
  - ldap: Provide version for "legacy" ldap as well
  - lib/sendf.h: Forward declare two structs
  - lib: Clean-up for some typos about spaces and code style
  - lib: Create unitprotos.h in the builddir, not srcdir
  - lib: Drop unused or duplicate 'curlx/timeval.h' includes
  - lib: Drop unused protocol headers
  - lib: Eliminate size_t casts
  - lib: Error for OOM when extracting URL query
  - lib: Fix formatting nits
  - lib: Fix gssapi.h include on IBMi
  - lib: Name the main CURLMcode variable 'mresult'
  - lib: Refactor the type of funcs that have useless return and checks
  - lib: Replace '_tcsncpy'/'wcsncpy'/'wcscpy' with '_s' counterparts (Windows)
  - lib: Timer stats improvements
  - lib: Use 'SOCKET_WRITABLE()'/'SOCKET_READABLE()' where possible
  - libssh2: Add paths to error messages for quote commands
  - libssh2: Clean up ssh_force_knownhost_key_type
  - libssh2: Consider strdup() failures OOM and return correctly
  - libssh2: Replace atoi() in ssh_force_knownhost_key_type
  - libssh: Fix state machine loop to progress as it should
  - libssh: Properly free sftp_attributes
  - libssh: Require private key or user-agent for public key auth (CVE-2025-15224)
  - libssh: Set both knownhosts options to the same file (CVE-2025-15079)
  - libtests: Replace 'atoi()' with 'curlx_str_number()'
  - limit-rate: Add example using --limit-rate and --max-time together
  - localtime: Detect thread-safe alternatives and use them
  - m4/sectrust: Fix test(1) operator
  - manage: Expand the 'libcurl support required' message
  - mbedTLS: Clean up insecure/deprecated code
  - mbedtls: Fix potential use of uninitialized 'nread'
  - mbedtls: Sync format across log messages
  - mbedtls_threadlock: Avoid calloc, use array
  - mdlinkcheck: Ignore IP numbers, allow '@' in raw URLs
  - mdlinkcheck: Only look for markdown links in markdown files
  - memdebug: Add mutex for thread safety
  - memdebug: Fix realloc logging
  - mk-ca-bundle.md: The file format docs URL is permaredirected
  - mk-ca-bundle.pl: Default to SHA256 fingerprints with '-t' option
  - mk-ca-bundle.pl: Use 'open()' with argument list to replace backticks
  - mqtt: Reject overly big messages
  - mqtt: Return error when a too large packet is decoded
  - multi: Make max_total_* members size_t
  - multi: Remove MSTATE_TUNNELING
  - multi: Simplify admin handle processing
  - multibyte: Limit 'curlx_convert_*wchar*()' functions to Unicode builds
  - ngtcp2+openssl: Fix leak of session
  - ngtcp2: Remove the unused Curl_conn_is_ngtcp2 function
  - ngtcp2: Retune window sizes
  - noproxy: Fix build on systems without IPv6
  - noproxy: Fix ipv6 handling
  - noproxy: Replace atoi with curlx_str_number
  - openssl: Exit properly on OOM when getting certchain
  - openssl: Fix a potential memory leak of bio_out
  - openssl: Fix a potential memory leak of params.cert
  - openssl: Fix building against no-dsa openssl
  - openssl: Fix building against no-ocsp openssl with Apple SecTrust
  - openssl: No verify failf message unless strict
  - openssl: Release ssl_session if sess_reuse_cb fails
  - openssl: Remove code handling default version
  - openssl: Simplify 'HAVE_KEYLOG_CALLBACK' guard
  - openssl: Stop checking for 'OPENSSL_NO_SHA*' macros
  - openssl: Stop checking for 'OPENSSL_NO_TLSEXT' macro
  - openssl: Toggling CURLSSLOPT_NO_PARTIALCHAIN makes a different CA cache (CVE-2025-14819)
  - OS400/ccsidcurl: Fix curl_easy_setopt_ccsid for non-converted blobs
  - OS400/makefile.sh: Fix shellcheck warning SC2038
  - os400sys: Replace 'strcpy()' with 'memcpy()'
  - osslq: Code readability
  - progress: Make it one column narrower
  - progress: Narrower time display, multiple fixes
  - progress: Show fewer digits
  - projects/README.md: Markdown fixes
  - pytest fixes and improvements
  - pytest: Add tests using sshd
  - pytest: Disable two H3 earlydata tests for all platforms (was: macOS)
  - pytest: Do not ignore server issues
  - pytest: Enable OCSP test 17_08 for LibreSSL
  - pytest: Fix and improve reliability
  - pytest: Improve stragglers
  - pytest: quiche flakiness
  - pytest: Skip H2 tests if feature missing from curl
  - quiche: Use client writer
  - ratelimit blocking: Fix busy loop
  - ratelimit: Redesign
  - rtmp: Fix double-free on URL parse errors
  - rtmp: Precaution for a potential integer truncation
  - rtmp: Stop redefining 'setsockopt' system symbol on Windows
  - runner.pm: Run memanalyzer as a Perl module
  - runtests: Add options to set minimum number of tests, use them
  - runtests: Detect bad libssh differently for test 1459
  - runtests: Drop Python 2 support remains
  - runtests: Enable torture testing with threaded resolver
  - runtests: Improve XML prolog check, enable '-w' permanently, fix two tests
  - runtests: Make memanalyzer a Perl module (for 1.1-2x speed-up per test run)
  - rustls: Fix a potential memory issue
  - rustls: Minor adjustment of sizeof()
  - rustls: Simplify init err path
  - rustls: Verify that verifier_builder is not NULL
  - schannel: Cap the maximum allowed size for loading cert
  - schannel: Fix memory leak of cert_store_path on four error paths
  - schannel: Replace atoi() with curlx_str_number()
  - schannel: Use Win8 'CERT_NAME_SEARCH_ALL_NAMES_FLAG' with old SDKs
  - schannel_verify: Fix a memory leak of cert_context
  - scripts: Fix shellcheck SC2046 warnings
  - scripts: Use end-of-options marker in 'find -exec' commands
  - setopt: Disable CURLOPT_HAPROXY_CLIENT_IP on NULL
  - setopt: When setting bad protocols, don't store them
  - sftp: Fix range downloads in both SSH backends
  - slist: constify Curl_slist_append_nodup() string argument
  - smb: Fix a size check to be overflow safe
  - socketpair: Drop redundant '_WIN32' branch and include
  - socks_sspi: Use free() not FreeContextBuffer()
  - source: Misc typos
  - speedcheck: Do not trigger low speed cancel on transfers with CURL_READFUNC_PAUSE
  - speedlimit: Also reset on send unpausing
  - src: Drop redundant definition of 'BIT()'
  - src: Fix formatting nits
  - ssh: Tracing and better pollset handling
  - sspi: Fix memory leaks on error paths in 'Curl_create_sspi_identity()'
  - sws: Fix binding to unix socket on Windows
  - synctime: Tidy up, make it work on all platforms
  - telnet: Abort on bad suboption sequence
  - telnet: Replace atoi for BINARY handling with curlx_str_number
  - TEST-SUITE.md: Correct the man page's path
  - test07_22: Fix flakiness
  - test1475: Consistently use %CR in headers
  - test1498: Disable 'HTTP PUT from stdin' test on Windows
  - test2045: Replace HTML multi-line comment markup with '#' comments
  - test318: Tweak the name a little
  - test3207: Enable memdebug for this test again
  - test363: Delete stray character (typo) from a section tag
  - test568: Fix codespell, catch it next time early in CI
  - test568: Remove what looks like an email and a URL
  - test787: Fix possible typo `&amp;` -&gt; `%` in curl option
  - test96: Fix to accept non-unity memdump content with MSVC
  - tests/data: Move '--libcurl' output to external data files
  - tests/data: Replace hard-coded test numbers with '%TESTNUMBER'
  - tests/data: Support using native newlines on disk, drop '.gitattributes'
  - tests/server: Do not fall back to original data file in 'test2fopen()'
  - tests/server: Fix initialization on Windows Vista+
  - tests/server: Replace 'atoi()' and 'atol()' with 'curlx_str_number()'
  - tests: Add '%AMP' macro, use it in two tests
  - tests: Add a standard log line for alloc failures
  - tests: Allow 2500-2503 to use ~2MB malloc
  - tests: Drop redundant parentheses from two macro expressions
  - tests: Fix formatting nits
  - tests: Rename CURLMcode variables to mresult
  - tftp: Release filename if conn_get_remote_addr fails
  - tftpd: Fix/tidy up 'open()' mode flags
  - tidy-up: Avoid '(())', clang-format fixes and more
  - tidy-up: Move 'CURL_UNCONST()' out from macro 'curl_unicodefree()'
  - tidy-up: URLs (cont.) and mdlinkcheck
  - tidy-up: URLs
  - TODO: Remove a mandriva.com reference
  - tool: Consider (some) curl_easy_setopt errors fatal
  - tool: Log when loading .curlrc in verbose mode
  - tool_cfgable: Free ssl-sessions at exit
  - tool_doswin: Clear pointer when thread takes ownership
  - tool_doswin: Increase allowable length of path sanitizer
  - tool_doswin: Remove the max length check
  - tool_getparam: Simplify the --rate parser
  - tool_getparam: Use memdup0() instead of malloc + copy
  - tool_getparam: Verify that a file exists for some options
  - tool_help: Add checks to avoid unsigned wrap around
  - tool_ipfs: Check return codes better
  - tool_msgs: Make voutf() use stack instead of heap
  - tool_operate: Exit on curl_share_setopt errors
  - tool_operate: Fix a case of ignoring return code in operate()
  - tool_operate: Fix case of ignoring return code in single_transfer
  - tool_operate: Remove redundant condition
  - tool_operate: Return error for OOM in append2query
  - tool_operate: Use curlx_str_number instead of atoi
  - tool_paramhlp: Refuse --proto remove all protocols
  - tool_paramhlp: Remove a malloc+free from proto2num()
  - tool_paramhlp: Simplify number parsing
  - tool_progress: Fix large time outputs and decimal size display
  - tool_urlglob: Acknowledge OOM in peek_ipv6
  - tool_urlglob: Clean up used memory on errors better
  - tool_urlglob: constify an argument
  - tool_urlglob: Fix propagating OOM error from 'sanitize_file_name()'
  - tool_urlglob: Support globs as long as config line lengths
  - tool_writeout: Bail out proper on OOM
  - url: Fix return code for OOM in parse_proxy()
  - url: If curl_url_get() fails due to OOM, error out properly
  - url: If OOM in parse_proxy() return error
  - url: Return error at once when OOM in netrc handling
  - urlapi: Fix mem-leaks in curl_url_get error paths
  - urlapi: Handle OOM properly when setting URL
  - urlapi: Return OOM correctly from parse_hostname_login()
  - verify-release: Update to avoid shellcheck warning SC2034
  - vquic-tls/gnutls: Call Curl_gtls_verifyserver unconditionally (CVE-2025-13034)
  - vquic: Do not pass invalid mode flags to 'open()' (Windows)
  - vquic: do_sendmsg full init
  - vquic: Ignore 0-length UDP packets
  - vquic: Initialize new callback in nghttp3 1.14.0+
  - vtls: Drop unused 'use_alpn' from 'ssl_connect_data' struct
  - vtls: Fix CURLOPT_CAPATH use
  - vtls: Handle possible malicious certs_num from peer
  - vtls: Pinned key check
  - VULN-DISCLOSURE-POLICY.md: CRLF in data
  - wcurl: Import v2026.01.05
  - windows: Assume 'USE_WIN32_LARGE_FILES'
  - windows: Fix 'CreateFile()' calls to support long filenames
  - windows: Use '_strdup()' instead of 'strdup()' where missing
  - wolfSSL: Able to differentiate between IP and DNS in alt names
  - wolfssl: Avoid NULL dereference in OOM situation
  - wolfssl: Fix a potential memory leak of session
  - wolfssl: Fix cipher list, skip 5.8.4 regression
  - wolfssl: Fix possible assert with '!HAVE_NO_EX' wolfSSL builds
  - wolfssl: Proof use of wolfSSL_i2d_SSL_SESSION
  - wolfssl: Simplify wssl_send_earlydata
  - ws: Replace a cast by matching the format string
  - x509asn1: Drop unused 'hostcheck.h', 'vtls_int.h' includes
- Enable HTTP/3 support with ngtcp2 from Fedora 43 onwards
- Drop support for distributions prior to F-36, EL-9 since OpenSSL 3.x is now
  a requirement
- Temporarily disable new test 2090 on EL, where it seems to be flaky</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-3.0.cf" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.0-4.0.cf" date="1770379200">- Fix rubygem-ethon: FTBFS in Fedora Rawhide (#2405328)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.0.cf" date="1773230400">- Update to 8.19.0
  - cmake: Add 'CURL_BUILD_EVERYTHING' option
  - Initial support for MQTTS
  - tool: Support fractions for --limit-rate and --max-filesize
  - tool_cb_hdr: With -J, use the redirect name as a backup
  - vquic: Drop support for OpenSSL-QUIC
  - Windows: Add build option to use the native CA store
  - Windows: Bump minimum to Vista (from XP)
  - altsvc: Only accept 17 byte dates from files
  - asyn-ares: Abort with OOM error when Curl_dnscache_mk_entry fails
  - async-ares: Blocking resolve timeout handling, better
  - badwords: Move into ./scripts, speed up
  - build: Add missing 'GENERATEDCERTS' files
  - build: Adjust minimum version for some clang picky warnings
  - build: Check 'MSG_NOSIGNAL' directly, drop detection and interim macro
  - build: constify 'memchr()'/'strchr()'/etc. result variables (cont.)
  - build: Detect and include 'inttypes.h' again
  - build: Do not include wolfSSL header in 'curl_setup.h'
  - build: Drop duplicate C includes
  - build: Drop global suppression of '-Wformat-nonliteral', fix fallouts
  - build: Drop unused 'snprintf()' feature check on Windows
  - build: Fix '-Wunused-macros' warnings, and related tidy-ups
  - build: Fix building rare combinations
  - build: Fully omit verbose strings and code when disabled
  - build: Globally suppress DJGPP warnings in 'FD_SET()'
  - build: Merge TrackMemory ('CURLDEBUG') into debug-enabled option
  - build: Move curl stat struct type to the curlx namespace
  - build: Opt-in MSVC to C99-style verbose logging logic
  - build: Require POSIX 'strdup()'
  - build: Tidy up and dedupe 'strdup' functions
  - cf-socket: Ignore SOCK_CLOEXEC etc. for socktype equality checks
  - cf-socket: Use SOCK_CLOEXEC in socket_open when available
  - checksrc-all.pl: Skip non-repository files
  - checksrc: Do not apply 'BANNEDFUNC' to struct member functions
  - checksrc: Warn for leading spaces before the preprocessor hash
  - clang-tidy: Add missing and delete redundant parentheses
  - clang-tidy: Add more missing parentheses in macro values
  - clang-tidy: Avoid/silence 'bugprone-not-null-terminated-result'
  - clang-tidy: Check 'bugprone-macro-parentheses', fix fallouts
  - clang-tidy: Drop redundant conditions reported by 'misc-redundant-expression'
  - clang-tidy: Enable 'bugprone-signed-char-misuse', fix fallouts
  - clang-tidy: Enable more checks
  - clang-tidy: Enable scanning headers
  - clang-tidy: Fix issues found with build-fuzzing
  - clang-tidy: Silence more minor issues found by v22
  - cmake/FindMbedTLS: Add workaround for missing static MSVC 'mbedcrypto.lib' 4.0.0
  - cmake: Add 'CURL_DROP_UNUSED' option to reduce binary sizes
  - cmake: Add native clang-tidy support for tests, with concatenated sources
  - cmake: Always build curlu and curltool test libs in unity mode
  - cmake: Always define 'CURL::win32_winsock' on Windows in 'curl-config.cmake'
  - cmake: Convert 'curl_add_clang_tidy_test_target()' macro to function
  - cmake: Enable binutils ld workaround for all toolchains at build-time
  - cmake: Fix 'LOCATION' property access condition (debug)
  - cmake: Fix 'LOCATION' property read errors in target debug function
  - cmake: Fix building with 'CMAKE_FIND_PACKAGE_PREFER_CONFIG=ON'
  - cmake: Fix confusing error when a dependency is undetected in 'curl-config.cmake'
  - cmake: Fix logic for openssl/zlib binutils ld workaround
  - cmake: Fix passing system header directories to clang-tidy for tests
  - cmake: Fix system include directory position for clang-tidy in tests
  - cmake: Improve clang-tidy test command-line reproduction
  - cmake: Minor fixes to test targets after prev
  - cmake: Normalize uppercase hex winver (for display)
  - cmake: Omit 'curl.rc' from curltool lib
  - cmake: Reference OpenSSL and ZLIB imported targets only when enabled
  - cmake: Replace internal option with a new 'tt' (test tools) target
  - cmake: Silence potential unused var warnings in C++ test snippet
  - cmake: Silence silly Apple clang warnings in C89 mode, test in CI
  - cmake: Silence useless compiler warnings triggered by the FASTBuild generator
  - cmake: Skip binutils ld hack if zlib/openssl target is not 'IMPORTED'
  - cmake: Warn for invalid 'CURL_TARGET_WINDOWS_VERSION' values
  - cmake: Add '*_USE_STATIC_LIBS' options for 9 dependencies
  - config-plan9: Set 'HAVE_STDINT_H' again
  - config2setopts: Acknowledge OOM error from CURLOPT_MIMEPOST
  - config2setopts: Fix for --disable-aws build configuration
  - configure: Drop always true 'if' check (Windows)
  - content_encoding: Return 'identity' if none other exists
  - curl: Add -I and -i to -h important
  - curl: Limit Windows-specific code to Windows builds, other tidy-ups
  - curl_easy_nextheader.md: A new transfer invalidates 'prev'
  - curl_get_line: Drop single-use macro
  - curl_multi_perform.md: Resolve inconsistency
  - curl_ntlm_core: Merge two '#if' blocks
  - curl_setup.h: Drop extra header guard for internal include
  - curl_setup.h: Merge back single-use internal header 'curl_setup_once.h'
  - curl_setup.h: Simplify curl memory macro mappings
  - curl_setup_once: Allow CURL_DEBUGASSERT for customization
  - CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.md: Fix available protocols
  - curlx: Drop unused 'curlx_saferealloc()'
  - digest: Escape double quotes and backslashes in realm and nonce
  - digest: Fix memory leak in auth_create_digest_http_message()
  - digest: Handle quotes in the path
  - docs/INSTALL: Update configure details
  - docs/libcurl: Unify WARNING use
  - docs: Add LibreELEC to DISTROS.md
  - docs: Add reproducible example for generating man page
  - docs: Avoid starting sentences with However,
  - docs: Avoid using the word 'magic'
  - docs: Clarify --ipv4 and --ipv6
  - docs: Document the need for a 64-bit type and stdint.h
  - docs: Drop basically
  - docs: Explicitly call out Slowloris as not a security flaw
  - docs: Fix grammar nitpicks
  - docs: Handle error in 'curl_global_init*' examples
  - docs: Replace instances of the vague qualifier 'quite'
  - docs: Reword explanation of --variable option
  - docs: Some nitpicks
  - docs: Use dot instead of comma at end of sentences
  - easy: Reset errorbuf on eyeballing success
  - easy: Reset pausing when resetting request
  - examples/usercertinmem: Use modern OpenSSL API, drop mentions of RSA
  - examples: Improve OpenSSL certificate examples
  - examples: Omit forward declarations, apply misc fixes
  - FAQ: Syntax improvements
  - fopen.h: Simplify curl memory macro mappings
  - ftp: Replace a 'curlx_free()' with 'curlx_dyn_free()'
  - ftp: Split ftp_state_use_port into sub-functions
  - GOVERNANCE.md: Post-Daniel BDFL
  - gss: Exclude verbose error logic from non-verbose builds
  - h2+h3: Align stream close handling
  - hostip.c: Fix leak of addrinfo
  - hostip6: Remove debug-only code
  - hostip: Fix unreachable code in rare build configuration
  - http/3: Add description for known server error codes
  - http1: Fix potential NULL dereference in 'Curl_h1_req_parse_read()'
  - http: Only send bearer if auth is allowed (CVE-2026-3783)
  - http_aws_sigv4: Fix query normalization of %2b
  - imap: Add a check for Curl_meta_get()
  - imap: Check 'imap_sendf()' printf masks at compile-time
  - imap: Skip literals inside quoted strings
  - include: Avoid recursive macros
  - include: Mask computed auth/proto bitmasks to 32 bits
  - INSTALL-CMAKE.md: Document Apple framework options
  - INSTALL.md: Fix typo
  - INSTALL.md: Suggest '-Wl,-dead_strip' for Apple targets
  - KNOWN_BUGS.md: Absolute Unix domain filename for SOCKS on Windows
  - ldap: Silence clang-tidy v22 warning
  - ldap: Silence potential unused variable warning (OS400)
  - lib: Delete unused local includes
  - lib: Disable websockets early if no http
  - lib: Make sigpipe handling more lazy
  - lib: Reorder protocol functions to avoid forward declarations (email)
  - lib: Reorder protocol functions to avoid forward declarations (ftp)
  - lib: Reorder protocol functions to avoid forward declarations (misc cont.)
  - lib: Reorder protocol functions to avoid forward declarations (misc)
  - lib: Reorder protocol functions to avoid forward declarations (ssh)
  - lib: Separate scheme info from protocol implementation
  - lib: Skip compiling code with features disabled
  - lib: Use (u)int64_t instead of long long
  - libcurl docs: Reduce 'since ...' in descriptions
  - libcurl-security.md: Fix typos and add a point about URLs
  - libtests: Drop two redundant 'memset()'s
  - Makefile.am: Delete RPM targets referencing non-existent files
  - Makefile.am: Drop stray VC project files from dist
  - managen: Silence Perl warnings
  - mbedtls: Guard TLS 1.3 + session tickets usage inside ifdef
  - mbedtls: No pinnedpubkey wo MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
  - mbedtls: Remove newline from failf() call
  - mbedtls: Split mbed_connect_step1 into sub functions
  - md4, md5: Drop redundant forward declarations
  - md4, md5: Replace custom types with 'uint32_t'
  - memdebug: Include 'backtrace.h' as system header
  - mime: Drop fallback for unused 'R_OK' macro
  - mimepost: Allocate main struct on-demand
  - mk-ca-bundle.pl: Drop support for obsolete/insecure fingerprint algos
  - mod_curltest: Silence unused argument compiler warning
  - mprintf: Drop old sprintf fallback
  - mprintf: Rename internal enum to avoid collision with AmigaOS symbol
  - mprintf: Silence clang-tidy 'readability-suspicious-call-argument'
  - mprintf: Use '_snprintf()' when compiled with VS2013 and older
  - mqtt: Better too-big-message-check
  - mqtt: Fix EOF handling
  - mqtt: Verify Remaining Length for CONNACK and PUBACK
  - msvc: Drop exception, make 'BIT()' a bitfield with Visual Studio
  - msvc: VS2026: Unlock picky warning in cmake, test in CI
  - multi: Avoid a theoretical 32-bit wrap
  - multi: Fix unreachable code compiler warning
  - multi: Probe for IPv6 functionality in multi_init()
  - multi: Split multi_runsingle into sub-functions
  - multi: Update timer unconditionally in multi_remove_handle
  - ngtcp2: Stabilize recv
  - noproxy: Simplify, don't mix const non-const in strchr()
  - openldap: Avoid forward declarations in ldaps code
  - openssl+ech: Workaround for insecure handshakes
  - openssl: Adapt to OpenSSL master adding const to more APIs
  - OpenSSL: Check reuse of sessions for verify status
  - openssl: Disable local keylog feature if built-in upstream
  - openssl: Fix compiler warning with OpenSSL master
  - openssl: Fix potential NULL dereference when loading certs (Windows)
  - openssl: Fix potential OOB read in debug/verbose logging
  - plan9: Drop special build and orphaned references
  - proxy-auth: Additional tests (CVE-2026-3784)
  - pytest: Remove 03_02
  - quiche: Use PRIu64 for outputting the stream id
  - rand: Drop impossible preprocessor branches (wincrypt)
  - rand: Drop scan-build silencer
  - ratelimit: Download fine-tune
  - request.h: Rename parameter 'buf' to 'req' in Curl_req_send
  - REUSE: Drop broken reference to 'MAIL-ETIQUETTE'
  - rtsp: Fix assertion failure on zero-length RTP payload
  - rtspd: Fix to check 'realloc()' result
  - runtests: Pass config filename to stunnel in native format (Windows)
  - schannel: Refactor: reduce variable scopes, fix comment, fix indent
  - send: Drop 'CURL_UNCONST()' from buffer argument on most platforms
  - setopt: Fix checking range for CURLOPT_MAXCONNECTS
  - setopt: Refuse blobs with zero length
  - setup-os400.h: Drop no longer used custom type 'u_int32_t'
  - sigpipe: unset SA_SIGINFO since it is using sa_handler
  - silent.md: Also mention it shuts off warning messages
  - smb: Free the path in the request struct properly (CVE-2026-3805)
  - smb: Include arpa/inet.h for NonStop
  - socket: Check result of SO_NOSIGPIPE
  - socketpair: Clear 'err' when retrying due to EINTR
  - socketpair: Set SO_NOSIGPIPE where possible
  - socks: Ensure DNS is freed in failure cases
  - src: Simplify declaring 'curl_ca_embed'
  - ssh: De-dupe state change function
  - Stop using the word 'just'
  - sws: Prevent "connection monitor" to say disconnect twice
  - synctime: Fix use of uninitialized buffer on non-Windows
  - system_win32: Replace manual init code with 'curlx_now_init()' call
  - tests/server/sockfilt: Avoid possible endless loop on Windows
  - tests/server: Drop unused 'curlx/version_win32.c'
  - tests/server: Fix to clear the complete 'srvr_sockaddr_union_t' variable
  - tests/server: Tidy-up error messages (Windows)
  - tests: Avoid assignment in 'if' conditions in 'first.h'
  - tests: Convert base64 data to %b64[]
  - tftp: Correct the filename length check
  - timeout handling: Auto-detect effective timeout
  - tls: Add new SSLSUPP flags for several options
  - tls: Remove checks for DEFAULT
  - tool: Enable header separation for HTTPS proxies
  - tool: Improve config error messaging
  - tool: Improve error/warning messages when output filename sanitization fails
  - tool: Rename curl handle and result variable in '--libcurl'-generated code
  - tool: Return code variable consistency
  - tool_cb_hdr: Suppress header output when --out-null
  - tool_cb_prg: Drop duplicate preprocessor logic
  - tool_dirhie: Drop superfluous 'F_OK' fallback (Windows)
  - tool_doswin: Avoid memory-leak with CURL_FN_SANITIZE_*
  - tool_doswin: Avoid Windowsisms in socket code
  - tool_doswin: Document 'ENABLE_VIRTUAL_TERMINAL_PROCESSING' toolchain support
  - tool_getparam: Avoid '-Wcomma' with Apple clang in C89 mode
  - tool_operate: Remove 'else' for VMS
  - tool_operate: Reset the URL --url-query between --next
  - typos: Silence false positives found in C code
  - unit3205: Suppress two clang-tidy false positives
  - URL-SYNTAX.md: Fix port number mistakes for IMAP and LDAP
  - url.c: Code/comment clean-up around conn creation
  - url.h: Fix '-Wdocumentation'
  - url: Fix reuse of connections using HTTP Negotiate (CVE-2026-1965)
  - urlapi: Use U_CURLU_URLDECODE when toggling it off unsigned
  - urldata.h: Remove two forward-declared structs not used
  - urldata: Bye-bye 'conn-&gt;hostname_resolve'
  - urldata: Change 'keep_post' into three distinct bitfields
  - urldata: Convert 'long' fields to fixed variable types
  - urldata: Switch to uint* types
  - usercertinmem: Use the correct cert BIO
  - verbose.md: Explain the { and } prefixes
  - vquic: Fix unused variable warning reported by clang-tidy
  - vquic: Handle SOCKEMSGSIZE correctly
  - vtls: De-dupe common on-session-reuse logic
  - vtls: Use ALPN http/1.0 and http/1.1 for HTTP/1.0 requests
  - VULN-DISCLOSURE-POLICY.md: Push reports to the web form
  - VULN-DISCLOSURE-POLICY.md: Use hackerone
  - winapi: Use FormatMessageA instead of FormatMessageW
  - windows: 'USE_WINSOCK' to guard winsock2 code (where missing)
  - windows: Determine 'RtlVerifyVersionInfo' address on global init
  - windows: Tidy up 'wincrypt.h'/ BoringSSL/AWS-LC coexist workaround
  - wolfssl: Fix build without USE_BIO_CHAIN
  - ws/tftp: include header file even when protocol disabled
  - x509asn1: Make encodeOID stop on too long input
- Re-enable test 2090 on EL, now fixed upstream</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-1.1.cf" date="1773662400">- Add libcurl-full provides to libcurl for backwards compatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.19.0-2.0.cf" date="1774008000">- Run tests in parallel via make test-nonflaky, with serial fallback for
  race-prone tests
  - Remove out-of-tree srcdir export (no longer needed with make test-nonflaky)
  - Run the bulk of tests in parallel using _smp_build_ncpus * 7 jobs
  - Exclude race-prone tests (766) from parallel execution
  - Run excluded tests serially afterwards
  - Fix test459 to pass when running tests in parallel
  - Don't run test 2502 in parallel to avoid failures
  - Cap parallel jobs at 64 to avoid overwhelming system resources</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-1.0.cf" date="1777464000">- Update to 8.20.0
  - async-thrdd: Use thread queue for resolving
  - build: Make NTLM disabled by default
  - cmake: Drop support for CMake 3.17 and older
  - lib: Add thread pool and queue
  - lib: Drop support for &lt; c-ares 1.16.0
  - lib: Make SMB support opt-in
  - multi.h: Add CURLMNWC_CLEAR_ALL
  - rtmp: Drop support
  - altsvc: Cap the list at 5,000 entries
  - altsvc: Drop the prio field from the struct
  - altsvc: Skip expired entries read from file
  - asyn-ares: Connect async
  - asyn-ares: Drop orphaned variable references
  - asyn-ares: Fix HTTPS-lookup when not on port 443
  - asyn-thrdd: Drop redundant 'result' check
  - asyn-thrdd: Fix clang-tidy unused value warning
  - async-ares: Fix query counter handling
  - autotools: Limit checksrc target to ignore non-repo test sources
  - badwords-all: Exit with correct code on errors
  - badwords: Combine the whitelisting into a single regex
  - badwords: Detect the the and with with
  - badwords: Only check comments and strings in source code
  - badwords: Rework exceptions, fix many of them
  - boringssl: Fix more coexist cases with Schannel/WinCrypt
  - build: Adjust/add casts to fix '-Wformat-signedness'
  - build: Assume 'snprintf()' in 'mprintf', drop feature check
  - build: Compiler warning silencing tidy-ups
  - build: Drop 'openssl' module dependency for BoringSSL from 'libcurl.pc'
  - build: Drop duplicate 'pthread.h' includes
  - build: Drop redundant 'USE_QUICHE' guards
  - build: Enable '-Wimplicit-int-enum-cast' compiler warning, fix issues
  - build: Fix '-Wformat-signedness' by adjusting printf masks
  - build: Link 'bcrypt.lib' via vcxproj files
  - build: Skip detecting 'pipe2()' for Apple targets
  - build: Stop building and installing 'runtests.1' and 'testcurl.1'
  - cf-https-connect: Silence '-Wimplicit-int-enum-cast' with HTTPS-RR
  - cf-ip-happy: Limit concurrent attempts
  - cf-socket: Avoid low risk integer overflow on ancient Solaris
  - cfilters: Fix Curl_pollset_poll() return code mixup
  - clang-tidy: Avoid assignments in 'if' expressions
  - clang-tidy: Enable more checks, fix fallouts
  - cmake: Add CMake Config-based dependency detection
  - cmake: Add CMake Config-based dependency detection for c-ares, wolfSSL
  - cmake: Do not install 'wcurl' when 'BUILD_CURL_EXE=OFF'
  - cmake: Do not install shell completions when 'BUILD_CURL_EXE=OFF'
  - cmake: Document functions used from Windows system DLLs
  - cmake: Enable pthreads for BoringSSL/AWS-LC
  - cmake: Resolve targets recursively when generating 'libcurl.pc'
  - cmake: Rework binutils ld hack to not read 'LOCATION' property
  - cmake: Silence bad library 'Threads::Threads' warning
  - cmake: Use 'AIX' built-in variable (with CMake 4.0+)
  - config2setopts: Make --capath work in proxy disabled builds
  - configure: Fix '--with-ngtcp2=&lt;path&gt;' option for crypto libs
  - configure: Fix LibreSSL ngtcp2 1.15.0+ crypto lib selection logic
  - configure: Prefer dependency-specific variables over '$withval'
  - configure: Remove superfluous experimental warning for HTTP/3
  - configure: Silence useless clang warnings in C89 builds
  - configure: Tidy up comments
  - connect: Fix typo on error message
  - cookie: Fix rejection when tabs in value
  - curl-wolfssl.m4: Fix to use the correct value for pkg-config directory
  - curl.h: Replace macros with C++-friendly method to enforce 3 args
  - curl_ctype.h: Fix spelling in a couple of locally used macros
  - curl_get_line: Error out on read errors
  - curl_get_line: Fix potential infinite loop when filename is a directory
  - curl_ngtcp2: Extend and update callbacks for 1.22.0+
  - curl_ntlm_core: Drop redundant PP condition
  - curl_ntlm_core: Use wolfCrypt DES API with wolfSSL
  - curl_setup.h: Drop stray/unused 'USE_OPENSSL_QUIC' guard
  - curl_sha512_256: Support delegating to wolfSSL API
  - curl_version_info.md: Clarify age details
  - CURLOPT_HAPROXY_CLIENT_IP.md: Mention assumption on data format
  - CURLOPT_RTSP_SESSION_ID.md: Clarify reuse "dangers"
  - CURLOPT_RTSP_SESSION_ID.md: Expand the comment
  - CURLOPT_RTSP_SESSION_ID.md: Minor language fix
  - CURLOPT_SOCKS5_AUTH.md: An access property
  - CURLOPT_SSL_CTX_FUNCTION.md: Expand on effects connection reuse
  - CURLOPT_UPLOAD_FLAGS.md: Expand
  - curlx_now(): Prevent zero timestamp
  - DEPRECATE: Fix minor release number typo
  - digest: Pass in the user name quoted (as well)
  - dns: https-eyeballing async
  - dnscache: Own source file, improvements
  - docs/cmdline-opts/write-out.md: tls_earlydata was adeded in 8.13.0
  - docs/cmdline-opts: Tidy up retry-connrefused
  - docs/lib: Fix typos
  - docs/libcurl: Improve easy setopt examples
  - docs: Clarify retry-max-time timing
  - docs: CURLOPT_LOGIN_OPTIONS is a login property
  - docs: Enable more compiler warnings for C snippets, fix 3 finds
  - docs: List more dependencies for running Python HTTP tests
  - docs: Mention more zip bomb precautions
  - docs: Minor wording tweaks
  - docs: noproxy wants the punycoded hostname version
  - docs: SSH host verification is done at connect time
  - docs: Use the correct CURLOPT_WRITEFUNCTION signature
  - doh: Fix memory-leak when doing a second DoH resolve
  - doh: Remove superfluous doh_req check
  - examples/websocket: Fix to sleep more on Windows
  - examples: Drop warning silencers no longer hit
  - examples: Fix typo in comment
  - file: init fd to -1 to prevent close fd 0 on early failure
  - fopen: For temp files, inherit permissions only for owner
  - ftp: Do not strdup DATA hostname
  - ftp: Make the MDTM date parser stricter (again)
  - ftp: Reject PWD responses containing control characters
  - gcc: Guard '#pragma diagnostic' in core code for &lt;4.6
  - generate.bat: Remove extra % from VC11 and VC12 runs
  - genserv.pl: Make external calls safe
  - getinfo: Initialize 'PureInfo' field 'used_proxy'
  - getinfo: Repair CURLINFO_TLS_SESSION
  - gnutls: Fix clang-tidy warning with !verbose
  - gtls: Fail for large files in 'load_file()'
  - h3: HTTPS-RR use in HTTP/3
  - Happy Eyeballs: Add resolution time delay
  - haproxy: Use correct ip version on client supplied address
  - hostip: Clear the sockaddr_in6 structure before use
  - hostip: init the curl_jmpenv_lock appropriately
  - hostip: Resolve user supplied ip addresses
  - HSTS: Cap the list
  - hsts: Make the HSTS read callback handle name dupes
  - hsts: Skip expired HSTS entries read from file
  - hsts: When a dupe host adds subdomains, use that
  - http2: Clear the h2 session at delete
  - http2: Prevent secure schemes pushed over insecure connections
  - http2: return error on OOM in push headers
  - HTTP3.md: Drop outdated mentions of OpenSSL-QUIC
  - http: Clear credentials better on redirect (CVE-2026-6429)
  - http: Clear digest nonce on cross-orgin redirect
  - http: Clear the proxy credentials as well on port or scheme change
    (CVE-2026-6253)
  - http: Fix auth_used and auth_avail
  - http: Fix Curl_compareheader for multi value headers
  - http: Make Curl_compareheader handle multiple commas in header
  - http: On 303, switch to GET
  - http: Use header_has_value() instead of duplicate code
  - imap: Reset the UIDVALIDITY state between transfers
  - include: Drop 'will' from public headers
  - INSTALL.md: Update Cygwin instructions
  - keylog.h: Replace literal number with macro in declaration
  - keylog: Drop unused/redundant includes and guards
  - ldap: Drop duplicate 'ldap_set_option()' on Windows
  - ldap: Fix to initialize cleartext connection on Windows
  - lib1560: Fix comment typo
  - lib1960: Fix test failure
  - lib: Accept larger input to md5/hmac/sha256/sha512 functions
  - lib: Always use Curl_1st_fatal instead of Curl_1st_err
  - lib: Fix typos in comments
  - lib: Make resolving HTTPS DNS records reliable
  - lib: Minor comment typos
  - lib: Move request specific allocations to the request struct
  - lib: Replace 'PRI*32' printf masks with C89 ones
  - libssh2: Allocate libssh2-friendly memory in kbd_callback
  - libssh2: Fix error handling on quote errors
  - libssh: Fix 64-bit printf mask for mingw-w64 &lt;=6.0.0
  - libssh: Fix '-Wsign-compare' in 32-bit builds
  - libssh: Path length precaution
  - libssh: Propagate error back in SFTP function
  - libtest: Drop duplicate include
  - location/follow: Mention netrc
  - man: Fix argument type for 'CURLSHOPT_[UN]SHARE' options
  - mbedtls: Clean up more without care for 'initialized'
  - mbedtls: Fix ECJPAKE matching
  - mbedtls: Remove failf() call with first argument as NULL
  - md4, md5: Switch to wolfCrypt API in wolfSSL builds
  - mime: Only allow 40 levels of calls
  - misc: Fix code quality findings
  - mk-ca-bundle.pl: Make 'ca-bundle.crt' timestamp match 'certdata.txt''s
  - multi: Enhance pending handles fairness
  - multi: Fix connection retry for non-http
  - multi: Improve wakeup and wait code
  - netrc: Find login-less password when user is given in URL
  - netrc: Remove unused parsenetrc() macro for netrc-disabled
  - netrc: Skip malformed macdef lines
  - openssl channel_binding: Lookup digest algorithm without NID
  - openssl: Drop obsolete SSLv2 logic
  - openssl: Fix build with 4.0.0-beta1 no-deprecated
  - openssl: Fix memory leaks in ECH code (OpenSSL 3)
  - openssl: Fix unused variable warnings in !verbose builds
  - openssl: Trace count of found / imported Windows native CA roots
  - OS400: Add new definitions to the ILE/RPG binding
  - os400sys: Fix typo in comment (symetry -&gt; symmetry)
  - parsedate: bsearch the time zones
  - parsedate: Fix wrong treatment of "military time zones"
  - parsedate: Refactor
  - perl: Harden external command invocations
  - progress: Count amount of data "delivered" to application
  - protocol.h: Fix the CURLPROTO_MASK
  - protocol: Disable connection reuse for SMB(S) (CVE-2026-5773)
  - protocol: Use scheme names lowercase
  - proxy: Chunked response, error code
  - pytest: Add additional quiche check for flaky test_05_01
  - pytest: Check 429 handling
  - rand: Use 'BCryptGenRandom()' in UWP builds
  - ratelimit: Reset on start
  - request: Reset resp_trailer in new requests
  - runtests: Skip setting ed25519 SSH key format
  - rustls: Fix memory leak on repeated SSLKEYLOGFILE fails
  - rustls: Handle EOF during initial handshake
  - schannel: Increase renegotiation timeout to 60 seconds
  - scripts: Drop redundant double-quotes: '"$var"' -&gt; '$var' (Perl)
  - scripts: Harden / tidy up more Perl 'system()' calls
  - sectrust: Fail on missing OCSP stapling (CVE-2026-7009)
  - sendf: Fix CR detection if no LF is in the chunk
  - setopt: Clear proxy auth properties when switching (CVE-2026-7168)
  - setopt: Fix typos in comments
  - setopt: Move CURLOPT_CURLU
  - setup connection filter: Mark as setup
  - sha256, sha512_256: Switch to wolfCrypt API
  - sha256: Support delegating to wolfSSL API
  - share: Concurrency handling, easy updates
  - share: Do bitshifts after the type is checked to be valid
  - socks: Reject zero-length GSSAPI/SSPI tokens from proxy
  - socks: Use dns filter for resolving
  - spelling: Fix typos
  - src: Use ftruncate() unconditionally
  - sshserver.pl: Harden more 'system()' calls
  - sshserver.pl: Pass command-line to 'system()' safely
  - strerr: Correct the strerror_s() return code condition
  - sws: Fix potential OOB write
  - synctime: Fix off-by-one read and write to a read-only buffer (Windows)
  - test 766: Flag as timing-dependent
  - test1675: Unit tests for URL API helper functions
  - test459: Switch to mode="warn" for stderr check
  - testcurl.pl: Replace shell commands with Perl 'rmtree()'
  - tests/unit/README: Describe how to unit test static functions
  - tests: Avoid infinite recursion for 'make check'
  - tests: Use %b64[] instead of "raw" base64
  - tool: Check for curlinfo-&gt;age when determining if ssh backend
  - tool: Fix memory mixups
  - tool: Fix retries in parallel mode
  - tool: Fix two more allocator mismatches
  - tool_cb_hdr: Only truncate etags output when regular file
  - tool_cb_rea: Make waitfd() return void
  - tool_cb_wrt: Fix no-clobber error handling
  - tool_cfgable: Free the SSL signature algorithms
  - tool_dirhie: Fix to create drive-relative directory
  - tool_formparse: Propagate my_get_line errors when reading headers
  - tool_getparam: Use correct free function for libcurl memory
  - tool_ipfs: Accept IPFS gateway URL without set port number
  - tool_msgs: Avoid null pointer deref for early errors
  - tool_operate: Actually apply the --parallel-max-host limit
  - tool_operate: Drop the scheme-guessing in the -G handling
  - tool_operate: Fix condition for loading 'curl-ca-bundle.crt' (Windows)
  - tool_operate: Fix memory-leak on failed uploads
  - tool_operate: Fix minor memory-leak on early error
  - tool_operate: Reset the upload glob counter for next URL
  - tool_operhlp: Fix 'add_file_name_to_url()' result on OOM
  - tool_operhlp: Iterate through all slashes to find name
  - tool_operhlp: Propagate low-level OOM in 'add_file_name_to_url()'
  - tool_setopt: Return error on OOM correctly
  - tool_urlglob: Fix memory-leak on glob range overflow
  - top-complexity: Prevent filename-based shell injection risk
  - transfer: Clear the old autoreferer
  - transfer: Clear the URL pointer in OOM to avoid UAF
  - transfer: Enable custom methods again on next transfer
  - transfer: Enhance secure check
  - unit1675: Fix '-Wformat-signedness'
  - url: Do not reuse a non-tls starttls connection if new requires TLS
    (CVE-2026-4873)
  - url: Improve connection reuse on negotiate (CVE-2026-5545)
  - url: init req.no_body in DO so that it works for h2 push
  - url: Set default upload flags to CURLULFLAG_SEEN
  - url: Use the socks type for socks proxy
  - url: Use URL for url even in comments
  - urlapi: Fix handling of "file:///"
  - urlapi: Make dedotdotify handle leading dots correctly
  - urlapi: Same origin tests
  - urlapi: Stop extracting hostname from file:// URLs on Windows
  - urlapi: Verify the last letter of a scheme when set explicitly
  - urldata.h: Fix typo and lingering backtick
  - urldata: Connection bit ipv6_ip is wrong
  - urldata: Import port types and conn destination format
  - urldata: Make hstslist only present in HSTS builds
  - urldata: Make speeder_c uint32
  - urldata: Move cookiehost to struct SingleRequest (CVE-2026-6276)
  - urldata: Remove trailers_state
  - vquic: Fix variable name in fallback code
  - vtls: Fix comment typos and tidy up a type
  - vtls: Log when key logging is enabled
  - vtls_scache: Check reentrancy
  - vtls_scache: Include cert_blob independently of verifypeer
  - wolfssl: Document v5.0.0 (2021-11-01) as minimum required
  - wolfssl: Fix '-Wmissing-prototypes'
  - wolfssl: Fix handling of abrupt connection close
  - write-out.md: Minor language fix
  - write-out.md: tls_earlydata was added in 8.13.0
  - ws: Fix a blocking curl_ws_send() to report written length correctly
  - x509asn1: Fix to return error in an error case from 'encodeOID()'
  - x509asn1: Fixed and adapted for ASN1tostr unit testing
  - x509asn1: Improve encodeOID</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.20.0-2.0.cf" date="1779192000">- Fix potential 100% CPU usage in curl_multi_socket()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.21.0-1.0.cf" date="1782302400">- Update to 8.21.0
  - curl: Named globs in output file name for upload glob references
  - HTTP/3: Add proxy CONNECT and MASQUE CONNECT-UDP support (ngtcp2 QUIC)
  - http2: Remove stream dependency tracking (CVE-2026-10536)
  - lib: Drop support for CURLAUTH_DIGEST_IE
  - libssh: Add support for SHA256 host public keys
  - tool_urlglob: Add named globs
  - _ENVIRONMENT.md: Windows does case insensitive env variables
  - _URL.md: Remove the zone-id mention
  - AmigaOS: Avoid explicit_bzero with clib2 in curl_setup.h
  - AmigaOS: Fix build fallouts, re-add to CI
  - asyn-thrdd: Add IPv6 guards
  - asyn-thrdd: Fix result processing without wakeup socketpair
  - autotools: mbedtls detection fixes
  - BINDINGS: Update Hollywood link
  - BUFQ.md: Re-sync with source code
  - build: Enable '-Wlogical-op' picky warning for GCC 4.4+
  - build: Omit zlib pkg-config reference for Android
  - cf-h2-prox: Fix peer leak
  - cf-h2-proxy: Drop interim responses
  - cf-https-connect: Do not engage on proxy origin
  - cf-ip-happy.c: Minor comment typo
  - cf-ip-happy: Update documentation
  - cf-socket: Make Curl_addr2string static
  - cf-socket: Set scope_id for IPv6 link-local addresses
  - cf-socket: Store errno from do_connect in ctx-&gt;error
  - cfilters: Fix busy loop on blocked transfers
  - chunked: Reject invalid bytes in trailer
  - CIPHERS.md: Fix the example that uses only TLS 1.3
  - cmake/FindGSS: Drop "MIT Unknown" version value, related tidy ups
  - cmake/FindGSS: Drop CMake &lt;3.16 compatibility logic
  - cmake/FindGSS: Fix comment, adjust custom flavor property name
  - cmake/FindGSS: Prioritize MIT over GNU in pkg-config detection
  - cmake: Auto-select static nghttp2/nghttp3/ngtcp2 Config
  - cmake: Export/forward 'NGTCP2_CRYPTO_BACKEND'
  - cmake: Fix three issues generating lib options in config files
  - cmake: Fix zstd CMake config name
  - cmake: Opt in 'MSVC_VERSION' 1951 to picky warnings
  - cmake: Quote 'COMPONENTS' string in 'curl-config.in.cmake'
  - cmake: Simplify 'LINK_ONLY' imported target extraction
  - config2setopts: Use default protocol properly (CVE-2026-12064)
  - connect: Remove deref of freed pointer in trace call
  - content_encoding: Fix limit failure message
  - content_encoding: Fix non-last chunked rejection
  - content_encoding: Timeout during slow decoding
  - cookie: Check __Secure- and __Host- case-sensitively when read from file
  - cookie: Compare path case sensitively
  - cookie: Reject control octets in file-loaded cookies
  - cookie: Simplify strstore(), remove outdated comment
  - cookie: Tailmatch the domains for secure override
  - cookie: Trim trailing dots when checking PSL (CVE-2026-8924)
  - creds: Add sasl service name (CVE-2026-8458)
  - creds: Create with empty user+pass
  - creds: Mask OAuth bearer token in trace logs
  - creds: Remove two unused functions
  - curl_easy_pause.md: Rephrase the stream cache when pause clause
  - curl_easy_setopt.md: Change options when no transfer runs
  - curl_formdata: Fix to pass long where missing, document
    'CURLFORM_NAMELENGTH'
  - curl_multi_assign.md: Clarify lifetime
  - curl_ntlm_core: Fix nettle 4+ builds in certain MultiSSL combos
  - curl_ntlm_core: Propagate DES 'CryptEncrypt()' error
  - curl_sha512_256: Fix result code on error
  - CURLINFO_CONTENT_LENGTH_UPLOAD_T.md: Expand
  - CURLMOPT_SOCKETFUNCTION.md: This sends *all* file descriptors
  - CURLOPT_CHUNK_BGN_FUNCTION: Target is there for symlinks only
  - CURLOPT_DISALLOW_USERNAME_IN_URL: Is for CURLOPT_URL only
  - CURLOPT_DOH_URL.md: Does not inherit proxy options
  - CURLOPT_ECH.md: Simplify the description language
  - CURLOPT_HAPROXYPROTOCOL.md: Only sent for newly setup connections
  - CURLOPT_MAXFILESIZE: Clarify this also works for on-going transfers
  - CURLOPT_PINNEDPUBLICKEY.md: Does not apply for other origins
  - CURLOPT_PORT.md: Use stronger language
  - CURLOPT_SHARE: Warn about early remove
  - CURLOPT_SSH_HOSTKEYFUNCTION.md: For new connections only
  - CURLOPT_WRITEFUNCTION.md: Mention redirects
  - CURLOPT_WRITEFUNCTION.md: Remove stray reference to HSTS
  - delta: Harden external command invocations
  - digest: Escape control codes too
  - digest: Flush proxy state on proxy or credential change
  - digest: Flush state on origin or credential change (CVE-2026-11856)
  - dns-httpsrr-lookup: Use origin, not peer
  - dnscache: Remove Curl_dns_entry_link
  - docs/libcurl: Fix the version for curl_multi_socket_action
  - docs: End "...can be used several times..." sentences with period
  - docs: Fix --follow doc typo
  - docs: Fix a couple of typos
  - docs: Fix grammar and wording in FAQ
  - docs: Fix odd wording in CONTRIBUTE.md
  - docs: Note CURLOPT_PINNEDPUBLICKEY has no effect on legacy LDAP backend
  - docs: Returned header size reflects HTTP/1-style format
  - doh: Cap the maximum TTL to 24 hours
  - doh: Drop redundant 'curlx_dyn_free()' call in 'doh_probe_done()'
  - doh: Stricter HTTPS RNAME parsing
  - ECH: Clean-ups
  - event: Fix wakeup consumption
  - ftp: Avoid accessing EPSV response one byte past the NULL
  - ftp: Remove 2 Curl_resolv_blocking() calls
  - ftp: Remove bits.ftp_use_control_ssl
  - ftplistparser: Clear strings.target if not symlink
  - gnutls: Allow building with nettle 4.0
  - gnutls: Fix more nettle 4+ compatibility issues
  - gnutls: Require 3.7.2 for earlydata
  - gsasl: Fix potential double free (CVE-2026-8925)
  - gtls: Fix ignored return and uninitialized status in OCSP check
  - gtls: Fix some typos
  - gtls: Minor fixes and improvements
  - gtls: Use the correct return code in trace output
  - gtls: Verify OCSP response signature in gtls_verify_ocsp_status
  - h3-proxy: Fix callback return values and a typo in tests
  - hostip: Remove unused MAX_HOSTCACHE_LEN and MAX_DNS_CACHE_SIZE
  - hsts.md: Mention multiple curl invokes effect
  - hsts: Duplicate live HSTS data in curl_easy_duphandle
  - http-proxy: Verify CONNECT response headers
  - HTTP3.md: Update quiche build
  - http: Don't pass on set cookies to new origins
  - http: Prefer chunked encoding over Content-Length: 0
  - http: Reject spurious CR bytes in headers
  - http_digest: Return better error
  - idn: Replace header guards with forward declaration
  - INSTALL-CMAKE.md: Document CMake environment variables
  - INTERNALS.md: Document minimum nghttp3 and ngtcp2 versions
  - KNOWN_BUGS.md: Remove fixed GnuTLS &lt;-&gt; OpenSSL incompat bug
  - KNOWN_BUGS: Remove stale Threads::Threads entry
  - krb5_sspi: Fix error message on 'DecryptMessage()' fail
  - ldap: base64 encode binary LDIF values with WinLDAP
  - ldap: Fix minor leak on write callback error
  - ldap: Fix to not leak 'attribute' on OOM (WinLDAP)
  - ldap: Switch off chasing referrals
  - lib678: Fix to not be perma-skipped
  - lib: Make '__STDC_VERSION__' literals 'L' (where missing)
  - lib: Transfer origin and proxy handling
  - lib: Two minor typos
  - libcurl-easy.md: Minor clarifications
  - libssh2: Do not use deprecated macros when unavailable
  - libssh2: Drop stray double-negative from 'strncmp()' result
  - libssh2: Fix to return error code on missing parameter
  - libssh2: Replace macro names with non-misspelled alternatives
  - libssh2: Save non-standard port to 'known_hosts'
  - libssh2: Sync version check with INTERNALS.md
  - libssh2: Use non-deprecated 'libssh2_knownhost_addc()'
  - libssh: Map SSH_KNOWN_HOSTS_OTHER to CURLKHMATCH_MISMATCH (CVE-2026-9547)
  - m4: Drop redundant conditions in TLS library detections
  - Makefile.am: Drop test1190 listed twice
  - managen: Apply minor fixes and improvements
  - mbedtls: Null-terminate the private key blob
  - mk-unity.pl: '#include', and not concatenate input headers
  - mqtt: Return error on truncated Remaining Length
  - mqtt: Validate PINGRESP and DISCONNECT have remaining_length == 0
  - multi: Handle pause in multi socket callback (CVE-2026-9080)
  - multi: Remove a stale comment
  - multi: Silence gcc 16 '-Wnull-dereference', bump CI job to test
  - multi: xfers_really_alive
  - netrc: Remember and check filename loaded
  - netrc: Scanner refactor (CVE-2026-8926)
  - ngtcp2: Fail handshake directly (CVE-2026-9545)
  - openssl: Do not mix OpenSSL int result with 'CURLcode' variable
  - os400sys: Fix theoretical length overflows
  - peer.h: Fix typo in comment
  - pingpong: Reject nul byte in server response line
  - progress: Fix CURLINFO time reporting
  - psl: Require libpsl 0.16.0 (2016-12-10) or greater
  - pytest: Pass '--disable' to curl
  - pytest: Re-enable test test_05_01 and test_05_02 for quiche 0.29.0+
  - pythonlint.sh: Make it fail on error, fix ruff warnings in pytest
  - quic: Count zero length packets against max (CVE-2026-11352)
  - ratelimits: Use minimal burst rate
  - RELEASE-PROCEDURE.md: Update coming release dates
  - resolve: Mention in error that IP address is expected
  - rtsp: Bump buf after rtsp_filter_rtp()
  - runner.pm: Apply minor correctness fix
  - runner.pm: Set 'CURL_TESTNUM' for 'precheck' commands
  - runtests: Fix tests for curl builds with embedded CA bundle
  - rustls: Error on CURLOPT_CRLFILE with native CA store
  - schannel: Check 'schannel_sha256sum()' success, and more
  - schannel: Enforce Extended Key Usage for custom CA roots
  - schannel: Error on TLS 1.3-only with cipher list
  - schannel: Fix https proxy for client cert and certinfo
  - schannel: Fix revoke_best_effort setting for proxy
  - schannel: Use fopen instead of CreateFile
  - schannel_verify: Avoid out of blob access
  - schannel_verify: Simplify CryptQueryObject use
  - scripts: Catch Credits-to contributors
  - SECURITY-ADVISORY.md: Expand
  - setopt: Changing the proxy port is also a proxy change
  - setopt: Clear proxy auth properly on NULL (CVE-2026-9079)
  - setopt: Clear the "custom" CA booleans when set to NULL
  - setopt: CURLOPT_MAXCONNECTS set to 0 restores default value
  - setopt: Deref the old referer when setting a new
  - setopt: Fix to honour 'CURLOPT_PROXY_CAINFO_BLOB' over Native CA
  - setopt: Gate a few proxy TLS options by checking backend support
  - setopt: More careful cleanup of the HSTS cache
  - setopt: Return error if received 'curl_blob-&gt;data' is NULL
  - show-headers.md: Mention bold headers and --no-styled-output
  - sigv4: URL encode the user name in the header
  - smb: constify 'strchr()' result variable
  - smb: Integer overflow proof a size check
  - smbserver: Update internal id generation for Python 3
  - socket: Introduce 'SOCK_EAGAIN()' and use it
  - socket: Use name 'sockerr' for socket error variables
  - socks_sspi: Invalid response length is a fatal error
  - socks_sspi: Store socks5_gssapi_enctype
  - spnego_sspi: Honour CURLOPT_GSSAPI_DELEGATION for Windows SSPI
  - spnego_sspi: Preserve distinction btw policy-only and uncond delegation
  - src: Fix comment typos
  - src: Sync nghttp2 versions checks with current requirements
  - ssl native_ca_store: Always reinit (CVE-2026-11564)
  - SSLCERTS: Document 8.19.0 default Native CA builds (Windows)
  - sspi: Clear SSPI credentials on AcquireCredentialsHandle failure
  - sspi: Free libcurl allocated memory with curlx_free
  - telnet: Drop an 'int' cast no longer necessary
  - telnet: Drop redundant interim variables
  - telnet: Fix error message typos
  - telnet: Fix old copy-paste typo in variable name
  - telnet: Honour CURLOPT_TIMEOUT in send_telnet_data()
  - test1588: Use %TESTNUMBER, not hard-coded number
  - test1981: Explicitly set the locale
  - tests: Add 'cookies' feature to some tests
  - tests: Add an assert to avoid IPC blocking
  - tests: Add the "--resolve" keyword to tests that lack it
  - tests: Fix unit1636 with --disable-progress-meter
  - tftp: Avoid the timeout calc if the timeout is crazy
  - tftp: Stricter option name checks
  - tidy-up: Add space around operators, where missing
  - tidy-up: Apply clang-format fixes
  - tidy-up: Drop stray casts for allocated pointers
  - tidy-up: Miscellaneous
  - tls: Fix incomplete mTLS config in conn reuse and session cache
    (CVE-2026-8932)
  - tls: Wolfssl: fixes for PQC key shares
  - tool: Warn when --ssl and --ftp-ssl-control override each other
  - tool_formparse.c: Fix two minor comment typos
  - tool_formparse: Polish error message + make two functions static
  - tool_formparse: tool2curlparts is no longer recursive
  - tool_help: Rectify a bad assert
  - tool_operhlp: Avoid NULL to %s
  - tool_urlglob: Avoid overflow at end of range
  - tool_urlglob: Better 'Duplicate glob name' position
  - tool_urlglob: Make globbing error reported for correct position
  - tool_writeout: Fix %time{} output for %s
  - transfer: Clear referer when set to NULL (CVE-2026-9546)
  - unit1675: Fix potential memory leak on dynbuf fail path
  - unix-sockets: Ignore proxy settings
  - URL-SYNTAX: Document more URL parsing details
  - url: Compare full origin when setting credentials
  - url: Connection credentials origin
  - url: Connection reuse fixes for starttls
  - url: Detect proxy changes read from environment (CVE-2026-8927)
  - url: Don't log bits.close state
  - url: Fix connection reuse for starttls protocols (CVE-2026-8286)
  - url: Keep the question mark for empty queries
  - url: Remove superfluous check
  - url: url_match_destination fix
  - urlapi: Accept 0X prefix in IPv4 address as well
  - urlapi: Change more lowercase percent-encoded to uppercase
  - urlapi: Compare zone-id in Curl_url_same_origin()
  - urlapi: Consume trailing dots after IPv4 numerical addresses
  - urlapi: Deny hostnames with more than one trailing dot
  - urlapi: Drop base fragment on empty redirect
  - urlapi: Fix an issue parsing file URLs
  - urlapi: Fix memleaks on error in 'parse_hostname_login()'
  - urlapi: Fix redirect handling if CURLU_NO_GUESS_SCHEME is set
  - urlapi: Forbid '|' in host
  - urlapi: Handle redirect without set scheme with default-scheme
  - urlapi: URL decode hostname before IP address normalization
  - user-agent.md: Mention double quotes too
  - var: Use a dedicated pointer for the alloc
  - verify-release: Verify more thoroughly with git
  - vquic: Drop stray casts for 'iovec.iov_len'
  - vquic: Fix '-Wunused-parameter' with proxies disabled
  - vtls: More large buffer support and error checks for SHA-256
  - vtls: Use Curl_safecmp for CRLfile and pinned_key comparison
  - vtls_scache: Include signature_algorithms in the SSL peer cache key
  - vtls_spack: Drop redundant macro fallbacks
  - VULN-DISCLOSURE-POLICY.md: Emphasize comm as a human
  - VULN-DISCLOSURE-POLICY.md: Emphasize the no email thank you part
  - VULN-DISCLOSURE-POLICY.md: Test code is not secure
  - VULN-DISCLOSURE-POLICY: Non-released code
  - websockets: Auto-tunnel through http proxy
  - websockets: Buffer ugprade data at connection level
  - windows: Update MS SDK versions in comments
  - winldap: Avoid NULL pointer deref on 'ldap_get_dn()' fail
  - ws: Make pong sending lazy (CVE-2026-11586)
  - x509asn1: Fix DH public key parameter extraction
  - x509asn1: Fix operator order in do_pubkey</changelog>
</package>
<package pkgid="f70c519fdb9b35c9512d7ff46e00d02f0c36ac6da0ae2f57a4b29e530c97caea" name="libgpg-error" arch="i686">
  <version epoch="0" ver="1.61" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1.0.cf" date="1778414400">- Update to 1.61 (https://dev.gnupg.org/T8239)
  - Fix possible stack overflow in es_printf for %.100f format
    (https://dev.gnupg.org/T8240)
  - Fix out-of-bounds read in vfnameconcat
  - Add cross compile support for wasm*-*-emscripten target
  - Update Japanese and Polish translations</changelog>
</package>
<package pkgid="9b14cf950bbf1a2e20e7394b662de4922f47e1825d3ffbf2ea7d3a91b8d0a044" name="libgpg-error" arch="x86_64">
  <version epoch="0" ver="1.61" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1.0.cf" date="1778414400">- Update to 1.61 (https://dev.gnupg.org/T8239)
  - Fix possible stack overflow in es_printf for %.100f format
    (https://dev.gnupg.org/T8240)
  - Fix out-of-bounds read in vfnameconcat
  - Add cross compile support for wasm*-*-emscripten target
  - Update Japanese and Polish translations</changelog>
</package>
<package pkgid="34f9a668d48daa3f6986d078199f5d090cf6fd7b6ac539a7969fc9786e7740bc" name="libgpg-error-devel" arch="i686">
  <version epoch="0" ver="1.61" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1.0.cf" date="1778414400">- Update to 1.61 (https://dev.gnupg.org/T8239)
  - Fix possible stack overflow in es_printf for %.100f format
    (https://dev.gnupg.org/T8240)
  - Fix out-of-bounds read in vfnameconcat
  - Add cross compile support for wasm*-*-emscripten target
  - Update Japanese and Polish translations</changelog>
</package>
<package pkgid="54569a4faf972429bf94dfb822bea6d07466bbaeff4b81698d856d328dc4e17e" name="libgpg-error-devel" arch="x86_64">
  <version epoch="0" ver="1.61" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1744977600">- Update to 1.54 (https://dev.gnupg.org/T7597)
  - Fix a regression in 1.52 that did not allow to open UNC specified files on
    Windows
  - Ignore log file specification from the Registry in the gpg-error tool</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1745841600">- Update to 1.55 (https://dev.gnupg.org/T7614)
  - Rewrite the extended length path handling under Windows
    (https://dev.gnupg.org/T5754)
  - Add new test commands to the gpg-error tool; allow command without dashes
    and reformat the help
  - Silence warning from gcc 15 (https://dev.gnupg.org/T7621)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1760097600">- Update to 1.56 (https://dev.gnupg.org/T7625)
  - Support the %b conversion specifier in the estream printf functions
  - New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul"
    device (https://dev.gnupg.org/T7723)
  - Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows
    (https://dev.gnupg.org/T7716)
  - New mode keyword "share=xxx" for gpgrt_fopen
  - Change the default method to get the number of fds to close; this fixes a
    spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)
  - Fix some cases of inheriting HANDLEs on Windows
    (https://dev.gnupg.org/T7716)
  - New system configurations for 64-bit Android, i686 Android, x86_64 Android
    and an armv7a alias to arm for Android
  - Set build-specific build variable for zOS
  - New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1.0.cf" date="1765454400">- Update to 1.57 (https://dev.gnupg.org/T7847)
  - The sysconfdir as provided by the configure run is now used for the default
    global config files of the argparser (https://dev.gnupg.org/T7894)
  - New function gpgrt_fconcat and improved the existing gpgrt_fnameconcat and
    gpgrt_absfnameconcat (https://dev.gnupg.org/T7894)
  - On Windows use the UI language instead of the locale for translations
    (https://dev.gnupg.org/T7874)
  - Some minor build improvements for zOS
  - Updated the Swedish and Portuguese translations
  - New symbols: gpgrt_fconcat, GPGRT_FCONCAT_ABS, GPGRT_FCONCAT_TILDE,
    GPGRT_FCONCAT_SYSCONF</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1.0.cf" date="1765800000">- Update to 1.58 (https://dev.gnupg.org/T7970)
  - Fix building of static libraries on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-2.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1.0.cf" date="1771502400">- Update to 1.59 (https://dev.gnupg.org/T7974)
  - Take care of POSIX semaphore "shared" semantics; this fixes a problem on
    NetBSD (https://dev.gnupg.org/T8065)
  - Fix preparing the environment block on Windows (https://dev.gnupg.org/T8052)
  - Fix for GPGRT_PROCESS_*_KEEP flags on Windows (https://dev.gnupg.org/T8052)
  - Update Russian and Swedish translations
  - Introduce autogen.rc variable autogen_use_force</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1.0.cf" date="1777291200">- Update to 1.60 (https://dev.gnupg.org/T8112)
  - New error codes (https://dev.gnupg.org/T6644)
  - Fix a use-after-scope of a Windows handle array
  - Fix cross compiling for wasm32-unknown-emscripten
  - New symbols: GPG_ERR_PUBKEY_NON_COMPLIANT, GPG_ERR_CIPHER_NON_COMPLIANT,
    GPG_ERR_DIGEST_NON_COMPLIANT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1.0.cf" date="1778414400">- Update to 1.61 (https://dev.gnupg.org/T8239)
  - Fix possible stack overflow in es_printf for %.100f format
    (https://dev.gnupg.org/T8240)
  - Fix out-of-bounds read in vfnameconcat
  - Add cross compile support for wasm*-*-emscripten target
  - Update Japanese and Polish translations</changelog>
</package>
<package pkgid="70435f24c81f9c2461d253e03662b86c12f229a6d0f7f655b6570fec45d319b0" name="libidn" arch="i686">
  <version epoch="0" ver="1.44" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-2.0" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-3.0" date="1759924800">- Rebuilt for java-25-openjdk as system jdk in rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-4.0" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0" date="1781697600">- Update to 1.44
  - Fix read-out-of-bounds error in ToUnicode APIs
  - Fix strcpy buffer overflow in examples
  - Update gnulib files, translations and various maintenance fixes</changelog>
</package>
<package pkgid="57224844b2583c86f4d48d2512a2faad2489f8963db7e175f7d6e0b57fcdbbc7" name="libidn" arch="x86_64">
  <version epoch="0" ver="1.44" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-2.0" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-3.0" date="1759924800">- Rebuilt for java-25-openjdk as system jdk in rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-4.0" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0" date="1781697600">- Update to 1.44
  - Fix read-out-of-bounds error in ToUnicode APIs
  - Fix strcpy buffer overflow in examples
  - Update gnulib files, translations and various maintenance fixes</changelog>
</package>
<package pkgid="2be9382fb6f2613dfdd476fec765e05b8cecd13a3f13afbf75ec3572ca6d64a6" name="libidn-devel" arch="i686">
  <version epoch="0" ver="1.44" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-2.0" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-3.0" date="1759924800">- Rebuilt for java-25-openjdk as system jdk in rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-4.0" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0" date="1781697600">- Update to 1.44
  - Fix read-out-of-bounds error in ToUnicode APIs
  - Fix strcpy buffer overflow in examples
  - Update gnulib files, translations and various maintenance fixes</changelog>
</package>
<package pkgid="6526b7050a084ddea33100bd6cf933e4f4db67c00a29b1bc537a79c8616a4016" name="libidn-devel" arch="x86_64">
  <version epoch="0" ver="1.44" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-2.0" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-3.0" date="1759924800">- Rebuilt for java-25-openjdk as system jdk in rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-4.0" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0" date="1781697600">- Update to 1.44
  - Fix read-out-of-bounds error in ToUnicode APIs
  - Fix strcpy buffer overflow in examples
  - Update gnulib files, translations and various maintenance fixes</changelog>
</package>
<package pkgid="897a1341a87873152c10f35836767d61918e134bbaa9ab9f3c1c89e459012ee7" name="libidn-java" arch="noarch">
  <version epoch="0" ver="1.44" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-2.0" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-3.0" date="1759924800">- Rebuilt for java-25-openjdk as system jdk in rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-4.0" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0" date="1781697600">- Update to 1.44
  - Fix read-out-of-bounds error in ToUnicode APIs
  - Fix strcpy buffer overflow in examples
  - Update gnulib files, translations and various maintenance fixes</changelog>
</package>
<package pkgid="806b56111b743cbc6b5cb565df1387524f1eb93d43f82196824801ef8601eb78" name="libidn-javadoc" arch="noarch">
  <version epoch="0" ver="1.44" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-4.0" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-5.0" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0" date="1742817600">- Update to 1.43
  - The release tarball is now reproducible
  - We publish a minimal source-only tarball generated by 'git archive',
    containing only the files stored in version controlled sources, and no
    auxiliary files
  - A use of uninitialized value bug was fixed in idna_to_unicode_4z4z; if the
    call to idna_to_unicode_44i failed due to an out of memory condition
    (malloc() returning NULL) then the code would copy the content of allocated
    but uninitialized memory into the output buffer; the bug was found using
    GCC's static analyzer
  - The C# Libidn.dll can now be built with .NET as well as Mono/SSCLI
  - Fix self-check tst-version due to broken strverscmp on Windows/musl
  - The release tarball uses tar --format=ustar
  - The idn tool now binds the "gnulib" domain for translations
  - Unicode tables are now rebuilt from source again
  - Update gnulib files and build fixes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-2.0" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-3.0" date="1759924800">- Rebuilt for java-25-openjdk as system jdk in rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-4.0" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0" date="1781697600">- Update to 1.44
  - Fix read-out-of-bounds error in ToUnicode APIs
  - Fix strcpy buffer overflow in examples
  - Update gnulib files, translations and various maintenance fixes</changelog>
</package>
<package pkgid="9dd8604d06a3a456ac4302c35f09bc6bf1803cecd919f179415eced44630f8b2" name="libnet" arch="x86_64">
  <version epoch="0" ver="1.3" rel="7.1.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.1.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="4a12f5d4927529bb2db663e93dcafb20b63ab7d6fcb35da5356d9eb6dea35f3f" name="libnet-devel" arch="x86_64">
  <version epoch="0" ver="1.3" rel="7.1.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.1.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="9f074f8e6b1b163da651ace90d4ae720fde0029a662e5c37c62e2b8950121f3b" name="libnet-doc" arch="noarch">
  <version epoch="0" ver="1.3" rel="7.1.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-8.0.cf" date="1687262400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2-9.0.cf" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-1.0.cf" date="1696593600">- Update to 1.3 (see ChangeLog.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-2.0.cf" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-4.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-6.0.cf" date="1728648000">- Fix static analysis errors
  https://github.com/libnet/libnet/pull/170</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.0.cf" date="1733918400">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-7.1.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="91c253c9bcff734610d1dd289c3ebb3244817e7a878f14a05c56a7a7256897ac" name="libssh2" arch="i686">
  <version epoch="0" ver="1.11.1" rel="9.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-7.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-8.0.cf" date="1782302400">- Fix CVE-2026-55200 &amp; CVE-2026-55199 (thanks to Mikel Olasagasti Uranga)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-9.0.cf" date="1782388800">- Fix CVE-2025-15661: Information disclosure and denial of service via crafted
  SFTP response</changelog>
</package>
<package pkgid="e58a21b78259da90f06b495f7706ab97a804b2c2d00022088860b896d80dad77" name="libssh2" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="9.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-7.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-8.0.cf" date="1782302400">- Fix CVE-2026-55200 &amp; CVE-2026-55199 (thanks to Mikel Olasagasti Uranga)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-9.0.cf" date="1782388800">- Fix CVE-2025-15661: Information disclosure and denial of service via crafted
  SFTP response</changelog>
</package>
<package pkgid="1cf4f2cf888140c8a335b6115769cc1425dab9853dd23815cb572628ce3baa3d" name="libssh2-devel" arch="i686">
  <version epoch="0" ver="1.11.1" rel="9.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-7.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-8.0.cf" date="1782302400">- Fix CVE-2026-55200 &amp; CVE-2026-55199 (thanks to Mikel Olasagasti Uranga)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-9.0.cf" date="1782388800">- Fix CVE-2025-15661: Information disclosure and denial of service via crafted
  SFTP response</changelog>
</package>
<package pkgid="f0a6bbccde5a326308ce5df7ebe66110a00766cc34d0eb7588dbc2b7794b3673" name="libssh2-devel" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="9.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-7.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-8.0.cf" date="1782302400">- Fix CVE-2026-55200 &amp; CVE-2026-55199 (thanks to Mikel Olasagasti Uranga)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-9.0.cf" date="1782388800">- Fix CVE-2025-15661: Information disclosure and denial of service via crafted
  SFTP response</changelog>
</package>
<package pkgid="f49f41a514a0fdcf49374c438997b5651d90dd6bb474b0d27c891a0afe5a496b" name="libssh2-docs" arch="noarch">
  <version epoch="0" ver="1.11.1" rel="9.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.0-8.0.cf" date="1722081600">- Fix test suite failures with OpenSSH 9.8p1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-1.0.cf" date="1729080000">- Update to 1.11.1
  - This is an enhancement and bugfix release - see RELEASE_NOTES for details
  - Note also that various algorithms are now deprecated and not built by
    default, which affects this package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-3.0.cf" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.0.cf" date="1742990400">- Drop support for old distributions prior to Fedora 28 and EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-4.1.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-5.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-6.0.cf" date="1779451200">- Fix CVE-2026-7598: integer overflow via large username or password arguments
  (https://github.com/libssh2/libssh2/pull/1858)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-7.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-8.0.cf" date="1782302400">- Fix CVE-2026-55200 &amp; CVE-2026-55199 (thanks to Mikel Olasagasti Uranga)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11.1-9.0.cf" date="1782388800">- Fix CVE-2025-15661: Information disclosure and denial of service via crafted
  SFTP response</changelog>
</package>
<package pkgid="3ff26dc5497643dda39ef14d6bddf413ddbc21fd01fabe4a737d8ec4d33779af" name="libunrar" arch="x86_64">
  <version epoch="0" ver="7.23" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-1.0.cf" date="1777550400">- Update to 7.21</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.23-1.0.cf" date="1782993600">- Update to 7.23
- Update debian files to 7.2.6-1</changelog>
</package>
<package pkgid="199da40350594f9dc2577fd4758c37d3230c0eaa2a4cc7b97bf81320962316e2" name="libunrar-devel" arch="x86_64">
  <version epoch="0" ver="7.23" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-1.0.cf" date="1777550400">- Update to 7.21</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.23-1.0.cf" date="1782993600">- Update to 7.23
- Update debian files to 7.2.6-1</changelog>
</package>
<package pkgid="abd85ae76af5506798d2ecfc60b71c9c5509e2d384b79526adc6f0f9366e4996" name="libxml2" arch="i686">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="136c208dcec2b63a0d52af2dd78f6d15766fffe0309af6912d4ce1ee7e3e1a1b" name="libxml2" arch="x86_64">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="e1890f3e6111f914399fce7401d33b07fed2477d0ca7a1a11fe5c8f89aa28057" name="libxml2-devel" arch="i686">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="466ccdf9f60fae49b78c0619303135848e456a9d577451fc2198e5e2810624cd" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="2cf38dc26dcead034f00fc60e3baeb8380f17406a59e93460b456ed12606d4e9" name="libxml2-static" arch="x86_64">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="4f7ebd4724882b5dd170dfa439c2197b921191a1de7c923cb55bf021ed7327d2" name="libxslt" arch="i686">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="70e651552cbd37099836d7aa8b0ad014ee19184708efecd13a16599a22e02419" name="libxslt" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="0a52c3e1c43b6350d4c053ee4a913c92261e624a90489d1fd89f688396d6e39a" name="libxslt-devel" arch="i686">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="bda7e53b554cae350a5d0f9f4b2b88aa8902e7fcafa15331c974fa34a0064abf" name="libxslt-devel" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="5648503457bbea91bfc4f8a45009558443ee1545bc83f1dd06bc6a7beec892a7" name="mcrcon" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-4" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-7" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.2-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.3-1" date="1733313600">- Update to 0.7.3 (rhbz#2330303)
  - Add support for Valve style rcon authentication (GH#106)
  - Change maximum packet size to correct value (4096 -&gt; 4106) (GH#103)
  - Print auth failed message to stderr instead of stdout
  - Fail immediately if received packet size is out of spec
  - Return proper exit code from run_terminal_mode()
  - Add error messages to rcon_command() function
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="50b924ff15de03d4ba122762b76c9d215493586f97a8012a4307a929516f92b5" name="metamail" arch="x86_64">
  <version epoch="0" ver="2.7" rel="54.7.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.5" date="1714737600">- Fix for gcc14 compatibility and some other stuff (rightfully) generating
  warnings
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.6" date="1726660800">- Avoid file dependency for fonts after Fedora 38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.7-54.7" date="1761825600">- Port from termio.h to termios.h
- Add fixes for c99</changelog>
</package>
<package pkgid="8761bbf6440058ef0deda00dbe2f57715b7feca4345680382d9714443a8b3231" name="mgdiff" arch="x86_64">
  <version epoch="0" ver="1.0" rel="13.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0-13" date="1680177600">- License is SPDX: MIT
- Avoid deprecated patch syntax
- Use distribution linker flags
- Replace deprecated _BSD_SOURCE and _SVID_SOURCE with _DEFAULT_SOURCE
  unless we're on EL-7 or Fedora &lt; 21, where it doesn't work</changelog>
</package>
<package pkgid="c62e7c25b859e7900aef4a388275ccb4f9b9150524ea9ddae79ed66b42cfca07" name="mingw32-check" arch="noarch">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="a909c73b5510fe6fb726435dc3203fe2f1594a0f37fbdf560c5d31c63cd83bad" name="mingw64-check" arch="noarch">
  <version epoch="0" ver="0.15.2" rel="18.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-10.0.cf" date="1689768000">- Split checkmk out into a separate package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-11.0.cf" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-12.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-13.0.cf" date="1716379200">- Fix check-devel for cmake users (rhbz#2161231)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-14.0.cf" date="1717502400">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-15.0.cf" date="1717588800">- Rebuild to sync with Fedora version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-16.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.0.cf" date="1730980800">- October 2024 mass rebuild for EL-10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-17.1.cf" date="1737028800">- Add patch to fix texinfo error</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15.2-18.0.cf" date="1751112000">- Remove unused graphviz and texlive-tex BRs
- Drop support for EOL distributions prior to F-28, EL-8:
  - Always build with subunit support
  - File triggers always available
  - Use %{make_build} and %{make_install} for autotools build</changelog>
</package>
<package pkgid="eff895739ecbd9efca8c29c40347bd69f8ce88e9f47cf73cf2b18d66ebcbc7bb" name="mkisofs" arch="x86_64">
  <version epoch="10" ver="3.02" rel="0.32.a10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-3.0" date="1688817600">- Drop Obsoletes for old cdrkit tools, so users can choose between packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2021.09.18-4.0" date="1744632000">- Build using -std=gnu17 from F-42 onwards since old code does not compile
  with -std=c23
- Drop legacy ldconfig scriptlets
- Fix installation problems arising from
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
</package>
<package pkgid="3a107841b352db81c269e7de28641df553b67c130fced2dcb03027a5ed19b3ab" name="mod_fastcgi" arch="x86_64">
  <version epoch="0" ver="2.4.7.1" rel="3.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7.1-2" date="1705924800">- Drop support for httpd 2.2.x
- Avoid use of deprecated patch syntax
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4.7.1-3" date="1706184000">- Rebuilt for binutils breakage in Rawhide
  (see https://pagure.io/releng/issue/11888)</changelog>
</package>
<package pkgid="7c9b3bb12a744d7268d9e287ab493767806d010f98cc86af92d2741abbd4ec39" name="mod_fcgid" arch="x86_64">
  <version epoch="0" ver="2.3.9" rel="35.fc42"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-29" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-30" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-31" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-32" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Software Management Team &lt;packaging-team-maint@redhat.com&gt; - 2.3.9-33" date="1720526400">- Eliminate use of obsolete %patchN syntax (#2283636)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-34" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.9-35" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="7d208e8c7b857cbfa1fc24859f06ea063a006915a2be53aa0ad17af289be3b64" name="nmap" arch="x86_64">
  <version epoch="4" ver="7.92" rel="11.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-2.0.cf" date="1720958400">- Downgrade Nmap to 7.92 to fix NPSL license issue (rhbz#2296006)
  https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/thread/Q67UGCHSCKCLJOVOHSLYU4AERAHBS5YE/
  https://gitlab.com/fedora/legal/fedora-license-data/-/issues/543
- pcre2 only used from F-40 onwards again, as it was prior to 7.95
- Support EMS in ssl-enum-ciphers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-3.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-4.0.cf" date="1737201600">- Fix build with libpcap-1.10.5
  - This version changed SOCKET to PCAP_SOCKET, which conflicts with an
    unrelated use of the same name internally
  - https://github.com/the-tcpdump-group/libpcap/pull/1251</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-5.0.cf" date="1737201601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-6.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-8.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-9.0.cf" date="1780488000">- Fix OpenSSL 4.0 compatibility
- Always install appdata
- Drop legacy scriptlets replaced by file triggers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-10.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-11.0.cf" date="1782993600">- Fix CVE-2026-58058 (rhbz#2494410)</changelog>
</package>
<package pkgid="2864c88c89de26b963f942e3d6bdfc53d456031240fad2c59b33720629300153" name="nmap-ncat" arch="x86_64">
  <version epoch="4" ver="7.92" rel="11.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-2.0.cf" date="1720958400">- Downgrade Nmap to 7.92 to fix NPSL license issue (rhbz#2296006)
  https://lists.fedoraproject.org/archives/list/legal@lists.fedoraproject.org/thread/Q67UGCHSCKCLJOVOHSLYU4AERAHBS5YE/
  https://gitlab.com/fedora/legal/fedora-license-data/-/issues/543
- pcre2 only used from F-40 onwards again, as it was prior to 7.95
- Support EMS in ssl-enum-ciphers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-3.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-4.0.cf" date="1737201600">- Fix build with libpcap-1.10.5
  - This version changed SOCKET to PCAP_SOCKET, which conflicts with an
    unrelated use of the same name internally
  - https://github.com/the-tcpdump-group/libpcap/pull/1251</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-5.0.cf" date="1737201601">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-6.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-8.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-9.0.cf" date="1780488000">- Fix OpenSSL 4.0 compatibility
- Always install appdata
- Drop legacy scriptlets replaced by file triggers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-10.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:7.92-11.0.cf" date="1782993600">- Fix CVE-2026-58058 (rhbz#2494410)</changelog>
</package>
<package pkgid="09c24675b10fe281785b1f9ab49e86abc11ba481eb34125ad758aceb3046ef90" name="perl-Algorithm-C3" arch="noarch">
  <version epoch="0" ver="0.11" rel="10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-10" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1f9d45bde5473386389454eb3e9cb0580b46aca087408ac7c88ca82f747eeccb" name="perl-Algorithm-Diff" arch="noarch">
  <version epoch="0" ver="1.2010" rel="11.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2010-8" date="1678104000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2010-11" date="1718193600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="2f30be86ea1500316959aa450249cf07b67ae45c50c754e097a54fbbbbfd92e2" name="perl-Algorithm-Diff-XS" arch="x86_64">
  <version epoch="0" ver="0.04" rel="30.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-25" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-30" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="7a838e6bd6b1108a1cf93b7b90821405b42ff5b9dd23f629fbc75302e46b6376" name="perl-Any-Moose" arch="noarch">
  <version epoch="0" ver="0.27" rel="32.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-27" date="1678104000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-31" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-32" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="fbab6529230fb63e80fa3f54c3d8379ac3483d6d0467bea06b026e96fbf4edf0" name="perl-AnyEvent" arch="x86_64">
  <version epoch="0" ver="7.17" rel="18.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-11" date="1654171200">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-15" date="1678190400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-16" date="1689249600">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.17-18" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="b4c3f86210506a52f36c2ad7d132eca62fa0c047a69e2c7bb3a32e990ec1f6af" name="perl-AnyEvent-AIO" arch="noarch">
  <version epoch="0" ver="1.1" rel="38.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-38" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c71521db3a16fbe6010136ff3ff0ddde5ea78a9fbf1c91d058af325d6c625db2" name="perl-AnyEvent-BDB" arch="noarch">
  <version epoch="0" ver="1.1" rel="42.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-42" date="1689336000">- Use SPDX-format license tag
- Use %licence unconditionally</changelog>
</package>
<package pkgid="85008e038242a8fdcf7386e01a7644142b1edc0814f82c24a7a259359d7ec029" name="perl-App-Software-License" arch="noarch">
  <version epoch="0" ver="0.11" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-1" date="1782734400">- Initial RPM version</changelog>
</package>
<package pkgid="bdcccf1d31034257f54e5fdc8db0ae320152af2967a73ca0b9734f64846145ad" name="perl-Archive-Any" arch="noarch">
  <version epoch="0" ver="0.0946" rel="13.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0946-13" date="1678190400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="cc7dc862beef95cfb556d9b560d2d89745c5ff9d657ed8f278ed7ca1757f3c46" name="perl-Archive-Any-Lite" arch="noarch">
  <version epoch="0" ver="0.11" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-22" date="1678190400">- Use SPDX-format license tag
- BR: perl(Parallel::ForkManager) unconditionally
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-25" date="1718280000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="97a27ee6786def2bb2f33d399e7f3e20fd5f126f102529ec2016808e7fc6e67b" name="perl-Archive-Peek" arch="noarch">
  <version epoch="0" ver="0.37" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-1" date="1636977600">- Update to 0.37
  - Add repository metadata
  - Port from Moose to Moo and Type::Tiny
  - Make prereqs more specific with respect to phase
  - Add negative test
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-5" date="1678190400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="60393d65e9a69d0438ff787cd5569b727354304a8241c8b9549ab7e6f5ef3d82" name="perl-Archive-Tar" arch="noarch">
  <version epoch="0" ver="3.12" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.04-1" date="1740571200">- Update to 3.04
  - Fix handling filenames with trailing whitespace
  - Allow --format=ustar option for ptar
  - Symlink tests on Windows (https://github.com/Perl/perl5/issues/21402)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.06-1" date="1778414400">- Update to 3.06
  - Hardlinks not extracted by default; added EXTRACT_HARDLINK flag
  - If hardlinks are extracted, they are now subject to the same rules as
    symlinks with regards to chown and chmod</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.08-1" date="1779624000">- Update to 3.08
  - Validate symlink and hardlink linkname in SECURE MODE
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.10-1" date="1779796800">- Update to 3.10
  - Added MAX_FILE_SIZE setting, defaulting to 1GB, for extracting files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.12-1" date="1780488000">- Update to 3.12
  - Allow '..' links in secure extract in parent path for symlinks and hardlinks</changelog>
</package>
<package pkgid="fa91ed2e75869f3ba3a2a0c91f6b6466353ccf65abf584a25ba72fbee387df53" name="perl-Archive-Zip" arch="noarch">
  <version epoch="0" ver="1.68" rel="11.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.68-11" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b5b8e5af78c7ae81a58f0b9a0a1f2b97590cecb09765bdcad50a7c7bde121ec6" name="perl-Array-Compare" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.0.8-8" date="1689508800">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.0.0-1" date="1695643200">- Update to 4.0.0
  - Switched to using Feature::Compat::Class
  - Added a bunch of relevant modules to SEE ALSO
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="0127b64bed0784396f9e5f7bf805ed83dd43374af562ba5aa018b089085fe60a" name="perl-Array-Diff" arch="noarch">
  <version epoch="1" ver="0.09" rel="14.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.09-14" date="1678276800">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="41f7fee0e9835548c378ca63aa8d365adeb0484e2243e4404eec8d4c26d921d7" name="perl-B-COW" arch="x86_64">
  <version epoch="0" ver="0.007" rel="7.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-1" date="1665835200">- Update to 0.005
  - Add version to Test::More use to ensure correct version
  - Remove useless MIN_PERL_VERSION_FOR_COW
  - Update CI workflow
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-1" date="1666094400">- Update to 0.006
  - Disable prototypes to silence warning</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.007-1" date="1666353600">- Update to 0.007
  - Advertise XSLoader dependency in metadata</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.007-3" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.007-7" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="285a79029bfb2bcfc559bdf511f25bc37f63313e229756eb762e21c1f1eb2233" name="perl-B-Hooks-EndOfScope" arch="noarch">
  <version epoch="0" ver="0.28" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-6" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.28-1" date="1709294400">- Update to 0.28
  - Add optional prereqs to metadata to help prereq analysis tools
    (CPAN RT#151992)</changelog>
</package>
<package pkgid="01af87e44289073a2f75e69cdc4a010742931801862f32bfedb510cea0009878" name="perl-B-Hooks-OP-Annotation" arch="x86_64">
  <version epoch="0" ver="0.44" rel="40.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-35" date="1678276800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-36" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-40" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="a1a30852e5016d0ca64bc7fe79b99bd076e08c3b647216ef7a73d71511f9247a" name="perl-B-Hooks-OP-Check" arch="x86_64">
  <version epoch="0" ver="0.22" rel="24.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-19" date="1678276800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-20" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-24" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="21056a85b35dd9fb010ee38c9ac1faeebdae815474f549691a29e1f710277584" name="perl-B-Keywords" arch="noarch">
  <version epoch="0" ver="1.29" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1716811200">- Update to 1.27 (rhbz#2283492)
  - Add bareword __CLASS__ since 5.39.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1750939200">- Update to 1.28
  - Add keywords any, all since 5.42.0
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1760875200">- Update to 1.29
  - Fix new 5.43 warning with qw($\) (GH#10)</changelog>
</package>
<package pkgid="7b4dffb17322ad664db14b3b22da3c5cb02d5bb5bcee05dfd234c0173a158f61" name="perl-B-Utils" arch="x86_64">
  <version epoch="0" ver="0.27" rel="30.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-25" date="1678276800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-26" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-30" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="4abd938df9be0c13c864cab407e29d7bcbd3ecb7e975940e52e1bae14ac28ff1" name="perl-BDB" arch="x86_64">
  <version epoch="0" ver="1.92" rel="24.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-20" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-23" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.92-24" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="62562c12caa8058004da3ef1d1828f28efd9118670d78232f1d0e9d50672fd92" name="perl-BSD-Resource" arch="x86_64">
  <version epoch="0" ver="1.2911" rel="26.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-21" date="1674302400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-22" date="1689163200">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.2911-26" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="17b05f1a020ea2aeb4007a5ef47000110e08844829d601e2e88a020aae41e51f" name="perl-BerkeleyDB" arch="x86_64">
  <version epoch="0" ver="0.67" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.65-9" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-1" date="1728907200">- Update to 0.66
  - Bundled Test::More failed with perl 5.41.x (GH#12)
  - Possible precedence problem between ! and string eq (GH#13)
  - Silence clang warnings (GH#10)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-3" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.67-1" date="1770033600">- Update to 0.67 (no functional changes)</changelog>
</package>
<package pkgid="9098bad6159edb443224a454848a5a9c2370fa1c4e8434ba61fb41721ea4252b" name="perl-CPAN-Changes" arch="noarch">
  <version epoch="0" ver="0.500005" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500002-1" date="1698321600">- Update to 0.500002
  - Full rewrite
    - The new version can parse nested entries to an arbitrary depth, rather
      than just groups
    - It can parse many more formats, and can format the outputs more flexibly;
      this means it can better handle the change logs that actually exist on
      CPAN
  - Parsed releases keep their original order
  - Pass given ChangeLog filename for --check
- Package LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500003-1" date="1708689600">- Update to 0.500003
  - Fix calling -&gt;name on an unnamed group
  - Fix -&gt;set_changes call on groups</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500004-1" date="1714737600">- Update to 0.500004
  - Fix tests on Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.500005-1" date="1744977600">- Update to 0.500005
  - Fix Test::CPAN::Changes on perl 5.10 without upgrading version.pm
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="ae4b9b080da3c2a5204173be87190c64ee06c2dc0e91fd1aa09e73d826e4fca2" name="perl-CPAN-DistnameInfo" arch="noarch">
  <version epoch="0" ver="0.12" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-27" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b3258c67ed79c35fd90c72ce6f76ae4e198172b2ff2495f1084d0798ac2344e2" name="perl-CPAN-Meta" arch="noarch">
  <version epoch="0" ver="2.150013" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150011-1" date="1769169600">- Update to 2.150011 (rhbz#2432163)
  - Improved example of testing a minimum prerequisite version of a module
  - Remove some code meant to handle running on pre-v5.8 perl, even though v5.8
    was already a requirement
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150012-1" date="1769428800">- Update to 2.150012 (rhbz#2432714)
  - Distribution metadata update
- Add workaround for test issues with CPAN::Meta::Requirements ≥ 2.144
  https://github.com/Perl-Toolchain-Gang/CPAN-Meta/issues/145</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.150013-1" date="1771675200">- Update to 2.150013 (rhbz#2441425)
  - Fix an incompatibility with newer CPAN::Meta::Requirements (GH#145, GH#147)</changelog>
</package>
<package pkgid="aeb648b18f219c97b07e213985f6a28ae142b38f48964736e51c713e28025f18" name="perl-CPAN-Meta-Check" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1672747200">- Update to 0.015
  - Drop Test::Deep prereq
- Use SPDX-format license tag
- Add hack to work around test issue with Scalar::Util 1.50
  (CPAN RT#145766)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1672747201">- Update to 0.017
  - Use Module::Metadata for more accurate testing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-2" date="1689422400">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1689940800">- Update to 0.018
  - Fix version requirement for CPAN::Meta::Prereqs
  - Move issue tracker to GitHub</changelog>
</package>
<package pkgid="d910b598f3bb9cd1358c44afa8aeca7741601fdd7380eac4780f697de5d04e8e" name="perl-CPAN-Meta-Requirements" arch="noarch">
  <version epoch="0" ver="2.145" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.144-1" date="1769169600">- Update to 2.144 (rhbz#2432229)
  - Remove code meant to cope with running on v5.8, when v5.10 is the minimum
    required perl
  - Normalize away "&gt;= 0" in compount version requirements; it's meaningless
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.145-1" date="1769860800">- Update to 2.145 (rhbz#2435673)
  - Correct "normalization of 0" code to work correctly with vstrings (GH#46)</changelog>
</package>
<package pkgid="e000178bb4ac509be1ba7a49707faa4fe0b5bc2360731f44f40868bde1dd5420" name="perl-CPAN-Meta-YAML" arch="noarch">
  <version epoch="0" ver="0.020" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-491" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.019-1" date="1734350400">- Update to 0.19
  - Generated from ETHER/YAML-Tiny-1.75.tar.gz
- Use author-independent source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.020-1" date="1734436800">- Update to 0.20
  - Generated from ETHER/YAML-Tiny-1.76.tar.gz</changelog>
</package>
<package pkgid="d705a9bbe648d230b6d0db4d417da5d5823f64a99409ec35645623cd80644ca3" name="perl-CPAN-Requirements-Dynamic" arch="noarch">
  <version epoch="0" ver="0.003" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002-1" date="1744027200">- Update to 0.002
  - Remove unnecessary conditions
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-1" date="1783857600">- Update to 0.003
  - Avoid undefinedness warning in config_defined</changelog>
</package>
<package pkgid="2097cb966a84927fa7a52d29ca06a31750e7750accc14caaa8f4da21c6fafead" name="perl-Canary-Stability" arch="noarch">
  <version epoch="0" ver="2013" rel="15.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2013-15" date="1689076800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="05fef387ed1d5a2ce14327581688486ede5b803956753cdbec77bc4bd6c716d9" name="perl-Capture-Tiny" arch="noarch">
  <version epoch="0" ver="0.50" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-16" date="1689422400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1734696000">- Update to 0.50
  - Stringify '$]' for far future compatibility
  - Fixed docs about custom files for capture</changelog>
</package>
<package pkgid="6d40e552f9c18da4c5f5ca8e5e03c85be1a146c2184a65ef9aaad0ad248712aa" name="perl-Carp-Clan" arch="noarch">
  <version epoch="0" ver="6.08" rel="14.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.08-14" date="1689422400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4d44d4bcc4b85fdc7335c048af9d3ca1336e6e01248e3e52e2e3d104fc77f93f" name="perl-Carp-Fix-1_25" arch="noarch">
  <version epoch="0" ver="1.000001" rel="30.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000001-30" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="0b255310c695fe37b9e70382b34b9b356c6b8f79fd2fbc12af4343f0e8f938fc" name="perl-Child" arch="noarch">
  <version epoch="0" ver="0.013" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-21" date="1678363200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="10693c0aefa6f0426ee2da69e4f3223c2e6b018232d91bd32bd3e2729ae84566" name="perl-Class-Accessor" arch="noarch">
  <version epoch="0" ver="0.51" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-17" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="eecfb2e11c05846781e078097b8939d319914b11271f792ed59a4164bfa4452a" name="perl-Class-C3" arch="noarch">
  <version epoch="0" ver="0.35" rel="10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.35-10" date="1678449600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="ad596d57fd2196cd2a8e86bc11f5d54e0c1d7212614a9d3eff1fe9c434bc7f13" name="perl-Class-C3-XS" arch="x86_64">
  <version epoch="0" ver="0.15" rel="15.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-10" date="1678449600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-11" date="1689163200">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-15" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="926b32b94bb0f39bfcf5eddc2c70b03743f101b6fe7325ed9e14037c3c5cc281" name="perl-Class-Data-Inheritable" arch="noarch">
  <version epoch="0" ver="0.10" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-5" date="1678449600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-1" date="1729771200">- Update to 0.10
  - Don't use vars, use our</changelog>
</package>
<package pkgid="c32cd761771ff65ea0c86d5a4a231f149085f1ebb48de27072e8f42311c4cf09" name="perl-Class-Factory-Util" arch="noarch">
  <version epoch="0" ver="1.7" rel="43.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-43" date="1678449600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="ab05fcd874af651c6c56d924fb053d4236aefb70cea99969669f8af7d686e0bc" name="perl-Class-Inspector" arch="noarch">
  <version epoch="0" ver="1.36" rel="13.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-13" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c84548c6cd274bfc1654d7d28a6668c10bda6cd1e64a89cd90f25cae095d6858" name="perl-Class-Load" arch="noarch">
  <version epoch="0" ver="0.25" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-22" date="1678449600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-25" date="1718366400">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="a0baa6b72d49676b3ebbf712a3163d552962145bf7089b9b28fa4e061aba466d" name="perl-Class-Load-XS" arch="x86_64">
  <version epoch="0" ver="0.10" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-20" date="1678449600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-21" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-25" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="228f67bb331af306a33fc77fcacc8d2620340721892f0b1a85b993d74a62ab50" name="perl-Class-Method-Modifiers" arch="noarch">
  <version epoch="0" ver="2.15" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.14-1" date="1673956800">- Update to 2.14
  - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.15-1" date="1678104000">- Update to 2.15
  - Localize $SIG{__DIE__} before calling eval (CPAN RT#146848)</changelog>
</package>
<package pkgid="4d21545fb51f8c9986f664c94ba324649a55665ab8998dc185efe65abcd5cead" name="perl-Class-Singleton" arch="noarch">
  <version epoch="0" ver="1.6" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.6-8" date="1674216000">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64</changelog>
</package>
<package pkgid="d15990d864a0b350f0e1e8ac823d796ca1ae9503b62265315ce344149aeeaa14" name="perl-Class-Tiny" arch="noarch">
  <version epoch="0" ver="1.008" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-8" date="1689422400">- Use SPDX-format license tag
- Drop support for building with old perls needing Devel::GlobalDestruction
- Use %license unconditionally</changelog>
</package>
<package pkgid="d6e14ba02dc7c7d61ba5066c39fec0e1a98bfbd292155595a224c06e88c622b3" name="perl-Class-XSAccessor" arch="x86_64">
  <version epoch="0" ver="1.19" rel="37.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-30" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-35" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-36" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-37" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="b016452f58b9db17778b4545fd95b2bb10d3955f7c6b7e2e0a40761dfb0253a9" name="perl-Clone" arch="x86_64">
  <version epoch="0" ver="0.50" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.47-1" date="1724068800">- Update to 0.47
  - Stop using quote as package separator</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.47-3" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-1" date="1772539200">- Update to 0.48
  - Performance: Optimize hot paths in Clone.xs
  - Fix: Replace subtest with SKIP/bare blocks to avoid Test2 warnings
  - Fix: Don't require MGf_DUP flag for ext magic duplication
  - Fix: Lower MAX_DEPTH to 4000 to prevent SEGV on CPAN smokers
  - Fix t/10-deep_recursion.t for Windows
  - Fix C89 declaration-after-statement violations in Clone.xs
  - Fix deep recursion stack overflow on Windows
  - Fix cloning of Math::BigInt::GMP objects (GH#16)
  - Fix cloning of threads::shared data structures (GH#18)
  - Add thread safety test for Class::DBI-like patterns (GH#14)
  - Add comprehensive documentation with examples and limitations
  - Improve README.md structure and installation instructions
  - Add DBI + DBD::SQLite as recommended test dependencies
  - Fix weakened reference cloning via deferred weakening (GH#15)
  - Fix memory leak when cloning non-existent hash values (GH#42)
  - Fix segfault when cloning DBI database handles (GH#27)
  - Rewrite t/09-circular.t to fix SEGV on CPAN Testers (GH#54)
  - Replace static recursion_depth with stack parameter
  - Fix C++ style comments in Clone.xs for C89 portability
  - Fix memory leak in Clone.xs (GH#42)
  - Allow a MAX_DEPTH recursion of 32,000 calls (GH#19 aka CPAN RT#97525)
  - Rename tests with more readable names
  - Remove TODO from CoW test</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1774526400">- Update to 0.49
  - Try to exclude macOS extended attributes from dist tarball
  - Fix: Suppress DBI STDERR noise in t/13-io-handle.t (GH#82)
  - Fix: Skip DBI fork tests on Windows
  - Fix: Remove spurious warn output in t/03-scalar.t
  - Add AI_POLICY.md documenting AI-assisted workflow</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1774699200">- Update to 0.50
  - Fix: Deep-copy HVs past MAX_DEPTH instead of aliasing (GH#93)
  - Fix: Strip macOS xattrs from dist directory before packaging
  - Clean-up: Remove unreachable break and empty magic_ref if-body in Clone.xs
  - Docs: Update MAX_DEPTH limits to reflect actual platform values
  - Docs: Add SECURITY.md policy for vulnerability reporting
  - Prefer using gtar in Makefile.PL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-2" date="1784808000">- Don't run optional tests when bootstrapping</changelog>
</package>
<package pkgid="0069dca84d6384948fd655167ab648d9d7b5bef32f817f1579e41f8a8b778146" name="perl-Compress-Raw-Bzip2" arch="x86_64">
  <version epoch="0" ver="2.218" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.211-1" date="1712491200">- Update to 2.211 (no changes, rhbz#2273784)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no changes, rhbz#2277505)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-511" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213
  - Silence unused variable warnings</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-519" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Development workflow updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435735)
  - No functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1772971200">- Update to 2.218 (rhbz#2445591)
  - Add SECURITY.md (GH#18)
  - Fix POD typo</changelog>
</package>
<package pkgid="2e0441293d52b1bea09e1d7e5cc8b6fd8df0a614e1d8601b1253b5b9ad704647" name="perl-Compress-Raw-Lzma" arch="x86_64">
  <version epoch="0" ver="2.221" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-2" date="1727956800">- Rebuild against xz 5.6.3</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-4" date="1743249600">- Rebuild against xz 5.8.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-5" date="1743768000">- Rebuild against xz 5.8.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-6" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Development workflow updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-2" date="1767787200">- Rebuild against xz 5.8.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217
  - Test updates, no functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1772366400">- Update to 2.219
  - Add PERL_UNUSED_DECL for trace to silence clang warning
  - Fix indentation in Lzma.xs that triggers a clang warning
  - Remove vestigial references to Pod::Markdown (GH#14)
  - Fix POD typo
  - Document that flush returns LZMA_STREAM_END on success, rather than LZMA_OK
    (GH#16)
  - Remove unused constants (GH#17)
  - Documentation improvements (GH#15)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.220-1" date="1772971200">- Update to 2.220
  - Remove obsolete TODO comment</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.221-1" date="1772971201">- Update to 2.221
  - Add SECURITY.md</changelog>
</package>
<package pkgid="51188d2c9abed592c264e056ea8db9b0e783f33e06e323f8ee58a87b955dbbfc" name="perl-Compress-Raw-Zlib" arch="x86_64">
  <version epoch="0" ver="2.222" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no changes, rhbz#2277504)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-511" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-519" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - get_Bufsize is correct, but the documentation says get_BufSize (GH#34)
  - Development workflow updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435736)
  - No functional changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1770120000">- Update to 2.218 (rhbz#2436314)
  - Fix for regression of GH#34</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1771934400">- Update to 2.219 (rhbz#2441964)
  - Update bundled zlib to 1.3.2</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.221-1" date="1772280000">- Update to 2.221 (rhbz#2443301)
  - zlib 1.3.2: Update references to zlib 1.3.1 to use zlib 1.3.2
  - zlib 1.3.2: Add "Perl_crz" prefix to "z_errmsg" (GH#32)
  - Fix POD typo
  - Version number wrong in 2.220 Changes file (GH#38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.222-1" date="1772971200">- Update to 2.222 (rhbz#2445592)
  - Add SECURITY.md (GH#40)
  - Fix POD typos</changelog>
</package>
<package pkgid="932f40bb09fde752884d80bb44b9dcb318440da31cbe48d80557189fa03f2423" name="perl-Config-Tiny" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1641297600">- Update to 2.28
  - Replace both uses of bareword filehandles with 'my' variables
  - Modernize Makefile.PL
  - Make corresponding patches where appropriate to Tiny.pm and t/02.main.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-6" date="1678622400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1680696000">- Update to 2.29
  - Edit to remove Test::Pod from TEST_REQUIRES in Makefile.PL, again
  - Update version number in t/02.main.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1697198400">- Update to 2.30
  - Add support for an array syntax for cases where you wish to assign an array
    of values to a key
    - See the new POD section called ARRAY SYNTAX
    - See also the updated question in the FAQ: What happens if a key is
      repeated?
    - See also the sample code in the Synopsis, in t/02.main.t and in
      t/test.conf
    - In each case, search for the word greetings to find the new code samples</changelog>
</package>
<package pkgid="b7401882994667e0d8ee3301d769d361b1b825facfff7c3115078917d91baf0f" name="perl-ConfigReader-Simple" arch="noarch">
  <version epoch="0" ver="1.29.8" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.5-2" date="1689508800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.6-1" date="1706011200">- Update to 1.296
  - Refresh distro, update email address, update repo URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.7-1" date="1736078400">- Update to 1.297
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29.8-1" date="1744632000">- Update to 1.298
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="e2d2e97eccfa36d987729bbaee0786178b1b22f34685ee1e180f37562028112f" name="perl-Const-Fast" arch="noarch">
  <version epoch="0" ver="0.014" rel="29.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-29" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="df776e2dd1363d60e42b9eef68b0dcb0e54a48635d973ac5970f54260057e323" name="perl-Convert-BinHex" arch="noarch">
  <version epoch="0" ver="1.125" rel="24.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.125-24" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for ancient distributions with rpm &lt; 4.9</changelog>
</package>
<package pkgid="50dfc1b154c9748450026a77052826f0fbfca93c5993dc23aabd7465cc1067df" name="perl-Convert-TNEF" arch="noarch">
  <version epoch="0" ver="0.18" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-27" date="1674216000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="488e3a995fa8aea2fa85e331fd5d60f1408746ae5c0a03af88b63ad461524a7e" name="perl-Convert-UUlib" arch="x86_64">
  <version epoch="4" ver="1.8" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-7" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-13" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4:1.8-16" date="1737633600">- Fix for C23 mode (rhbz#2341023)</changelog>
</package>
<package pkgid="be9587c573fc1644101a19c65da54b52d46066cff8d57202213cd5bf113a0b98" name="perl-Coro" arch="x86_64">
  <version epoch="0" ver="6.570" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-7" date="1676894400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-13" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-17" date="1714737600">- BR: valgrind-devel rather than /usr/include/valgrind/valgrind.h</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-18" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.570-21" date="1737720000">- Fix for compiling in C23 mode (CPAN RT#158609, rhbz#2341024)</changelog>
</package>
<package pkgid="939e5e7ff0dfab8ade7c29aaab2a25c09c5ecc697999ef5f46f99cbe165370f4" name="perl-Cpanel-JSON-XS" arch="x86_64">
  <version epoch="0" ver="4.43" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.39-1" date="1734091200">- Update to 4.39
  - Fix Windows -Dusequadmath (GH#229, GH#235)
  - Fix inconsistent behavior between decoding escaped and unescaped
    surrogates, and escaped non-characters vs. non-escaped non-characters; now
    aligned to JSON::PP (GH#227, GH#233)
  - Add type_all_string tests (GH#236)
  - Silence UV to char cast warnings (GH#232)
  - Fix MSVC preprocessor errors (GH#232)
  - Fix -Wformat warnings on Windows (GH#228)
  - Clarify BigInt decoding (GH#226)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.39-3" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.40-1" date="1757419200">- Update to 4.40
  - Fix overflow with overlong numbers, fuzzing only (CVE-2025-40929)
  - Detect more malformed numbers, with two decimal points
  - Pin Github actions to latest @v via pinact run -u</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.41-1" date="1779969600">- Update to 4.41
  - Fix BOM-shift PV-corruption SIGABRT (CVE-2026-9516)
  - Fix dupkeys_as_arrayref type confusion (CVE-2026-9334)
  - Fix incr_parse single-quote string delimiter (GH#245)
  - Fix a one-byte out-of-bounds heap read reachable via allow_barekey on
    truncated input (GH#244)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.42-1" date="1780833600">- Update to 4.42
  - Ensure encode with a type spec hashref does not change the hashref argument
    (GH#240)
  - Fix -e docs: "written" → "read" (GH#239)
  - Fix Boolean eq overload matching undef (GH#207); Cpanel::JSON::XS::Boolean
    overloaded eq would match undef as equal to false because undef stringifies
    to "" - added defined() guard
  - Fix error messages showing overloaded stringification for blessed objects
    (GH#191); error messages now use ClassName=TYPE(addr) format, bypassing any
    "" overload
  - Fix type_all_string overriding allow_blessed/convert_blessed (GH#175); with
    type_all_string + allow_blessed, blessed objects are now encoded as null
    (not stringified as HASH address)
  - Fix infinite recursion when encode is called from a "" overload (GH#128);
    the recursion guard temporarily clears convert_blessed and allow_stringify
    flags on the JSON object before calling the overload, preventing re-entrant
    encode loops
  - Fix $obj-&gt;new creating a broken object (GH#93); when new() is called on an
    existing object (e.g. $json-&gt;new-&gt;new), the class name is now extracted
    from the object's stash rather than using the stringified reference
  - Change allow_nonref default to true (GH#241, matching JSON::PP and
    JSON::XS 4.0+ and the insecure RFC 7159); encode and decode now accept
    non-reference values by default; decode_json() with an explicit 0/1 second
    argument still works; allow_nonref(0) to disable scalars-only for secure
    JSON
  - Fix minor t/12_blessed.t typo
  - Fix GH#112: encode large whole-number NV values without .0 on 32-bit Perl
    (values exceeding UV_MAX that Perl stores as float)
  - Fix GH#197: prefer IOK over pNOK when encoding values where IV is accurate
    but NV is imprecise (SvNOK not set)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.43-1" date="1784462400">- Update to 4.43
  - Fix canonical sort: Compare by UTF-16 code units per RFC 8785 (GH#248)
  - Fix canonical sort on Perl 5.8-5.18: utf16_cmp now always attempts UTF-8
    decoding instead of checking SvUTF8 flag, since older Perls may store valid
    UTF-8 hash keys without the flag set
  - Fix quadmath encode dropping ".0" for large floats (GH #246)
    - The .0 guard condition that suppressed appending for NV values &gt; UV_MAX
      was incorrect on high-precision FP (quadmath, 128-bit long double on
      arm64) where %g uses fixed-point notation for values like 1.01e30
    - Guarded with #if NV_DIG &lt; 31 to skip only on double/80-bit-ld where %g
      naturally uses %e for large values</changelog>
</package>
<package pkgid="b70d5284f71513a9f42f4a2ebc95a620ece4b2c75b8123c979472af567800020" name="perl-Crypt-Cracklib" arch="x86_64">
  <version epoch="0" ver="1.7" rel="43.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-38" date="1678622400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-39" date="1689163200">- Perl 5.38 rebuild
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-43" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="5c448d0d33fe7a389ab011af0fc9656d92aa5906dabe9d8b65f3284942c3d488" name="perl-Crypt-PBKDF2" arch="noarch">
  <version epoch="0" ver="0.261630" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.161520-23" date="1752148800">- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.261630-1" date="1781265600">- Update to 0.261630
  - Change the default hash algorithm to HMAC-SHA256, and increase the default
    number of iterations to 600,000, in line with current OWASP recommendations
    (CVE-2026-9641)
  - Generate salts using Crypt::URandom (a strong system RNG) instead of perl's
    builtin rand(), which is not cryptographically secure (CVE-2026-9638)
  - Use a constant-time comparison in 'validate' to avoid timing attacks
    (CVE-2017-20240)
- Switch to Module::Build::Tiny flow
- Package new README file</changelog>
</package>
<package pkgid="a88c85bd12bc8fdcc0e84037c7088c630d32444132769f51cb033d47d6a50239" name="perl-Crypt-SmbHash" arch="noarch">
  <version epoch="0" ver="0.12" rel="48.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-48" date="1678708800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4a8b3459846027001cbe0e2760332e7d57d7eaca31ff78ca9ae36ef50aa3a112" name="perl-Cwd-Guard" arch="noarch">
  <version epoch="0" ver="0.05" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-21" date="1673611200">- Drop perl(:MODULE_COMPAT*) dependency from Fedora 38 onwards
- Use SPDX-format license tag
- Use %license unconditionally
- Fix permissions verbosely</changelog>
</package>
<package pkgid="222603280dbb9c404995bd430edfb8e1f3efed95195865081fa8fbc08ba8598e" name="perl-DBD-CSV" arch="noarch">
  <version epoch="0" ver="0.64" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-1" date="1736769600">- Update to 0.62
  - It's 2025
  - Replace "use vars" with "our" (GH#9)
  - Specify recommended versions based on known CVE's
  - Update documentation for groff-1.24
  - Tested with perl-5.40.0
  - Add SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-5" date="1780920000">- Fix test failure with DBI 1.648 onwards
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-1" date="1782129600">- Update to 0.63 (rhbz#2491316)
  - It's 2026
  - New test for DBI-1.648 CVE fix
  - Minor typo in doc
  - Raise recommended versions for fixed CVE's</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-1" date="1784030400">- Update to 0.64 (rhbz#2499960)
  - Next version will require perl-5.12, following DBI</changelog>
</package>
<package pkgid="20d09b2101ff35914c046440ac9fdd01e851a8ea5bc1bb847c6c345c33c33b9e" name="perl-DBD-SQLite" arch="x86_64">
  <version epoch="0" ver="1.78" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.74-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-1" date="1729339200">- Update to 1.76
  - Upgraded bundled SQLite to 3.46.1
  - Fix for Windows quadmath builds (GH#115)
  - Omit load_extension if static build</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-3" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.78-1" date="1767355200">- Update to 1.78
  - Upgraded bundled SQLite to 3.51.1
  - Omit constants for newly-added C-array extension
  - SQLite 3.51.0 has two extensions (C-array and percentile) amalgamated but
    both are disabled by default
  - Make -&gt;column_info() also return generated columns (GH#119)
- Use bundled SQLite unless system SQLite is 3.31.0 or above (needed for
  generated columns)</changelog>
</package>
<package pkgid="4d5e8aa6443878550f069758907f55ec5e70bb0835fc63eaca840e82b5a00804" name="perl-DBI" arch="x86_64">
  <version epoch="0" ver="1.651" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-1" date="1736683200">- Update to 1.646
  - Remove "experimental" tag from statistics_info() (GH#134)
  - RT tickets moved to GitHub issues
  - All RT tickets now marked as resolved with reference to GitHub issue
  - Fix install issue (GH#168)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-1" date="1737374400">- Update to 1.647
  - Spellcheck
  - Fix Makefile rules for Changes (Windows case issue)
  - Another example to bind columns (GH#159)
  - Fix fetchall_arrayref for undefined NAME (GH#156)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-3" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-4" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-5" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.648-1" date="1780660800">- Update to 1.648
  - Correct sprintf usage for trace_msg (GH#132)
  - Add DBIXS_VERSION and DBIXS_RELEASE to dbixs_rev.h
  - Remove -Wbad-function-cast
  - Fix possible stack overflow (CVE-2026-9698)
  - Do not allow table source locations outside explicit given folders
  - DBD::Sponge PRECISION handling (GH#12)
  - Fix possible buffer overflow in preparse (CVE-2026-10879)
  - Skip mismatching .so's (GH#81)
  - Fix cast warning in dbi_get_state (GH#182)
- Assume rpm 4.12 or later is always available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.649-1" date="1782129600">- Update to 1.649
  - Extra Cwd::abs_path required for Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.650-1" date="1783512000">- Update to 1.650
  - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739)
  - Fix out-of-bounds read in preparse of SQL that starts with a comment
    (CVE-2026-14740)
  - Fix code injection via Profile DSN attribute or DBI_PROFILE variable
    (CVE-2026-14380)
  - Update dbipport.h to Devel::PPPort-3.73
  - Require Test::More 0.96 (tests will otherwise fail on pristine perl-5.12)
- Package CONTRIBUTING.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.651-1" date="1784030400">- Update to 1.651
  - Fix inverted comparisons for strings in DBI::SQL::Nano (CVE-2026-15043)
  - Document that IS NULL matches empty strings in DBI::SQL::Nano
  - Fix DBD::File to ensure that the table is not a symlink outside of f_dir
    (CVE-2026-15392)
  - Fix an out-of-bounds error when a statement handle has no fields but the
    source row is not empty (CVE-2026-60082)
  - Add an overridable upper bound $MAX_PATH_DEPTH for DBI::ProfileData
    (CVE-2026-60081)</changelog>
</package>
<package pkgid="a0a11201660400a3b73c372d3a7a2675a36ef264b3a814fd93b4c01f70da06e3" name="perl-DBI-Coro" arch="x86_64">
  <version epoch="0" ver="1.651" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-1" date="1736683200">- Update to 1.646
  - Remove "experimental" tag from statistics_info() (GH#134)
  - RT tickets moved to GitHub issues
  - All RT tickets now marked as resolved with reference to GitHub issue
  - Fix install issue (GH#168)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.646-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-1" date="1737374400">- Update to 1.647
  - Spellcheck
  - Fix Makefile rules for Changes (Windows case issue)
  - Another example to bind columns (GH#159)
  - Fix fetchall_arrayref for undefined NAME (GH#156)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-3" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-4" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.647-5" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.648-1" date="1780660800">- Update to 1.648
  - Correct sprintf usage for trace_msg (GH#132)
  - Add DBIXS_VERSION and DBIXS_RELEASE to dbixs_rev.h
  - Remove -Wbad-function-cast
  - Fix possible stack overflow (CVE-2026-9698)
  - Do not allow table source locations outside explicit given folders
  - DBD::Sponge PRECISION handling (GH#12)
  - Fix possible buffer overflow in preparse (CVE-2026-10879)
  - Skip mismatching .so's (GH#81)
  - Fix cast warning in dbi_get_state (GH#182)
- Assume rpm 4.12 or later is always available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.649-1" date="1782129600">- Update to 1.649
  - Extra Cwd::abs_path required for Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.650-1" date="1783512000">- Update to 1.650
  - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739)
  - Fix out-of-bounds read in preparse of SQL that starts with a comment
    (CVE-2026-14740)
  - Fix code injection via Profile DSN attribute or DBI_PROFILE variable
    (CVE-2026-14380)
  - Update dbipport.h to Devel::PPPort-3.73
  - Require Test::More 0.96 (tests will otherwise fail on pristine perl-5.12)
- Package CONTRIBUTING.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.651-1" date="1784030400">- Update to 1.651
  - Fix inverted comparisons for strings in DBI::SQL::Nano (CVE-2026-15043)
  - Document that IS NULL matches empty strings in DBI::SQL::Nano
  - Fix DBD::File to ensure that the table is not a symlink outside of f_dir
    (CVE-2026-15392)
  - Fix an out-of-bounds error when a statement handle has no fields but the
    source row is not empty (CVE-2026-60082)
  - Add an overridable upper bound $MAX_PATH_DEPTH for DBI::ProfileData
    (CVE-2026-60081)</changelog>
</package>
<package pkgid="1467d5d90f03120385369957aab351d9434659afef1535b0ce6fa3ffc4038498" name="perl-DBM-Deep" arch="noarch">
  <version epoch="0" ver="2.0019" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0016-17" date="1678708800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0016-18" date="1684843200">- Remove use of ' as a package name separator (CPAN RT#148417)
  (fix for Perl 5.38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0017-1" date="1693742400">- Update to 2.0017 (rhbz#2236875)
  - Get rid of old perl4-style ' package separator and use :: instead for
    compatibility with perl 5.38 (CPAN RT#148417)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0018-1" date="1699531200">- Update to 2.0018 (rhbz#2248772)
  - Tiny documentation and metadata fixes to make sure people go to the correct
    issue tracker</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.0019-1" date="1699876800">- Update to 2.0019 (rhbz#2249377)
  - Improvement so that when you try to put too much data in you get a useful
    error, and don't corrupt the database</changelog>
</package>
<package pkgid="dcb2e4ef5308cf8d51e547117b968985e5866ac11771cadca0e9f2f8b71cf43c" name="perl-Data-Alias" arch="x86_64">
  <version epoch="0" ver="1.30" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-3" date="1752148800">- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1770120000">- Update to 1.29
  - Fix compatibility with perl 5.43.8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-1" date="1773316800">- Update to 1.30
  - Use isGV_with_GP_on when available (CPAN RT#173582)</changelog>
</package>
<package pkgid="ea5a0b3a11d051ca2a507b868fe80bb495eeee327128c0a2f7cd0fd5ce77c0f5" name="perl-Data-Binary" arch="noarch">
  <version epoch="0" ver="0.01" rel="14.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-14" date="1678795200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3056083e4218495c0e9c0ea60453f328396b36eac125ac988dfc42318b8b1399" name="perl-Data-Compare" arch="noarch">
  <version epoch="0" ver="1.29" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1678881600">- Update to 1.28
  - Bug fix: undef values in hashes were treated incorrectly: need to check
    for existence, not definedness before comparing (GH#21)
- Use SPDX-format license tag
- Use %license unconditionally
- Drop NOTES and README files as they provide nothing useful to users</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1682164800">- Update to 1.29
  - Skip taint-mode tests if perl was built without taint support</changelog>
</package>
<package pkgid="617fd3a0079f8dab9b35ee7b7e0f7bb8123d54c330ff178b29d2bf645340f6e7" name="perl-Data-Dump" arch="noarch">
  <version epoch="0" ver="1.25" rel="7.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-1" date="1624708800">- Update to 1.25
  - Strings like "NaN" are still strings
  - Update maintainer and repository information
  - New option $Data::Dump::LINEWIDTH controls when to perform a line break
    (default is 60)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-7" date="1677844800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9b8630668cec13fc1e8e49e6d46dc106284bdaeb8c4e640c65ff71383ea193f8" name="perl-Data-Dump-Streamer" arch="x86_64">
  <version epoch="0" ver="2.42" rel="6.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.41-1" date="1674820800">- Update to 2.41
  - Switch from JSON::XS to Cpanel::JSON::XS as an optional test prereq
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.42-1" date="1676980800">- Update to 2.42
  - Perltidy source to preferred format
  - Fixed issues serializing the global stash
  - Added test to detect if serializing the global stash breaks anything</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.42-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.42-6" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="f9e5f258f207903d5931a37a4863a22a191f3b0b2b1949096b743729d1b4b9c4" name="perl-Data-Dumper-Names" arch="noarch">
  <version epoch="0" ver="0.03" rel="42.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-42" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6317c080b0352203df561c0e01de8b0927e53c4529afcdbba6016b53c2dc14e3" name="perl-Data-Dumper-Perltidy" arch="noarch">
  <version epoch="0" ver="0.03" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-1" date="1784462400">- Initial RPM version</changelog>
</package>
<package pkgid="3c7a129245ffce588530a708490ea77a358294c930d14212c27330c782e30186" name="perl-Data-OptList" arch="noarch">
  <version epoch="0" ver="0.114" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-1" date="1624881600">- Update to 0.112
  - Update author contact info
  - Add perl version support to docs
  - Replace a "goto" deep in the guts with a sub call, for speed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.113-1" date="1672574400">- Update to 0.113
  - Update author contact info
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.114-1" date="1683460800">- Update to 0.114
  - Data::OptList now requires perl v5.12.0
  - Tests no longer add "-T" to shebang, so do not invoke taint mode
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="d3c8e263b9d26e423bc2ce300c8fa717c8b43de1c71cddfefe67b612f98093cf" name="perl-Data-Section" arch="noarch">
  <version epoch="0" ver="0.200008" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.200008-1" date="1672574400">- Update to 0.200008
  - Fix to some example code
  - update packaging and metadata
  - Minimum required Perl is now v5.12
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.200008-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="5bf075f20848172feb06bb13f0b7ff2a3b7fa0876e963b5f870e527d83fdf7ab" name="perl-Data-Section-Simple" arch="noarch">
  <version epoch="0" ver="0.07" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-27" date="1679054400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1b47127d0ed4b067299573312e7282a5bafa1a3ffe3eb8bf8d4af3ed95d0ff77" name="perl-Data-Tumbler" arch="noarch">
  <version epoch="0" ver="0.010" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-25" date="1674216000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="36257b348426c58167fce77f6d05895024e5e89687d48f0d02c5bc33dd8e43d9" name="perl-Data-UUID" arch="x86_64">
  <version epoch="0" ver="1.227" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-12" date="1689163200">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.226-14" date="1693742400">- Update license to SPDX format</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.227-1" date="1710849600">- Update to 1.227
  - New maintainer, GTERMARS
  - Add basic GitHub Actions setup for testing
  - Typo corrections in POD
  - Eliminated use of state/node files in temp directory (CVE-2013-4184)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.227-2" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="8fc518f000e8bbf7245b80f67a8cd4114b6afbc315fb3d1f51860808165110e7" name="perl-Data-Visitor" arch="noarch">
  <version epoch="0" ver="0.32" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-8" date="1679486400">- Use SPDX-format license tag
- Use %license unconditionally
- Use Data::Alias unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.32-1" date="1682769600">- Update to 0.32
  - Removed an unnecessary use of Sub::Name (GH#1)</changelog>
</package>
<package pkgid="4e2f78785377a0c00e3e69533362b8463c5b0152240c523ba83df59206890bbe" name="perl-Date-Range" arch="noarch">
  <version epoch="0" ver="1.41" rel="6.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1" date="1624881600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-2" date="1628251200">- Make Date::Simple a run-time dependency, not just a test dependency (#1977229)
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-6" date="1679918400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="228c4e2434c6a3750a394e3fbe64058fe113b648461e2107e22c624348a7b812" name="perl-DateTime" arch="x86_64">
  <version epoch="2" ver="1.66" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.59-4.0.cf" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.63-1.0.cf" date="1698062400">- Update to 1.63
  - Switched to using the 'Perl_isfinite' function instead of trying to
    implement this ourselves in XS code; this should fix quadmath builds on
    Windows (GH#139)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-1.0.cf" date="1699272000">- Update to 1.65 (rhbz#2248104)
  - Fix builds on macOS with Perls before 5.22.0; this seems to have the same
    issue as Windows on older Perls (GH#141)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-5.0.cf" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.66-1.0.cf" date="1739966400">- Update to 1.66 (rhbz#2346459)
  - Require Specio 0.50
    - That release has a bug fix for validation of integer values
    - Without the fix, DateTime could accept non-integer values for things like
      nanoseconds (GH#145)
- Drop EL-7 support
  - Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="43a2ecf8a03551b0b16abf0e98a5d3397a9e3bd435d6fd5b107de1f75b174c9d" name="perl-DateTime-Calendar-Mayan" arch="noarch">
  <version epoch="0" ver="0.0601" rel="41.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-41" date="1679918400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="9e31ce30c83d8ad1941c6dba27d2b1ae69671f40288599d44194c9ffd219151f" name="perl-DateTime-Format-Builder" arch="noarch">
  <version epoch="1" ver="0.83" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.83-8" date="1673784000">- Use SPDX-format license tag
- Assume we are building with rpm ≥ 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="caef9bf8017dc705f08ea6c896be8beba3fdd3db48a3a7a5c423c5c5cd120b5a" name="perl-DateTime-Format-MySQL" arch="noarch">
  <version epoch="0" ver="0.08" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07.01-7" date="1677844800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1690891200">- Update to 0.08
  - Fix parsing microsecond &lt; 100,000 off DateTime object by zero-padding</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-2" date="1691150400">- Do not use rpmversion macro, which is a new builtin since rpm-4.18.92</changelog>
</package>
<package pkgid="f800a364c69290197721661d19ba70232787dcf68a3193930b4bda77b7e2272d" name="perl-DateTime-Format-Strptime" arch="noarch">
  <version epoch="1" ver="1.80" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.80-1" date="1765195200">- Update to 1.80 (rhbz#2419653)
  - Fix the parse_datetime docs to state that it returns either an empty list
    of undef when it cannot parse the given string, depending on the context;
    previously, the docs said it always returned undef, which is not true
    (GH#33)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="f533ef24c34796cae7f6a3071dd1e93290c55ea07f4625f0b93abd670bfabbc6" name="perl-DateTime-Locale" arch="noarch">
  <version epoch="0" ver="1.45" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.38-1.0.cf" date="1681646400">- Update to 1.38
  - Rebuilt all locale data with the data from CLDR 43.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1.0.cf" date="1685361600">- Update to 1.39
  - Fixed parsing of the 'el-polyton' locale code: this had the same issue as
    'be-tarask', which was fixed in 1.36; this is now fixed in such a way that
    similar language+variant codes will be parsed correctly in the future
    (GH#37)
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.40-1.0.cf" date="1699358400">- Update to 1.40
  - Rebuilt all locale data with the data from CLDR 44.0.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1.0.cf" date="1712404800">- Update to 1.41
  - Rebuilt all locale data with the data from CLDR 44.1.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1.0.cf" date="1713528000">- Update to 1.42
  - Rebuilt all locale data with the data from CLDR 45.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1.0.cf" date="1722168000">- Update to 1.43
  - Fixed the prefers_24_hour_time method, which was incorrectly returning
    false when the locale's time_format_short method contained a quote string
    with "h" or "K" in it, e.g. the fr-CA locale's time_format_short is
    "HH 'h' mm": the quoted 'h' caused this method to return false (GH#39)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1.0.cf" date="1730203200">- Update to 1.44
  - Rebuilt all locale data with the data from CLDR 46.0.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1.0.cf" date="1743508800">- Update to 1.45
  - Rebuilt all locale data with the data from CLDR 47.0.0
- Use %{make_build} and %{make_install}
- Drop support for building with List::Util &lt; 1.45</changelog>
</package>
<package pkgid="6e4a65e3531db160311d2760e2f60be2fb12b9017aefd023d575067650c5538f" name="perl-DateTime-TimeZone" arch="noarch">
  <version epoch="0" ver="2.69" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.63-1.0.cf" date="1725796800">- Update to 2.63
  - This release is based on version 2024b of the Olson database
  - This release does not include any changes to current or future zones, only
    historical changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.64-1.0.cf" date="1737115200">- Update to 2.64
  - This release is based on version 2025a of the Olson database
  - Contemporary changes for Paraguay</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.65-1.0.cf" date="1742990400">- Update to 2.65
  - This release is based on version 2025b of the Olson database
  - Contemporary changes for Chile</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.66-1.0.cf" date="1765454400">- Update to 2.66
  - This release is based on version 2025c of the Olson database
  - Only historical changes
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.67-1.0.cf" date="1772798400">- Update to 2.67
  - This release is based on version 2026a of the Olson database
  - Contemporary changes for Moldova</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.68-1.0.cf" date="1777291200">- Update to 2.68
  - This release is based on version 2026b of the Olson database
  - Contemporary changes for British Columbia, CA
- Temporarily disable POD spelling test due to dictionary issues in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.69-1.0.cf" date="1783598400">- Update to 2.69
  - This release is based on version 2026c of the Olson database
  - Contemporary changes for Alberta, CA and Morocco
- Package SECURITY.md</changelog>
</package>
<package pkgid="9d23c4779a492df8e8f766f302334b4222e4a21830404fd2de2f06262f8e6656" name="perl-Declare-Constraints-Simple" arch="noarch">
  <version epoch="0" ver="0.03" rel="51.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-51" date="1679486400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="6b3f7ad6f44c0c4674c864b128defa8ec3ada2160f323b39cec8096cc9150eae" name="perl-Devel-CallChecker" arch="x86_64">
  <version epoch="0" ver="0.009" rel="6.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1681214400">- Update to 0.009
  - Port to Perl 5.33.1, which defines a PERL_VERSION_GE() macro that clashes
    with the one this module previously had
  - Skip thread tests on some old versions of Perl (around 5.10.0) where a
    core bug makes thread creation violate an internal assertion and causes
    crashes
  - Skip thread tests on pre-5.8.9 Perls where a core bug makes thread creation
    corrupt memory
  - Skip thread tests on pre-5.8.3 Perls where a core bug makes thread
    completion break the global PL_sv_placeholder
  - Put whitespace around C string literals being pasted, for C++11
    compatibility
  - Avoid using C preprocessor directives inside a macro argument list (which
    is not valid)
  - In XS code in the test suite, when croaking, avoid using __FILE__ as part
    of a format string, in case it includes a metacharacter
  - Document the intended scope of this module's backporting effort
  - Fix a documentation wording glitch
  - In XS declare as const some data that never changes
  - Refactor thread tests
  - In XS, refactor Perl version comparisons
  - In XS, rename some macros for better style
  - In XS, better argument parenthesisation in some macros
  - Avoid some compiler warnings
  - In .gitignore, list temporary files produced by test XS compilation
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-6" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="9506d1882eca26ba4aa87455a50ab7ff9dc257995454593f4e66838c58508823" name="perl-Devel-Caller" arch="x86_64">
  <version epoch="0" ver="2.07" rel="6.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.06-30" date="1680004800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.07-1" date="1681214400">- Update to 2.07 (rhbz#2185832)
  - Fix compatibility with bleadperl (CPAN RT#144051)
  - Small Pod and Distribution clean-ups (GH#1)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.07-2" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.07-6" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="aba64e0fdc9a8472945e42ab88d342e39e421883c2b294477eceb3af65fe3b79" name="perl-Devel-CheckBin" arch="noarch">
  <version epoch="0" ver="0.04" rel="23.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-23" date="1680004800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="62f7bb1ade132da77432ad815a6577a7b8c1951297502a9904921f9aea3d7954" name="perl-Devel-CheckCompiler" arch="noarch">
  <version epoch="0" ver="0.07" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-21" date="1680004800">- Use SPDX-format license tag
- Fix permissions of installed files
- Use %license unconditionally</changelog>
</package>
<package pkgid="46a948ce9b7053fb26d1d07fb8bb697c8ced5f671d73c5591109aebaa4898fa8" name="perl-Devel-Cycle" arch="noarch">
  <version epoch="0" ver="1.12" rel="26.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-26" date="1680004800">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="de1de93e85b75c1ab330d541e381acb0cd30daa400565a5dcbfe800ef32a83c2" name="perl-Devel-EnforceEncapsulation" arch="noarch">
  <version epoch="0" ver="0.51" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-27" date="1680264000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="17809c4faf278b9caa37ef121faac9b61f65474ecd29b5b08b36a155a0a830f5" name="perl-Devel-GlobalDestruction" arch="noarch">
  <version epoch="0" ver="0.14" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-21" date="1680264000">- Use SPDX-format license tag
- Drop support for old Perl versions needing XS helper</changelog>
</package>
<package pkgid="913a238fb02a4b8e2ee5bf252936c6d387bc0d3b5d6b6d98ec6a3259dfba0492" name="perl-Devel-Hide" arch="noarch">
  <version epoch="0" ver="0.0016" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0016-1" date="1767441600">- Update to 0.0016
  - Drop support for perl 5.6 (deprecated since 0.0012)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="ef4c7641a0a26901f8a86ca4ce9baccf2abbf7f5a1cc1d8964fc6a0f77789601" name="perl-Devel-Leak" arch="x86_64">
  <version epoch="0" ver="0.03" rel="56.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-51" date="1680609600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-52" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-56" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="9d7c79185e72d4431efb0f2bee47f3d5d9f2a3ee141ac915274054ce01032c2f" name="perl-Devel-LexAlias" arch="x86_64">
  <version epoch="0" ver="0.05" rel="37.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-32" date="1678708800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-33" date="1689163200">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-37" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="bb52e61add761f17758006da0bb31498fea62fde5706482716336af0345b7e44" name="perl-Devel-OverloadInfo" arch="noarch">
  <version epoch="0" ver="0.008" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-1" date="1755000000">- Update to 0.008
  - Generate README.md in the repository
  - Move git repository to Codeberg
- Assume Sub::Util is always available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="5c4bd64aad5009ffba544abb04a4333825e2e279c3394ac1208cb5767664db42" name="perl-Devel-PartialDump" arch="noarch">
  <version epoch="0" ver="0.20" rel="18.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-18" date="1680609600">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="a5b4cac3a07310eeed1fe1811e7ae43e1970b003db94bd58c063d19d7d3ef759" name="perl-Devel-StackTrace" arch="noarch">
  <version epoch="1" ver="2.05" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.04-15" date="1689163200">- Use SPDX-format license tag
- Fix permissions verbosely
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.05-1" date="1704715200">- Update to 2.05
  - Added explicit boolean overloading for trace objects
    - Without this, Perl will use the object's string overloading and then
      check the truthiness of the returned string, which is a lot of extra work,
      which can produce significant slowdowns in some cases, as seen in
      https://github.com/plack/Plack/pull/697 (GH#23)</changelog>
</package>
<package pkgid="66a5ad22ae3d9f03c53a1d9160a1c156968f7545157209dc94b4828c87f6a480" name="perl-Devel-Symdump" arch="noarch">
  <version epoch="1" ver="2.18" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.18-25" date="1689163200">- Use SPDX-format license tag
- Drop support for building with Test::Harness &lt; 3.04</changelog>
</package>
<package pkgid="37727c2e1e928244cf21c1b489d6286cd7c61347cf035d09aa4555339a83bf65" name="perl-Digest-BubbleBabble" arch="noarch">
  <version epoch="0" ver="0.02" rel="36.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-36" date="1680696000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b7fedc9c059b04de80edabae6e3a0d7c31cdb2c848dd62bc0d10eaa4f3d26d99" name="perl-Digest-MD4" arch="x86_64">
  <version epoch="0" ver="1.9" rel="41.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-34" date="1680696000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-35" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-39" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9-41" date="1724155200">- Drop redundant build requirements libdb-devel and gdbm-devel</changelog>
</package>
<package pkgid="b6205e3c2d584411a4995e148a055dfed454a98b434e50102fb5891e7032fc4d" name="perl-Digest-SHA" arch="x86_64">
  <version epoch="1" ver="6.04" rel="511.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.03-1" date="1660046400">- Update to 6.03
  - Corrected addfile to report error when stdin is a directory
    (CPAN RT#143899)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.04-1" date="1677412800">- Update to 6.04
  - Modified SHA_INIT/sharewind to silence warnings from gcc 12
    (CPAN RT#146585)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.04-500" date="1689163200">- Perl 5.38 rebuild
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:6.04-511" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="b32ea5a1968d37a7aa8b1d1f7ec35b37c853d14e1c9a8023196399fd3c900ece" name="perl-Dir-Self" arch="noarch">
  <version epoch="0" ver="0.11" rel="29.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-24" date="1689508800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-28" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-29" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="3783107d9812bbc15fccd569c9be2a03ed112bb3a5e8f73eea4b7572aced3046" name="perl-Dist-CheckConflicts" arch="noarch">
  <version epoch="0" ver="0.11" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-27" date="1680696000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1e6d7ae0518b56a6d32fe422adff29f4f6df3418180bcb9614625bd0014e832b" name="perl-DynaLoader-Functions" arch="noarch">
  <version epoch="0" ver="0.004" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-1" date="1680868800">- Update to 0.004
  - Port test C code to Perl 5.33.1, which defines a PERL_VERSION_GE() macro
    that clashes with the one this code previously had
  - In test C code, avoid a compiler warning that arises on Perl 5.20
  - In test C code, rename some macros for better style
  - In test C code, better argument parenthesisation in a macro
- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b6abc6b796236f72e376b256f61bb0647f97551534973d3a3329b573f6be65b8" name="perl-EV" arch="x86_64">
  <version epoch="0" ver="4.37" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.34-4" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.34-7" date="1746619200">- Fix FTBFS with ExtUtils::ParseXS ≥ 3.57 (rhbz#2364628)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.36-1" date="1766750400">- Update to 4.36
  - Work around changes in xsubpp for Perl 5.42
- Add patch to remove unescaped quotes from typemap file (rhbz#2364628)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.37-1" date="1769083200">- Update to 4.37
  - Work around issues with different versions of ExtUtils::ParseXS</changelog>
</package>
<package pkgid="a2d22677fe5725a1c2094756818a56ed13eea20de59db59dcbd8295464c7f612" name="perl-Email-Address" arch="noarch">
  <version epoch="0" ver="1.913" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.913-1" date="1673352000">- Update to 1.913 (rhbz#2159569)
  - This version now requires Perl v5.12
  - Some small tweaks made to the code to take advantage of v5.12
  - Update distribution metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.913-2" date="1689508800">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="98138f886a1a778c9eb7b54e251d5163f2de18a51b7ddc556081395d1551e9ff" name="perl-Env-Sanctify" arch="noarch">
  <version epoch="0" ver="1.12" rel="28.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-28" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="428fd76cd340ccd6f7077826b737361de42d03dc1d3441cf05e3e41f5d304297" name="perl-Error" arch="noarch">
  <version epoch="1" ver="0.17030" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.17029-12" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.17030-1" date="1739880000">- Update to 0.17030 (rhbz#2346218)
  - Fix die/warn hooks for perl 5.41.9 changes (GH#4)</changelog>
</package>
<package pkgid="51b8cf20884f27987c63c53148ddf3e0e8520ef5ffe6f97483c7e4e29840a405" name="perl-Eval-Closure" arch="noarch">
  <version epoch="0" ver="0.14" rel="20.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-20" date="1680782400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e5459f9a5375271558797db27d58c1804f61c470fccb9b78266058e63ba5f423" name="perl-Event" arch="x86_64">
  <version epoch="0" ver="1.28" rel="12.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-7" date="1680868800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-8" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-12" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="873e3442e5c7d02484b7321c7af7fc12433652a17115dfe4cec26654f8605346" name="perl-Exception-Base" arch="noarch">
  <version epoch="1" ver="0.25.01" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-13" date="1680868800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-24" date="1689508800">- Fix FTBFS with Perl 5.38 (rhbz#2222742)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.25.01-25" date="1714737600">- Avoid use of %{rpmversion} macro, now an rpm built-in</changelog>
</package>
<package pkgid="93cffc1f12e38268684fbdd436cb1633b12b3f3cfb1c3ae8138ee46a6a71ddb5" name="perl-Exception-Class" arch="noarch">
  <version epoch="0" ver="1.45" rel="7.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1" date="1620043200">- Update to 1.45
  - The field names for an exception are now checked to ensure that they are
    valid Perl identifiers (GH#13)
- Package new CODE_OF_CONDUCT.md file
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-7" date="1680955200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="ccb6df3b960d3ee079eb74232a474bb3ccb88806b757527cabb93c86c925ff22" name="perl-Expect" arch="noarch">
  <version epoch="0" ver="1.38" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.35-20" date="1680955200">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-1" date="1708776000">- Update to 1.36
  - Made timeouts optional and added qr// regex support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1709899200">- Update to 1.37
  - Fix to timeout code</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.38-1" date="1710244800">- Update to 1.38
  - Fix to fix to timeout code</changelog>
</package>
<package pkgid="a58e0e20e4c995fc512995a8aa2b1c5faeb79f22acc76bc198edcca48fc051ca" name="perl-Exporter-Declare" arch="noarch">
  <version epoch="0" ver="0.114" rel="22.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.114-22" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="80f1261816aa025c268ca15c2781e4b1f617b6174af4f2ad31bd809be48ed2eb" name="perl-Exporter-Tiny" arch="noarch">
  <version epoch="0" ver="1.006003" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006002-8" date="1747656000">- Drop support for EOL distributions prior to F-28, EL-8:
  - Weak dependencies always available
  - Use %{make_build} and %{make_install}
- Don't pull in Lexical::Var on distributions with Perl 5.37.2 or later</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006003-1" date="1765195200">- Update to 1.006003
  Bug Fixes:
  - Support Perl versions &gt;= 10, in theory
  Documentation:
  - Restore documentation about exporting to hashes, which was accidentally
    removed
  - Update copyright dates</changelog>
</package>
<package pkgid="29236a0f07719241e68d58a9e2ced28436e22c8e84f2be5d109aa836d047eede" name="perl-ExtUtils-BuildRC" arch="noarch">
  <version epoch="0" ver="0.005" rel="6.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-6" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="aca6389b601356e7fa266ddebcb10269c44486bb831e38527f5d26c3f5c235c3" name="perl-ExtUtils-CBuilder" arch="noarch">
  <version epoch="1" ver="0.280238" rel="499.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.280238-499" date="1689508800">- Upgrade to 0.280238 as provided in perl-5.37.11
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="61a435f1ca259fd739fe2c75387b911bba7dca3e06888c9816a296ae2be3a8ac" name="perl-ExtUtils-Config" arch="noarch">
  <version epoch="0" ver="0.010" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-28" date="1680955200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-1" date="1714132800">- Update to 0.009
  - Add a but method
  - Add ExtUtils::Config::MakeMaker
- Release tests moved to xt/, stop running them</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-1" date="1723896000">- Update to 0.010
  - Fix regression in serialize method</changelog>
</package>
<package pkgid="05e012d82d746b1ca6cc955352c7a3f24788a98338fb42f1e18f728efa7ed5e7" name="perl-ExtUtils-Depends" arch="noarch">
  <version epoch="0" ver="0.8002" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8001-7" date="1680955200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.8002-1" date="1742385600">- Update to 0.8002 (rhbz#2353300)
  - Fix UNC path bug (CPAN RT#102436)
  - Fix get_makefile_vars losing path components if space-quoted and more than
    one dependency, which was breaking CPAN module "true" - dependent on two
    modules
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="7f6328f9137132ccb24a317d415ed0298883de6a3705f4d0e4cb29db6a15bcca" name="perl-ExtUtils-HasCompiler" arch="noarch">
  <version epoch="0" ver="0.025" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-1" date="1714392000">- Import from Fedora</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.025-1" date="1715083200">- Update to 0.025
  - Skip static test on dynamic perls
- BR: gcc and perl-devel for tests</changelog>
</package>
<package pkgid="bfadfb1344a7c05f4392838e83916444235c58f696f834597f2499b82c8897e8" name="perl-ExtUtils-Helpers" arch="noarch">
  <version epoch="0" ver="0.028" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.026-22" date="1681128000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.027-1" date="1718798400">- Update to 0.027
  - Revert "Make split_like_shell always unixy"</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.028-1" date="1725364800">- Update to 0.028
  - Add ext argument to man1_pagename and man3_pagename</changelog>
</package>
<package pkgid="a0ae1ca12b22b286fcb7af833b7416c4a906286060f1cd474a055dc709de297a" name="perl-ExtUtils-InstallPaths" arch="noarch">
  <version epoch="0" ver="0.015" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-1" date="1714132800">- Update to 0.013
  - Try to install any installable paths</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1725969600">- Update to 0.014
  - Drop 5.006 support
  - Compensate for perls without installsitescript</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1758974400">- Update to 0.015
  - Restore installing non-standard types
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="085a2193701e34515f0ff28b7f6c8a084a6c560656a0ab2a9c556e981254af8e" name="perl-ExtUtils-MakeMaker-CPANfile" arch="noarch">
  <version epoch="0" ver="0.11" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-1" date="1784462400">- Update to 0.10
  - Merge prereqs using CPAN::Meta::Requirements (GH#1)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-1" date="1784721600">- Update to 0.11
  - Include PID in temp dir name for testing (GH#4)</changelog>
</package>
<package pkgid="3c2bb88143177405a6c8c7d6b9d83ab6062cdb38587f77ca6845430df9442d8d" name="perl-ExtUtils-ParseXS" arch="noarch">
  <version epoch="1" ver="3.64" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.57-1" date="1746187200">- Update to 3.57
  - Rewrite half of the internals to facilitate refcounted stack later on
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.58-1" date="1753099200">- Update to 3.58
  - ExtUtils::ParseXS has been extensively restructured internally; most of
    these changes shouldn't be visible externally, but might affect XS code
    that was using invalid or unsupported syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.59-1" date="1757073600">- Update to 3.59
  - Throw an exception when combining the length operator with a typemap other
    than T_PV</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.60-1" date="1759060800">- Update to 3.60
  - Fix INTERFACE for C23
  - Support perl package names in INTERFACE
  - Clean up typemap file-finding code and change priority
  - Revert throwing an exception when combining the length operator with a
    typemap other than T_PV</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.61-1" date="1767960000">- Update to 3.61
  - Allow XS files with no XS again
    https://github.com/Perl/perl5/issues/24016</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.63-1" date="1775476800">- Update to 3.63
  - Allow 'length(foo)' to work with any 'foo' type that has 'SvPV_nolen()' or
    similar in its typemap, not just that it maps to T_PV
  - Use static, not STATIC
  - Rewrite perlxs.pod
  - Finish refactoring to use an Abstract Syntax Tree (AST) internally
  - Improve warning and error messages
  - Improve test coverage
  - Reorganise t/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.63-527" date="1784808000">- Perl 5.44 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.64-1" date="1785153600">- Update to 3.64
  - Respect output arguments in INTERFACES
  - PERL_UNUSED_VAR() the CV declared when an ALIAS or XSINTERFACE_FUNC_SET has
    been seen</changelog>
</package>
<package pkgid="155a101c061e9191fa801d36d84cba3df355b9d88d662f9d3b399d3ad2cc9c6e" name="perl-ExtUtils-PkgConfig" arch="noarch">
  <version epoch="0" ver="1.16" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-21" date="1681300800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e8f9b83edcfe482773a6632866d0340764bc6a16fc8e6aa9e0a5464ce09daa2a" name="perl-Feature-Compat-Class" arch="noarch">
  <version epoch="0" ver="0.07" rel="3.fc42"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 0.06-1" date="1688472000">- Update to 0.06</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.06-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.06-3" date="1695643200">- Import from Fedora</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-1" date="1721044800">- Update to 0.07
  - Updated for Perl v5.40 to support the ':reader' field attribute and
    '__CLASS__' keyword
  - Use 'Object::Pad' v0.806 on older perls, in order to support field
    initialiser expressions that can see earlier fields</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-3" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="1e52cf8e7cff011f83fb75f065e8328a5aee3008f0f690cab404f025d8c10680" name="perl-Fennec" arch="noarch">
  <version epoch="0" ver="2.018" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.018-16" date="1681128000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="069a14a0bd7c4a1e21dbc3b32c887f1f74bd63d675462ca6c7a8656b678f3052" name="perl-Fennec-Lite" arch="noarch">
  <version epoch="0" ver="0.004" rel="29.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-29" date="1689508800">- Use SPDX-format license tag
- Fix permissions verbosely</changelog>
</package>
<package pkgid="d8cb592c1f9b2b02f23c02397cd1f5339fa829adea39bbb38e089ff94b952ba1" name="perl-File-Copy-Recursive-Reduced" arch="noarch">
  <version epoch="0" ver="0.008" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-17" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.007-1" date="1694865600">- Update to 0.007
  - Corrections in tests to better accommodate Windows path separators</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-1" date="1711368000">- Update to 0.008
  - Encoding directive added to POD
  - Corrections in test files to guard against CPANtesters who run tests with
    PERL_AUTHOR_TESTING turned on</changelog>
</package>
<package pkgid="fa6978ab6d49694709ed85cba306a86758bcf77c26fea283257f194c657d7852" name="perl-File-Find-Object" arch="noarch">
  <version epoch="0" ver="0.3.9" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.7-1" date="1672660800">- Update to 0.3.7
  - Fix test failures on Windows (GH#2)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.7-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.8-1" date="1690027200">- Update to 0.3.8
  - Fix use_ok() call (GH#3)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.3.9-1" date="1733918400">- Update to 0.3.9 (rhbz#2331637)
  - Avoid implicit symbol imports
    https://perl-begin.org/tutorials/bad-elements/#non_explicitly_imported_symbols
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
</package>
<package pkgid="a2864c6138636df63a03e742369cca0af495a3f4cfda108a9f847e68660eee2a" name="perl-File-Find-Object-Rule" arch="noarch">
  <version epoch="0" ver="0.0313" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0313-1" date="1630065600">- Update to 0.0313
  - Split File::TreeCreate off to its own distribution
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0313-5" date="1681300800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="35f69bf17195f106167179456635401846d5925bf1611e48aa748011495aaaf0" name="perl-File-Find-Rule" arch="noarch">
  <version epoch="0" ver="0.35" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.34-25" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.35-1" date="1749211200">- Update to 0.35
  - Use 3-argument version of open() to avoid arbitrary code execution
    vulnerability (GH#4, CVE-2011-10007)
- Use %{make_build} and $${make_install}</changelog>
</package>
<package pkgid="304647f7de4ba672d097c67240af3ccb7cb1ec3254e1a57bee36c0097b1b99e6" name="perl-File-Find-Rule-Perl" arch="noarch">
  <version epoch="0" ver="1.16" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-1" date="1648641600">- Update to 1.16
  - Fix test when run after 'make clean' (CPAN RT#142008)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-5" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="d87632605102bb0d368c4e1b6d055258e2a9d7e61acdee986e58cb1d4f11f252" name="perl-File-Find-Rule-VCS" arch="noarch">
  <version epoch="0" ver="1.09" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-1" date="1682769600">- Update to 1.09
  - Tooling updates
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="644c063c6491981e89d6b58aac2b40bcaf8f1b56087f194757bde5a9619fb02b" name="perl-File-HomeDir" arch="noarch">
  <version epoch="0" ver="1.006" rel="9.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.006-9" date="1685620800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="f142d94252876a52ee73a2a200ce735b09dc72e23eb11fea55556a9582c7c94e" name="perl-File-MMagic" arch="noarch">
  <version epoch="0" ver="1.30" rel="33.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-30" date="1678795200">- Use SPDX-compatible license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-33" date="1718193600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="41c9100568a9d3b5b555ccc7fabe0742d20ce9bf442897cec5ed0b710dce2e0b" name="perl-File-Remove" arch="noarch">
  <version epoch="0" ver="1.61" rel="4.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1655208000">- Update to 1.61
  - Symlinks were broken in Windows/msys
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-4" date="1689508800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c4d0c212e3d4ff447954eaff8bdb49af3bcde0fdc4cc535fc4e42351200e4ac1" name="perl-File-ShareDir" arch="noarch">
  <version epoch="0" ver="1.118" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.118-8" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="9590bd73f8d938567ebacdae96b764676f9f11042c0b196034e466bbbcbcc867" name="perl-File-ShareDir-Install" arch="noarch">
  <version epoch="0" ver="0.14" rel="3.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-1" date="1656676800">- Update to 0.14
  - Work around a build issue on Windows (CPAN RT#125571)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-3" date="1681473600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b34d24f3a092cd12740d40c2a79be3edc992eca256d921730f8b183443773212" name="perl-File-ShareDir-ProjectDistDir" arch="noarch">
  <version epoch="0" ver="1.000009" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000009-19" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c3a6ff22cf99eb8b096f3f459ffc48dc1aefcbb788ea2a3fb3f0adb55b884f4d" name="perl-File-Slurp" arch="noarch">
  <version epoch="0" ver="9999.32" rel="10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 9999.32-10" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b69c07551653cfc11292877e28ae7e3b94cccd018f04c4be3d971aee09ece09c" name="perl-File-Slurp-Tiny" arch="noarch">
  <version epoch="0" ver="0.004" rel="23.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-23" date="1681992000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="23041963e15aa765441d5e5808c522cbbf7df90d2b00cfc787e12e63a486efe6" name="perl-File-Slurper" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-1" date="1640779200">- Update to 0.013
  - Always split on newlines in read_lines</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1671364800">- Update to 0.014
  - Always return an empty file as an empty string
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="cf45d8947d48d7179a1fe1811dbc66a7d8773a4c14586296d6378dc61d0f9c90" name="perl-File-TreeCreate" arch="noarch">
  <version epoch="0" ver="0.0.1" rel="6.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0.1-1" date="1630065600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0.1-6" date="1681992000">- SPDX migration</changelog>
</package>
<package pkgid="5dd2c8eef8ab551fa0e181e90c7fcf68eaedfe3a0127e98f3b86d2f66806784e" name="perl-File-Which" arch="noarch">
  <version epoch="0" ver="1.27" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-8" date="1686312000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="efd8ac55a9e254f124fe474b219981afc4818ba48807000862629f82c584d055" name="perl-File-chdir" arch="noarch">
  <version epoch="0" ver="0.1011" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1011-21" date="1681819200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="63a0f77ddfe744e50025bd3458121f74ade3fd9311f114a7ec71196b77274460" name="perl-File-pushd" arch="noarch">
  <version epoch="0" ver="1.016" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.016-17" date="1681819200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="ea35a04589a95e4e9a618427502b5a9e7d39c01fd9b74915d7e3d2b1c27367d6" name="perl-FileHandle-Fmode" arch="x86_64">
  <version epoch="0" ver="0.15" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-23" date="1678708800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-24" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-28" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-1" date="1718798400">- Update to 0.15
  - Documentation improvements
  - Avoid win32_fmode() when perl is built by UCRT compiler, as UCRT changes
    struct _iobuf (affects MSWin32 only)
- Remove bogus exec permissions on source files</changelog>
</package>
<package pkgid="9cfe828eaa90969dbb42d067721e846fba3d0496ca16e1e3174ab156daf7154e" name="perl-FileHandle-Unget" arch="noarch">
  <version epoch="0" ver="0.1634" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1634-16" date="1682078400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="253d71c1fcf62544054bfb7f354e0ad714823a1d3d5b2e9824980dc073683c92" name="perl-Filter" arch="x86_64">
  <version epoch="2" ver="1.65" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.64-511" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.64-519" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.65-1" date="1757332800">- Update to 1.65
  - Documentation updates</changelog>
</package>
<package pkgid="58125115118b2a4caa60ca13316054cf24f18f9bc83a18b98b539796c5d40903" name="perl-Filter-Simple" arch="noarch">
  <version epoch="0" ver="0.94" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.94-2" date="1689595200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="400104fa2943109b7a45c94804705039b271b596b20c6b68b7f5d63ea9fab3de" name="perl-FreezeThaw" arch="noarch">
  <version epoch="0" ver="0.5001" rel="41.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5001-41" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f527be32548f9761c85aeb788cae45523f5277bd729795ef1d41247753ebb35f" name="perl-Function-Parameters" arch="x86_64">
  <version epoch="0" ver="2.2.6" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.4-5" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.4-6" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.5-1" date="1737288000">- Update to 2.002005 (rhbz#2338807)
  - When debugging (perl -d), skip over invisible (generated) parameter
    initialization
    code even if single-step mode is active
  - Move repository and bugtracker to https://codeberg.org/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.5-2" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.6-1" date="1755432000">- Update to 2.002006 (rhbz#2388952)
  - Fix a parse-time memory leak with undef or default initializers
    ('fun ($x = undef)' or 'fun ($ =)'); this leak mostly manifests as noise
    from memory checkers because non-leaked ops aren't freed anyway while perl
    is still running
  - Update bugtracker info in README</changelog>
</package>
<package pkgid="cf4851fcb94f22e2b6f1ad0156dbe357eb20a116f304425381a2d0ccd211f201" name="perl-Guard" arch="x86_64">
  <version epoch="0" ver="1.023" rel="31.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-26" date="1682078400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-27" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-31" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="f16fb6800b15c136f0b74ddd90eed558b438fcbdabdb296442445c9640fe84f0" name="perl-HTML-Lint" arch="noarch">
  <version epoch="0" ver="2.32" rel="20.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-15" date="1674475200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-16" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-18" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-19" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-20" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="36e13c1d8773bbce3580eef66081060159fe07c842d24b6205d8dcbb972a1eba" name="perl-HTML-SimpleLinkExtor" arch="noarch">
  <version epoch="0" ver="1.273" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.273-2" date="1689595200">- Use SPDX-format license tag
- Drop support for building with ExtUtils::MakeMaker &lt; 6.64
- Use %license unconditionally</changelog>
</package>
<package pkgid="b8a5788b02f8764aa86835b944dd46f153a38d99e7741c5bce997a2cb216682f" name="perl-HTTP-SimpleLinkChecker" arch="noarch">
  <version epoch="0" ver="1.16.8" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16.8-2" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="3de2a3c2115ce0d667814901157545bbd39c3628d16a20cb54874249d3f80648" name="perl-HTTP-Size" arch="noarch">
  <version epoch="0" ver="1.153" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.153-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="8ca9cffee6fae2607d0f248dfb97bc0f86b8e29bcc6e23b48c8339b69a92f7d3" name="perl-HTTP-Tiny" arch="noarch">
  <version epoch="0" ver="0.096" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.090-1" date="1731499200">- Update to 0.090
  - Find the certificate bundle via IO::Socket::SSL rather than implementing
    it in HTTP::Tiny
  - When encoding form data, given a hashref with an arrayref value, preserve
    the order of the values in the arrayref rather than sorting
  - Fix internal link to "TLS/SSL SUPPORT" section in POD
- Enable AUTOMATED_TESTING</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.092-1" date="1767009600">- Update to 0.092
  - Added keep_alive_timeout to force keepalive connections to be closed based
    on a timeout
  - Optional tests are always required when releasing
  - Always use TCP_NODELAY option
  - Fixed test incorrectly testing cookie jar interactions multiple times
  - Fixed perl version comparisons to work when not starting with 5
  - Fixed link to LIMITATIONS in documentation
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094-1" date="1779105600">- Update to 0.094
  - Fix to prevent invalid characters in all headers, and prevent header
    smuggling (CVE-2026-7010)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.096-1" date="1781697600">- Update to 0.096
  - Caller-supplied Authorization, Cookie and Proxy-Authorization headers are
    now stripped on cross-origin redirects by default; use
    allow_credentialed_redirects to opt out
  - Redirects are no longer automatically followed when going from https to
    http; use allow_downgrade to revert to the original behaviour
- Temporarily disable AUTOMATED_TESTING as badssl.com seems to be unavailable</changelog>
</package>
<package pkgid="90ce8c194c990acde48356b71bcb9c89b232690d171be0ae179696a3bda482b1" name="perl-Hash-FieldHash" arch="x86_64">
  <version epoch="0" ver="0.15" rel="28.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-23" date="1682078400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-24" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-28" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="7b25149c39acfe79799ec55420fc7f5ddd9d95157bd67aa8d6c7d15f22b20f69" name="perl-Hash-StoredIterator" arch="x86_64">
  <version epoch="0" ver="0.008" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-22" date="1682251200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-23" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-27" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="a69b258583ee23fa4ce67c8074ee3a3a65bbd855f07303b8dbad807598cf1350" name="perl-Hash-Util-FieldHash-Compat" arch="noarch">
  <version epoch="0" ver="0.11" rel="22.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-22" date="1682251200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="14232fa0884a270ae78d159c23b2fb84a06798210ed5b4c1aee67143f87893c2" name="perl-Hook-LexWrap" arch="noarch">
  <version epoch="0" ver="0.26" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-19" date="1682251200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="11b093370c84b91ae73e5e8236f7a98d51d695a16ebf9079dc7993ae2589809d" name="perl-IO-AIO" arch="x86_64">
  <version epoch="0" ver="4.81" rel="4.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-1" date="1680436800">- Update to 4.8
  - Remove long-obsolete "paths must be absolute" text in aio_open/stat
    descriptions
  - Another workaround for the low-quality musl libc
  - Test for umount separately, as it is more portable
  - Some low-quality posix attempts (openbsd, osx) declare the availability of
    fexecve() but then don't even bother to implement a stub
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-4" date="1702468800">- Fix use of incompatible pointer type in configure test for fexecve()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-6" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-1" date="1708516800">- Update to 4.81
  - Work around a bug in musl w.r.t. to O_SEARCH and use EIO_O_PATH instead,
    verifying the semantics against the subset of O_PATH and O_SEARCH
  - aio_copy now tries to preallocate the destination file
  - fexecve configure test used the wrong pointer type</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-2" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-3" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-4" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="958eea4e9f600f66a6826b211571537862987df409a30a20e828863ad006cf80" name="perl-IO-Capture" arch="noarch">
  <version epoch="0" ver="0.05" rel="41.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-41" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="bb7277983d9c3b371372638a012cd80d57cf4ad40479e1d99a6d5dc0be454cf8" name="perl-IO-Compress" arch="noarch">
  <version epoch="0" ver="2.223" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213
  - Add stub module IO/Compress.pm (GH#57)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Various workflow updates
  - IO::Compress::Gzip accidentally modified the `$EXPORT_TAGS{all}-&gt;@*` of
    other modules (GH#64)
  - Fix typos in streamzip (GH#59)
  - Fix documentation for get_Bufsize in Compress::Raw::Zlib
    (https://github.com/pmqs/Compress-Raw-Zlib/issues/34)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217 (rhbz#2435525)
  - Refresh zipdetails from https://github.com/pmqs/zipdetails
  - Delete GZIP environment variable before running interop tests (GH#24)
  - IO::Compress @2.215: t/006zip.t failed due to missing test files (GH#67)
  - Fix version check in 000prereq.t
  - Enhance _dosToUnixTime to handle zero and invalid datetime values; add
    tests for edge cases (GH#65, CVE-2025-15649)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.218-1" date="1772971200">- Update to 2.218 (rhbz#2445605)
  - Add SECURITY.md (GH#69)
  - Fix POD typo
  - Refresh zipdetails from https://github.com/pmqs/zipdetails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.219-1" date="1773057600">- Update to 2.219 (rhbz#2445768)
  - Fix a few typos
  - Squash repeated semicolons
  - Make dependent version checking consistent and update module to version
    2.219 (GH#70)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.220-1" date="1779019200">- Update to 2.220 (rhbz#2478225)
  - Remove use of eval in globmapper (GH#73, CVE-2026-48962)
  - Update zipdetails to version 4.006 (CVE-2026-48961)
  - Fix typo in fastForward (GH#72, CVE-2026-48959)
  - Fix issue with 'rawdeflate' option in AnyInflate (GH#71)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.221-1" date="1781611200">- Update to 2.221 (rhbz#2489325)
  - Update zipdetails to version 4.008
  - Update reference for the info-zip extrafld file
  - Add hex values for utf8 encoding as a comment
  - Fix File::GlobMapper wildcard replacement after ordinary letters
  - IO-Compress: generalize for EBCDIC
  - Remove test for filename when not needed, which helps with EBCDIC support
    (GH#73)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.222-1" date="1783080000">- Update to 2.222 (rhbz#2496861)
  - Tag ':constants' no longer exports all constants (GH#64, GH#78)
- Split depver macro into depver_bzip2 and depver_zlib</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.223-1" date="1783425600">- Update to 2.223
  - Fix typo in Makefile.PL (GH#79)</changelog>
</package>
<package pkgid="404f75550c8ca8c3863fa82d50cb8785e9b593c9415bd5eb5246299a0732df60" name="perl-IO-Compress-Lzma" arch="noarch">
  <version epoch="0" ver="2.217" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.207-1" date="1708516800">- Update to 2.207 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.211-1" date="1712491200">- Update to 2.211 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.212-1" date="1714305600">- Update to 2.212 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.213-1" date="1724932800">- Update to 2.213 (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.214-1" date="1761480000">- Update to 2.214
  - Various workflow updates
  - Stop accidentally modifying the '$EXPORT_TAGS{all}-&gt;@*' of other modules
    (IO::Compress GH#64)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.217-1" date="1769947200">- Update to 2.217
  - Delete XZ environment variable before running interop tests
  - Rework workflow to automatically detect and use all the versions of perl
    available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="c3cf388e3ce7cc84e5a479e2d1c1dedbef9f61b2f61eb30a227148328780b2e3" name="perl-IO-FDPass" arch="x86_64">
  <version epoch="0" ver="1.3" rel="13.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-8" date="1682251200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-9" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-13" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="830e6744dfbce6458d620d7d089ffb8586d6307362dce0fb4eb66a35608cf720" name="perl-IO-Multiplex" arch="noarch">
  <version epoch="0" ver="1.16" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-25" date="1682337600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="482e3df7974a9a01b913ce1e838e18b461746bbfa406af200859c13b22e3b1a5" name="perl-IO-Socket-INET6" arch="noarch">
  <version epoch="0" ver="2.73" rel="6.fc42"/>
  <changelog author="Michal Josef &#x160;pa&#x10D;ek &lt;mspacek@redhat.com&gt; - 2.72-23" date="1621339200">- Patch for bad code in test and random test fail (#1207174)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.73-1" date="1639137600">- Update to 2.73
  - Deprecate in favour of IO::Socket::IP
- Fix dist tags for Alma, Rocky and CentOS Stream Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.73-6" date="1681819200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="91b2eb231c3b64486b9aca56e0525a60942b7b51fa04109018c1b99acd2fc67b" name="perl-IO-Socket-IP" arch="noarch">
  <version epoch="0" ver="0.44" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.43-1" date="1732536000">- Update to 0.43
  - Swapped unit tests from `Test::More` to `Test2::V0`
  - Fixed some documentation typos (CPAN RT#157201)
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.44-1" date="1778760000">- Update to 0.44
  - Can 'use parent' rather than 'use base' (CPAN RT#177570)</changelog>
</package>
<package pkgid="1650d5af40ce386f9e2f501c023819448b83fc7c206c02863dcdb6a70583aa06" name="perl-IO-Socket-SSL" arch="noarch">
  <version epoch="0" ver="2.099" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.089-1" date="1724932800">- Update to 2.089
  - New option SSL_force_fingerprint to enforce fingerprint matching even if
    certificate validation would be successful without
  - Document _get_ssl_object and _get_ctx_object for cases where direct use of
    Net::SSLeay functions is needed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.090-1" date="1748952000">- Update to 2.090
  - Fix OCSP live test after Let's Encrypt has disabled OCSP support (GH#169)
  - public_suffix now preserves trailing dot (GH#167)
- Apply Crypto Policy patches unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.091-1" date="1749729600">- Update to 2.091
  - Fix behaviour on one-sided SSL shutdown; if the application continued to
    read after half-closing the SSL connection, this could result in reading
    encrypted data (i.e. close notify, SSL session tickets...)
  - See documentation of stop_SSL for detailed description of handling
    half-closed SSL connections</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.093-1" date="1750161600">- Update to 2.093
  - Rework for one-sided SSL shutdown, to implement a useful and secure
    behaviour without affecting existing applications</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.094-1" date="1750334400">- Update to 2.094
  - Fix memory leak introduced in 2.092</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.095-1" date="1752235200">- Update to 2.095
  - Regression: make sysread set buffer to empty string again when returning EOF
    (GH#171)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.096-1" date="1767614400">- Update to 2.096
  - Allow stacking TLS layers with SSL_usebio; this also allows LWP (after
    patches) to access https site through TLS-enabled proxy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.098-1" date="1767787200">- Update to 2.098
  - Fix GH#175 with upgrading from plain socket (no object) by using correct
    fdopen mode +&lt; instead of &lt;+
  - Another fix for GH#175 to make sure that an unblessed socket gets blessed
    in place instead of using new_from_fd; document that it will not retain
    original class with unblessed sockets on error, since this never worked
    anyway (there is no native unbless)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.098-3" date="1780488000">- BR: procps-ng rather than procps for the test suite
  (procps has been provided by procps-ng since Fedora 18)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.099-1" date="1782475200">- Update to 2.099
  - Close socket by default on failed SSL handshake when created with new, but
    keep open when upgrading from existing socket with start_SSL; this restores
    old behaviour that was accidentally broken</changelog>
</package>
<package pkgid="5cde0ce492ad5f8bc115a21de63f9c4bb92c389ab7728a76a183a125d829dbf5" name="perl-IO-Socket-Socks" arch="noarch">
  <version epoch="0" ver="0.74" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.74-17" date="1682337600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="d56a3c2991570f6f1e5f9d49e80dc0bc1b10ea39aaeb7010c54c8c5deb03cb44" name="perl-IO-String" arch="noarch">
  <version epoch="0" ver="1.08" rel="47.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-47" date="1689422400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="4f3a124a5971d51cc9a3de22a79a998bedf498c37bb2da9f3e1e4fc44acec91d" name="perl-IO-Tty" arch="x86_64">
  <version epoch="0" ver="1.31" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.20-7" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.21-1" date="1774267200">- Update to 1.21
  Bug Fixes:
  - Fix slave fd leak on IO::Pty destruction; the slave pty file descriptor was
    not closed when the IO::Pty object was destroyed, leaking file descriptors
    until process exit (GH#14, GH#39)
  - Fix set_raw() to modify cflag for proper raw mode on BSD/macOS; set_raw()
    was not clearing CSIZE|PARENB or setting CS8 in cflag, causing incomplete
    raw mode on macOS, OpenBSD, and NetBSD (GH#12, GH#40)
  - Modernize function detection to use proper system headers instead of
    fragile K&amp;R-style forward declarations; the old approach conflicted with
    real prototypes on modern compilers (especially FreeBSD/Clang), causing all
    function checks to fail (GH#38, GH#41)
  Improvements:
  - Add BSD CI testing for FreeBSD, OpenBSD, and NetBSD via
    cross-platform-actions; also bumps actions/checkout from v2 to v4 (GH#42)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-1" date="1774440000">- Update to 1.23 (rhbz#2450189)
  Bug Fixes:
  - Fix function detection on Solaris by adding __EXTENSIONS__ to expose BSD
    extensions (like strlcpy) that are hidden when _XOPEN_SOURCE is defined
    (GH#47, GH#48)
  - Fix file descriptor leaks in open_slave() error paths; the master pty fd
    was not closed on several early-return error paths, causing fd leaks when
    falling through multiple pty allocation methods (GH#49)
  - Replace deprecated indirect object syntax (e.g. 'new IO::Pty') with direct
    method calls ('IO::Pty-&gt;new'); Perl 5.36+ disables indirect object calls,
    so this fixes forward compatibility (GH#52)
  Improvements:
  - Add unit tests for ttyname(), slave()/close_slave() lifecycle,
    set_winsize()/get_winsize() round-trips, pack_winsize/unpack_winsize, and
    constant importing (28 new tests) (GH#50)
  - Replace DynaLoader with XSLoader and bump minimum perl version to 5.8.8;
    XSLoader is simpler and has been in core since perl 5.6 (GH#51)
  - Add clone_winsize_from() test coverage (7 new tests) covering basic clone
    between slave ttys, non-tty master fast path, croak on non-tty source, and
    pixel dimension preservation (GH#53)
  Maintenance:
  - Fix stale POD versions, add Perl 5.38/5.40 to CI, and update repository
    URLs from toddr/IO-Tty to cpan-authors/IO-Tty (GH#44)
  - Remove dead Perl 5.003 compatibility code, modernize XS (Nullch to NULL,
    perl_get_sv to get_sv, sprintf to snprintf) (GH#45)
  - Modernize CI with dynamic perl version discovery via
    perl-actions/perl-versions and add a disttest job (GH#46)
  - Regenerate README from POD to fix stale version (GH#52)
  - Modernize 'use vars' to 'our' declarations in Tty.pm and Pty.pm; add
    missing 'use warnings' to Pty.pm (GH#53)
  - Add AI_POLICY.md for transparency on AI-assisted contributions
  - Convert README to Markdown and update MANIFEST</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.24-1" date="1774612800">- Update to 1.24 (rhbz#2452300)
  Bug Fixes:
  - Fix slave pty reopening on Solaris/illumos; after close_slave(), reopening
    with plain Perl open() skipped pushing STREAMS modules (ptem, ldterm,
    ttcompat), causing isatty() to return false - added _open_tty() XS function
    that opens the device and pushes STREAMS modules on platforms that support
    I_PUSH (GH#54, GH#55)
  - Fix undef warnings on Perl 5.8.8 by removing the undef operator on
    localized $SIG{__DIE__}, and fix XS ttyname() on older Perls by avoiding
    the InOutStream typemap, which can return NULL for filehandles created via
    new_from_fd (GH#56, GH#58)
  - Add __BSD_VISIBLE for FreeBSD in function probes; the _XOPEN_SOURCE
    definition hid BSD extensions like strlcpy, causing probe failures and
    subsequent compile errors from conflicting static/non-static declarations
    (GH#57, GH#59)
  Maintenance:
  - Modernize Makefile.PL: replace BUILD_REQUIRES with TEST_REQUIRES
    (EUMM 6.64+), add CONFIGURE_REQUIRES, upgrade META_MERGE to meta-spec v2,
    modernize generated Constant.pm to use 'our' instead of 'use vars', and
    remove dead PPD postamble (GH#60)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.25-1" date="1775131200">- Update to 1.25 (rhbz#2454158)
  Bug Fixes:
  - Fix IO::Pty DESTROY force-closing the slave pty: the DESTROY method (added
    in 1.21) explicitly closed the cached slave handle, breaking consumers like
    IPC::Run that hold a reference to the slave via $pty-&gt;slave() and expect it
    to survive master destruction; now just deletes the internal reference and
    lets Perl's refcounting handle fd closure correctly (GH#62, GH#64)
  Maintenance:
  - Simplify version variables to a single source of truth: extract version
    from Tty.pm in Makefile.PL using MM-&gt;parse_version() instead of hardcoding
    it, use VERSION_FROM in WriteMakefile, and remove $XS_VERSION from Tty.pm
    (GH#61)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-1" date="1775131201">- Update to 1.26 (rhbz#2454517)
  Bug Fixes:
  - Fix strlcpy detection on DragonFly BSD to avoid static/non-static
    declaration conflict; added __DragonFly__ guard to the function test
    (paralleling __FreeBSD__) and added a belt-and-suspenders check for
    perl's own HAS_STRLCPY in Tty.xs (GH#67)
  Maintenance:
  - Add 5-minute timeout to all CI test steps to prevent hung tests from
    consuming CI resources indefinitely (GH#66)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1775304000">- Update to 1.27 (rhbz#2454942)
  Bug Fixes:
  - Fix build on OpenBSD by including termios.h to detect openpty reliably and
    setting _BSD_SOURCE to find strlcpy in includes (GH#68)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-1" date="1776945600">- Update to 1.29 (rhbz#2461125)
  Bug Fixes:
  - Fix make_slave_controlling_terminal() on Solaris/HP-UX to use _open_tty()
    instead of IO::Tty-&gt;open(), ensuring STREAMS modules (ptem, ldterm,
    ttcompat) are pushed via I_PUSH when the slave is opened for controlling
    terminal setup - parallel fix to the slave() method fix in 1.24 (GH#69)
  - Fix Perl 5.40+ "Possible memory corruption: ioctl overflowed 3rd argument"
    warning in clone_winsize_from() and get_winsize(); use
    pack_winsize(0,0,0,0) to pre-allocate the ioctl buffer with SvCUR matching
    sizeof(struct winsize) instead of an empty string (GH#74)
  - Fix diagnostic warnings being silently suppressed when callers use lexical
    "use warnings" (the modern standard since Perl 5.6); $^W and PL_dowarn only
    fire under perl -w - replaced with warnings::enabled() in IO::Tty and
    IO::Pty (GH#76) and ckWARN(WARN_IO) in Tty.xs (GH#79)
  - Fix file descriptor leak in IO::Pty when new_from_fd() fails after
    pty_allocate() or _open_tty() returns raw C-level fds; added POSIX::close()
    calls on the raw fds before croaking at three sites in new() and slave()
    (GH#77)
  - Fix openpty() detection on Alpine Linux and other musl-based systems where
    openpty() has moved from libutil into libc (glibc 2.34+); probe libc first
    before falling back to -lutil (GH#78)
  - Fix -Wsign-compare compiler warnings: change namebuflen parameter type from
    int to size_t in open_slave() and allocate_pty() to match the return type
    of strlcpy() and the size argument of snprintf() (GH#80)
  - Fix spurious "_FORTIFY_SOURCE requires compiling with optimization"
    warnings during configure probes when $Config{optimize} (e.g. -Os) is
    separate from $Config{ccflags}; include optimize flags in all configure
    probe compilations (GH#81)
  - Fix header probes in Makefile.PL missing platform extension defines
    (_GNU_SOURCE, _BSD_VISIBLE, etc.) that function probes already included;
    bare #includes could cause HAVE_PTY_H and similar to be unset on strict
    POSIX systems even when the header exists (GH#84)
  - Fix configure-time function detection probes being broken by compiler
    optimization:
    - The probes stored function pointers in local variables that -O2/-Os
      (added to probe flags in GH#81) eliminated as dead stores, so the linker
      never saw the function reference; on systems where openpty() lives in
      -lutil (older glibc, BSDs), the probe falsely succeeded without -lutil,
      producing "undefined symbol: openpty" at runtime
    - Fixed by storing the function pointer in a file-scope global variable
      that the optimizer cannot eliminate (GH#87, GH#88)
  Improvements:
  - Use L&lt;&gt; instead of C&lt;&gt; for cross-module POD references in Tty.pm and Pty.pm
    so MetaCPAN renders IO::Pty, IO::Handle, and IO::Stty as clickable links
    (GH#86)
  Maintenance:
  - Modernize POD in Tty.pm and Pty.pm: remove stale platform version
    references (FreeBSD 4.4, OpenBSD 2.8, HPUX 10.20, Solaris 2.6), replace
    defunct SourceForge/mailing list URLs with GitHub issue tracker (GH#70)
  - Modernize the 'try' example script: add strict/warnings, my declarations,
    3-arg open, and lexical filehandles; the script is shipped to CPAN and
    referenced in POD as the canonical usage example (GH#73)
  - Strengthen test coverage for set_raw() and winsize: verify all termios
    flags set by cfmakeraw (iflag, oflag, PARENB, CSIZE, CS8, VMIN, VTIME) and
    add a test for the unpack_winsize() length-validation croak (GH#75)
  - Update GitHub Actions to Node.js 24 versions: actions/checkout v6,
    cross-platform-actions/action v1, perl-actions/install-with-cpm v2;
    required before GitHub forces Node.js 24 in June 2026 (GH#85)
  - Add Ubuntu LTS version matrix (20.04, 22.04, 24.04) to the GitHub Actions
    test suite; exercises the system perl on each current Ubuntu LTS release
    via Docker containers, running after the main ubuntu job (GH#89)
- Add patch to fix detection of openpty() in libutil on older Fedora releases</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1779710400">- Update to 1.31 (rhbz#2481113)
  Bug Fixes:
  - Fix v1.27 regression where _open_tty() always passed O_NOCTTY, preventing
    make_slave_controlling_terminal() from acquiring a controlling terminal via
    the POSIX-standard open-without-O_NOCTTY mechanism (it was forced to fall
    through to an explicit TIOCSCTTY ioctl) (GH#91, GH#94)
    - _open_tty() now takes an optional noctty flag (default 1 for backward
      compatibility)
    - make_slave_controlling_terminal() passes 0
  - Fix openpty() detection on Fedora 33-34 / glibc 2.32-2.33 where LTO flags
    (-flto=auto) caused the libc-only compile probe to falsely succeed,
    producing "undefined symbol: openpty" at runtime; try -lutil before libc;
    harmless on systems where openpty lives in libc (glibc 2.34+, musl) and
    necessary where it doesn't (GH#92, GH#93)
  Maintenance:
  - Address CPANTS kwalitee issues: add LICENSE, SECURITY.md, and
    CONTRIBUTING.md; add META 'provides' for IO::Tty, IO::Pty, and
    IO::Tty::Constant; use --format=ustar in TARFLAGS to prevent PaxHeader
    entries in distribution tarballs (GH#90)
  - Clean up MANIFEST.SKIP: add #!include_default so ExtUtils::Manifest's
    built-in skip list is in effect, drop five entries that duplicate those
    defaults, and add a ^\.claude/ rule
- Package CONTRIBUTING.md, LICENSE and SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-2" date="1780401600">- Fix for rhbz#2463168 (perl-IO-Tty-1.24 or newer break coreutils test-suite)
  (GH#91, GH#95)</changelog>
</package>
<package pkgid="c1121316496d058990de26ae90d02d854b68bbd54d9b791220bcf766b3283f13" name="perl-IO-Zlib" arch="noarch">
  <version epoch="1" ver="1.15" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.12-1" date="1672401600">- Update to 1.12
  - Use a distinct test file, with pid in it, for each test
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.13-1" date="1673092800">- Update to 1.13 (no changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.14-1" date="1673438400">- Update to 1.14
  - Fix INSTALLDIRS option for newer perls</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.14-499" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.15-1" date="1709294400">- Update to 1.15 (rhbz#2267126)
  - Specify license in module metadata</changelog>
</package>
<package pkgid="9af4427fa467aeabca9b1d8e0174e081ddf21c18b7d08f1017cc9117f9e29d6a" name="perl-IO-stringy" arch="noarch">
  <version epoch="0" ver="2.113" rel="11.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.113-11" date="1682337600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="8cd5fb93daefb9b9186c4fb55a1fcd8208566583e67e1c7ec9d238f6395d4589" name="perl-IPC-Cmd" arch="noarch">
  <version epoch="2" ver="1.04" rel="500.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:1.04-500" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="16a22cea1ad4d7966e44cd16122c5518410f6aecc65cb3129a601e3ddbd8f634" name="perl-IPC-Run" arch="noarch">
  <version epoch="0" ver="20260402.0" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250809.0-1" date="1754913600">- Update to 20250809.0 (rhbz#2387443)
  - Reduce delays in detecting child exit (GH#172)
  - Add quickstart section at the top of the docs (GH#174)
  - Retry _read() on EINTR instead of losing pipe contents (GH#177)
  - In test suite, work around bug in NetBSD 10
- Use %{make_build] and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260322.0-1" date="1774267200">- Update to 20260322.0 (rhbz#2450190)
  Bug fixes:
  - Handle EAGAIN in _write() for non-blocking pipe writes (GH#126, GH#221)
  - Prevent fd leak in _do_kid_and_exit when TFD == KFD (GH#149, GH#218)
  - Suppress spurious "Filehandle STDIN reopened" warnings in child when $^W=1
    with pty redirection (GH#131, GH#219)
  - Make binmode the default on Win32 to prevent newline mangling of
    binary data (GH#116, GH#192)
  - Avoid undef warning in _cleanup when fork fails (GH#82, GH#197)
  - Wrap coderef in eval in _do_kid_and_exit to prevent child process from
    escaping into parent code path on die() (GH#97, GH#193)
  - Propagate CODE ref exceptions back to parent via error pipe
    (GH#122, GH#224)
  - Close external input handles in parent after fork to prevent hangs when
    child exits early (GH#57, GH#226)
  - Preserve $cur_kid when a Timer is encountered in harness(), fixing
    "No command before 'init'" errors (GH#134, GH#187)
  - Restore compat for bare undef params in harness() (GH#124, GH#190)
  - Passing undef as stdin/stdout/stderr no longer dies (GH#141, GH#184)
  - Avoid "Modification of a read-only value" when passing undef stdin
    (GH#139, GH#185)
  - Reject empty/undef command name in _search_path (GH#162, GH#182)
  - Limit input buffer chunk size to prevent exponential memory growth when
    streaming data to slow consumers (GH#154, GH#183)
  - Silently ignore undef arguments passed as timeout to harness()
    (GH#128, GH#189)
  - Correct two minor documentation issues in Run.pm (GH#133, GH#188)
  - Skip win32_compile.t when getprotobyname('tcp') is unavailable
    (GH#137, GH#186)
  - Survive SIGPIPE when child exits before consuming all stdin (GH#35, GH#204)
  - Handle EPIPE when child exits before consuming stdin (GH#92, GH#195)
  - Handle tied STDERR without FILENO in _debug_fd (GH#93, GH#194)
  - Invalidate path cache on $PATH change, add clearcache() (GH#82, GH#196)
  - Support scalar ref for '&gt;pipe' and '&lt;pipe' operators (GH#50, GH#201)
  - Use $type in IO::new error message instead of $_ (GH#49, GH#202)
  - Fix &lt;pipe documentation example order and equivalent pipe example
    (GH#66, GH#198)
  - Suppress spurious numeric warning in result() and results() (GH#65, GH#199)
  - Suppress numeric warnings from result() when SIGCHLD is IGNORE
    (GH#29, GH#205)
  - Handle scalar refs in Win32IO pipe operators (GH#213, GH#214)
  - Remove blanket TODO from win32_newlines.t, keep only for still-failing
    tests (GH#215, GH#216)
  - Prevent handle inheritance of caller-owned fds on Win32
    (GH#169, GH#181, GH#211)
  - Enable kill_kill test 1 on Win32 (CPAN RT#11215, GH#207)
  - Suppress filehandle warning during global destruction in tied_stderr.t
    (GH#237, GH#239)
  - Resolve File::Temp cleanup warning on Windows CI (GH#236, GH#238)
  - Suppress Socket::IPPROTO_TCP redefined warning in win32_compile.t
    (GH#230, GH#235)
  - Prevent tied_stderr.t from hanging on Win32 CI (GH#222, GH#225)
  Improvements:
  - Add env option to set child process environment variables without modifying
    parent %ENV (GH#178, GH#179)
  - Add started() method to query harness run state (GH#171, GH#180)
  - Add finished() method to distinguish exit-0 from not-yet-exited
    (GH#169, GH#181)
  - Add pid(), pids(), is_running(), full_path(), full_paths() convenience
    methods (GH#44, GH#203)
  - Add &lt;blocking_pipe operator for blocking writes to child stdin
    (GH#64, GH#200)
  - Add close_stdin() method to prevent unbounded memory growth when streaming
    to long-running children (GH#212)
  Maintenance:
  - Consolidate CI into single testsuite.yml with dynamic Perl version matrix
    (GH#208, GH#209)
  - Add CLAUDE.md with project guidelines for AI-assisted development (GH#220)
  - Add 5-minute timeout to all CI workflow steps
  - Remove TODO from Win32 autoflush test and align with Unix branch
    (GH#228, GH#234)
  - Clean up resolved TODO tests in win32_newlines.t (GH#223, GH#227)
  - Skip t/eintr.t early on Win32 to avoid SIGUSR1 warning (GH#231, GH#233)
  - Suppress File::Temp version-string warnings in test suite (GH#229, GH#232)
- Apply upstream fixes for compatibility with IO::Tty 1.21</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260401.0-1" date="1775131200">- Update to 20260401.0 (rhbz#2454159)
  Bug fixes:
  - Require IO::Pty 1.25, which fixes stale pty slave fd after close_terminal
    in child, replacing defensive workarounds (GH#240, GH#241, GH#266)
  - Close Win32IO socket/pipe handles explicitly in _cleanup to prevent handle
    leaks (GH#237, GH#246)
  - Handle $SIG{PIPE} set to 'DEFAULT' in _select_loop instead of crashing
    (GH#242, GH#244)
  - Handle $SIG{CHLD} set to '' or 'DEFAULT' in _select_loop (GH#262)
  - Fix PTYS typo in adopt() and missing TIMERS init in harness constructor
    (GH#260)
  - Handle PTY allocation failure gracefully in start() instead of dying with
    an unhelpful error (GH#267)
  - Correct Timer.pm POD typos, _parse_time error message, and remove redundant
    parse call (GH#251)
  - Prevent noexec probe from leaking TAP output in search_path_cache.t (GH#247)
  Improvements:
  - Correct broken POD links and code examples in documentation (GH#252)
  Maintenance:
  - Update GitHub URLs from toddr/IPC-Run to cpan-authors/IPC-Run (GH#263)
  - Replace GPL v2 full text with standard "same terms as Perl" license (GH#268)
  - Add AI policy document (GH#248)
  - Use File::Spec-&gt;devnull in autoflush.t for portability (GH#250)
  - Skip search_path_cache.t on noexec temp filesystems (GH#247)
  - Remove dead code from Run.pm (GH#266)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260402.0-1" date="1775217600">- Update to 20260402.0 (rhbz#2454677)
  Bug fixes:
  - Detect undefined command in arrayref at harness parse time instead of
    deferring to start() (GH#164, GH#271, GH#272)
  - pipe_writer dropped input when data is the string "0" due to redundant
    boolean test on input buffer (GH#264)
  - Callback filter evaluates return in list context to distinguish empty
    return from the string "0", preventing infinite loop on Win32 (GH#264)
  - Skip pty output assertions on BSD/Darwin due to known pty drain timing
    issues on short-lived children (GH#240, GH#274)
  - Implement proper Windows command-line parsing per Microsoft C/C++ rules,
    fixing argument parsing failures with single-quoted strings containing
    whitespace (GH#273)
  Maintenance:
  - Add shebang to eg/synopsis_scripting (GH#275)</changelog>
</package>
<package pkgid="1c628da291d394ab3f8f6e6b6d9100585bffac3ba9366eaa363690cd9b4ec45f" name="perl-IPC-Run3" arch="noarch">
  <version epoch="0" ver="0.049" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.048-28" date="1689595200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.049-1" date="1705838400">- Update to 0.049
  - Avoid some uninitialized warnings in ProfLogReader
  - Improve errno handling on Windows
  - Avoid leaking fds
  - Fix typos in docs</changelog>
</package>
<package pkgid="057ad5a47030d7bb54327facf007c9883c974af6644a9e73e71c033864ca3c46" name="perl-IPC-System-Simple" arch="noarch">
  <version epoch="0" ver="1.30" rel="10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-10" date="1682424000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="8dccf42228ed3702dac19d8e45553b1b4928dbe4d172ee6623687702afc3efa4" name="perl-Import-Into" arch="noarch">
  <version epoch="0" ver="1.002005" rel="23.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.002005-23" date="1682424000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="3e8447a6dc3d077f998a52bba68492c821dac88c72ddab9266d949ad9e0a09e5" name="perl-Importer" arch="noarch">
  <version epoch="0" ver="0.026" rel="9.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.026-9" date="1689076800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="873033ebc1202da56337c16fc1a38b3bf2b7a0e93a650bbd3209ca73c256df01" name="perl-JSON" arch="noarch">
  <version epoch="0" ver="4.11" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.11-1" date="1774180800">- Update to 4.11
  - Updated backportPP with JSON::PP 4.18
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="c689e6ae06118d488e7f54d290c90a0cfaf2e40f45181a5437e7772c15086115" name="perl-JSON-MaybeXS" arch="noarch">
  <version epoch="0" ver="1.004008" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004004-1" date="1663675200">- Update to 1.004004
  - Slight speed optimization for is_bool()
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004005-1" date="1682856000">- Update to 1.004005
  - to_json and from_json are now documented (GH#2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004007-1" date="1722772800">- Update to 1.004007
  - is_bool() now recognizes core booleans (perl 5.36+); note that JSON::PP
   4.11 and Cpanel::JSON::XS 4.38 are required to properly encode them</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004008-1" date="1723377600">- Update to 1.004008
  - Improved boolean testing</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.004008-2" date="1723550400">- Fix runtime dependency on Cpanel::JSON::XS 4.38 (rhbz#2304277)</changelog>
</package>
<package pkgid="11236be6efad6f208833797a32ce4ef0c03017c4a7ebab298218270dd1c2d9c1" name="perl-JSON-PP" arch="noarch">
  <version epoch="1" ver="4.18" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.16-522" date="1766491200">- Silence Getopt::Long warning (rhbz#2417867, PR#1, GH#88, GH#93)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.18-1" date="1774008000">- Update to 4.18
  - Fix duplicate specification warning (GH#88, GH#93)
  - Fix typo (GH#92, GH#96)
  - Fix decode_json prototype
  - Fix space_after (GH#89)
  - Fix a reentrancy issue (GH#61, GH#87)</changelog>
</package>
<package pkgid="585f80d6150b23ca827ebb85fb2c4b16917a99c0028e99e879251df365fc3833" name="perl-JSON-XS" arch="x86_64">
  <version epoch="1" ver="4.04" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.03-14" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.03-17" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:4.04-1" date="1757419200">- Update to 4.03
  - Fix heap overflow causing crashes, possibly information disclosure or worse
    (CVE-2025-40928), and causes JSON::XS to accept invalid JSON texts as valid
    in some cases</changelog>
</package>
<package pkgid="6a43d0308010fa1cb3158542799ca0baed6373101432315aa836a78951d03bc2" name="perl-Jcode" arch="noarch">
  <version epoch="0" ver="2.07" rel="40.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.07-40" date="1682424000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="8f2efc63e0ee304a44d56528f8c24fb7cdf9596f5fedd42831c6851022ae7c36" name="perl-LMAP-CID2SPF" arch="noarch">
  <version epoch="0" ver="0.9" rel="18.fc42"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 0.9-18" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e42f12469e5e22975c6ced5120ca74f6a46b8cfd2531cb3ec54500347dedfbd0" name="perl-Lingua-EN-Inflect" arch="noarch">
  <version epoch="0" ver="1.905" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.905-8" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="96d278b8ee8c9e43a799de472a5434aa326a0292dcbd787db1bbd3dea2997df3" name="perl-List-MoreUtils" arch="noarch">
  <version epoch="0" ver="0.430" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-8" date="1682424000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="5fee6ef57a50ca0d826b8f6420316ec1af2e9abbd665bc280478bdd51323b997" name="perl-List-MoreUtils-XS" arch="x86_64">
  <version epoch="0" ver="0.430" rel="14.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-8" date="1682510400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-10" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.430-14" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="7319627075324c97fba61a09c9046151e2456fac12beaabe5d33d6ffae2c3913" name="perl-List-SomeUtils" arch="noarch">
  <version epoch="0" ver="0.59" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.59-1" date="1670846400">- Update to 0.59
  - Require Module::Implementation 0.04; without this tests fail (GH#11)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.59-2" date="1689681600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="801b7250a0d170cdb327642b050b49ab6ce91a85da69f0ffa67d00c5119c6c06" name="perl-List-SomeUtils-XS" arch="x86_64">
  <version epoch="0" ver="0.59" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.58-25" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.59-1" date="1782129600">- Update to 0.59
  - Fix a heap buffer overflow in the pairwise function when it would return a
    very large list
- Package CODE_OF_CONDUCT.md</changelog>
</package>
<package pkgid="9fe449a7f1ec3df89fa7d2ffe0281771ea5ffcf00d7dbb0bfc01b86792f6a90a" name="perl-Locale-Maketext-Lexicon" arch="noarch">
  <version epoch="0" ver="1.00" rel="30.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.00-30" date="1689595200">- Drop support for building with rpm &lt; 4.9
- Use Lingua::EN::Sentence unconditionally
- Use %license unconditionally</changelog>
</package>
<package pkgid="688c04ff556c47285333bb90c1123ea4d87d4fac13b56b1789c8f7cc33b06547" name="perl-Locale-Maketext-Simple" arch="noarch">
  <version epoch="1" ver="0.21" rel="499.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.21-486" date="1647604800">- Work around package note files breaking t/0-signature.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.21-499" date="1689595200">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="b6b7cc38a66a2448354d2a91ccb037b209eb8c61ec95180053b3a1ce9c80c84a" name="perl-Locale-US" arch="noarch">
  <version epoch="0" ver="3.04" rel="24.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.04-24" date="1682510400">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Use %license unconditionally
  - Don't package kruft2codes.pl as documentation; it's a maintainer script
    that is installed alongside the module itself</changelog>
</package>
<package pkgid="08427ece7790a1b8bf0b96788e0b796266e68ad2e0cdc1fc5f7e04cfafa80cef" name="perl-MCE" arch="noarch">
  <version epoch="0" ver="1.902" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.896-1" date="1718193600">- Update to 1.896 (rhbz#2291411)
  - Weaken internal core MCE reference to reap workers automatically upon
    leaving the scope i.e. omitting shutdown
    - Note: No change to MCE models Flow, Grep, Loop, Map, Step, and Stream
    - Call finish explicitly to reap workers
    - This resolves the case when omitting calling $mce-&gt;run(), $mce-&gt;run(1) or
      $mce-&gt;shutdown() inside a scope, causing workers to linger around until
      completion of the script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-1" date="1718884800">- Update to 1.897
  - In scalar context, the init function in MCE Child and models Flow, Grep,
    Loop, Map, Step, and Stream returns a guard to call finish automatically
    upon leaving the { scope } (i.e. omitting finish)
  - Add out_iter_callback to MCE::Candy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.898-1" date="1724328000">- Update to 1.898
  - Fix for MCE::Child, Can't call method "len" on an undefined value
    during global destruction (GH#22)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.899-1" date="1725624000">- Update to 1.899
  - Fix for MCE::Child and MCE::Channel signal anomaly (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.900-1" date="1725969600">- Update to 1.900 (rhbz#2310966)
  - Improve MCE::Child exiting when signaled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-1" date="1735905600">- Update to 1.901 (rhbz#2335354)
  - Add MCE::Core package for future development</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-3" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.902-1" date="1757505600">- Update to 1.902 (rhbz#2394255)
  - Add support for Iterator:: classes
- Use Sereal unconditionally</changelog>
</package>
<package pkgid="5e5b60164407b0da617178d554a591d6530b442303607fbc5ea6cf29effa168c" name="perl-MCE-Shared" arch="noarch">
  <version epoch="0" ver="1.893" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.884-1" date="1686225600">- Update to 1.884
  - Add missing return statement(s) in Condvar and Queue
  - Move tests for condvar timedwait to xt/condvar_timedwait.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.885-1" date="1686312000">- Update to 1.885
  - Fix typo in Queue dequeue_timed documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.886-1" date="1694692800">- Update to 1.886
  - Add Android support; this required moving MCE::Shared::Base::Common out of
    MCE::Shared::Base to separate file MCE::Shared::Common
  - Bump MCE dependency to 1.889</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.887-1" date="1716724800">- Update to 1.887
  - Improve reaping of completed workers in MCE::Hobo</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.888-1" date="1717675200">- Update to 1.888
  - Apply workaround for PDL::srand in MCE::Hobo
    (https://www.perlmonks.org/?node_id=11159773)
  - Add PDL::srand (v2.062~v2.089) and PDL::srandom (v2.089_01+)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.889-1" date="1718020800">- Update to 1.889
  - Improve support for PDL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.890-1" date="1718107200">- Update to 1.890
  - Revert back to calling CORE::rand() to set the internal seed; MCE::Hobo
    cannot assume the srand or setter function used by the application for
    predictability
    - https://perlmonks.org/?node_id=11159834
    - https://perlmonks.org/?node_id=11159827
  - Add class method MCE::Hobo-&gt;seed to retrieve the seed</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.891-1" date="1718884800">- Update to 1.891
  - In scalar context, MCE::Hobo-&gt;init returns a guard to call finish
    automatically upon leaving the { scope } (i.e. omitting finish)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.892-1" date="1724328000">- Update to 1.892
  - Fix for MCE::Hobo, Can't call method "len" on an undefined value during
    global destruction</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.893-1" date="1725969600">- Update to 1.893
  - Improve MCE::Hobo exiting when signaled</changelog>
</package>
<package pkgid="6ce570bc270b031906293194c8aecc5361e85de47b35bf8676171afc101b30ae" name="perl-MCE-tools" arch="noarch">
  <version epoch="0" ver="1.902" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.896-1" date="1718193600">- Update to 1.896 (rhbz#2291411)
  - Weaken internal core MCE reference to reap workers automatically upon
    leaving the scope i.e. omitting shutdown
    - Note: No change to MCE models Flow, Grep, Loop, Map, Step, and Stream
    - Call finish explicitly to reap workers
    - This resolves the case when omitting calling $mce-&gt;run(), $mce-&gt;run(1) or
      $mce-&gt;shutdown() inside a scope, causing workers to linger around until
      completion of the script</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-1" date="1718884800">- Update to 1.897
  - In scalar context, the init function in MCE Child and models Flow, Grep,
    Loop, Map, Step, and Stream returns a guard to call finish automatically
    upon leaving the { scope } (i.e. omitting finish)
  - Add out_iter_callback to MCE::Candy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.897-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.898-1" date="1724328000">- Update to 1.898
  - Fix for MCE::Child, Can't call method "len" on an undefined value
    during global destruction (GH#22)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.899-1" date="1725624000">- Update to 1.899
  - Fix for MCE::Child and MCE::Channel signal anomaly (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.900-1" date="1725969600">- Update to 1.900 (rhbz#2310966)
  - Improve MCE::Child exiting when signaled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-1" date="1735905600">- Update to 1.901 (rhbz#2335354)
  - Add MCE::Core package for future development</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.901-3" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.902-1" date="1757505600">- Update to 1.902 (rhbz#2394255)
  - Add support for Iterator:: classes
- Use Sereal unconditionally</changelog>
</package>
<package pkgid="0ae5861cdd9c8d8e93582af7ef7fb28ea4d89bfff663c317ced26e81b8441b70" name="perl-MIME-Base32" arch="noarch">
  <version epoch="0" ver="1.303" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.303-17" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="413464c776bc30d59569f1343bf4e5680ed780b774c20ca78a421d9b669db6a7" name="perl-MIME-Types" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-5" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-1" date="1707220800">- Update to 2.26
  - IANA updates
  - Support multi-level extensions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-3" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.27-1" date="1738929600">- Update to 2.27
  - IANA updates
  - Explicitly set $/ before reading the file by line</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1745064000">- Update to 2.28
  Fixes:
  - Some 'deprecated' texts made it to types.db
  Improvements:
  - text/ecmascript RFC9239
  - Default charsets according to RFC6657
  - Update reference to specs RFC6838 and RFC9694
  - IANA updates
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-2" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1757937600">- Update to 2.29
  - Require 5.16 (2012)
  - Remove xt/98perl.t
  - ::Type-&gt;defaultCharset()
  - Remove use of bareword filehandle
  - IANA updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1765195200">- Update to 2.30
  Fixes:
  - No undef when simplifying illegal type (GH#15)
  Improvements:
  - Add bugtracker to meta
  - Better OO use of attributes</changelog>
</package>
<package pkgid="61c3995ca6555869ac99f2f97751ea155cbc4d8a8c0429493a3c3de87f5bc257" name="perl-MIME-tools" arch="noarch">
  <version epoch="1" ver="5.517" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-1" date="1714132800">- Update to 5.515
  -  Fix the "version" setting in META.yml (no functional changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-3" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-4" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.515-5" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.517-1" date="1770811200">- Update to 5.517
  - Handle MIME parameters of the form param= better (i.e. a parameter with no
    value at all); it's treated the same as param="" rather than aborting the
    parse
  - Diagnose additional types of malformed MIME as ambiguous; specifically, an
    empty boundary parameter like boundary= or boundary="" is treated as
    ambiguous</changelog>
</package>
<package pkgid="7577d2734762e0beb82a11d12cbc058541a3627903884fdfc30cb71eacd15e29" name="perl-MLDBM" arch="noarch">
  <version epoch="0" ver="2.05" rel="34.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-29" date="1682510400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-32" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-34" date="1726574400">- Drop optional test dependency perl(DB_File) from Fedora 33 onwards due to
  deprecation of libdb</changelog>
</package>
<package pkgid="31857ff07cecd61a6ce049aaa669782d0e141b969b162534607d155ed0cf0d4e" name="perl-MRO-Compat" arch="noarch">
  <version epoch="0" ver="0.15" rel="6.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-1" date="1641643200">- Update to 0.15
  - Optimize pure perl DFS inheritance calculation on perl 5.8
  - Fix function prototypes to match core functions
  - Pod formatting fix
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-6" date="1679486400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="40c6d57ecf12765c988b5f2fa664e4f5efbc37e4b973a7f53dfdd21b3128ee34" name="perl-Mail-IMAPClient" arch="noarch">
  <version epoch="0" ver="3.43" rel="7.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.43-7" date="1689681600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b6799639a7917c66c4816e1722aa6b4361875b8e9cb69524a605cd73f3e10447" name="perl-Mail-Mbox-MessageParser" arch="noarch">
  <version epoch="0" ver="1.5111" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.5111-16" date="1682596800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="45905225e6cd15130f921a2c1f9432661010032cc9f42b5832f70b3062d45c71" name="perl-Mail-SPF" arch="noarch">
  <version epoch="0" ver="3.20260331" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240617-1" date="1718625600">- Update to 3.20240617
  - Update INSTALL file for Dist::Zilla changes
  - Fix memory leak in Mail::SPF::Server when cacheing a Mail::SPF::MacroString
  - When mfrom is empty, create a synthetic mfrom (postmaster@helo) and check
    that identity using the mfrom scope as specified in RFC7208
  - Fix missing declare in Mail::SPF::Server
  - Require Mail::SPF::Mech when needed
  - Correctly handle empty labels
  - Use "try" instead of "eval"
  - Error out if the lookup fails</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240827-1" date="1724760000">- Update to 3.20240827
  - Do not try to parse an IPv4 address unnecessarily
  - Import RFC7208 tests
  - Referencing the same TXT record through multiple CNAME aliases is not
    permitted by RFC7208
  - Make it clear that BlackMagic module is not available
  - Fix checks for IPv4-mapped IPv6 connections
  - Cache DNS results
  - Misc dzil/build/ci improvements
  - SPF explanation text is restricted to 7-bit ascii</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20240923-1" date="1727092800">- Update to 3.20240923
  - Fix issue where certain DNS results would cause an exception to be thrown</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20250505-1" date="1746446400">- Update to 3.20250505
  - Avoid an 'Attempt to reload Mail/SPF/Mech.pm aborted' error
  - Remove empty record structure in order to stringify it correctly
  - Redirect all references to openspf.org to open-spf.org
  - Fix pod test errors
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.20260331-1" date="1775044800">- Update to 3.20260331
  - Do not check for multiple CNAMEs if the included domain is a macro
- Drop build dependency on broken, dead upstream module Mail::SPF::Test</changelog>
</package>
<package pkgid="498f3fde375a67c1e83f416683af10610519e0b36706ebfa6252e9744179a798" name="perl-Mail-SPF-Test" arch="noarch">
  <version epoch="0" ver="1.001" rel="11.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001-11" date="1680091200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="3f4e9ff49f232bd71b08a4d577ffde6a598746579d2ad78d40d03cae4dfd9ab4" name="perl-Mail-SRS" arch="noarch">
  <version epoch="0" ver="0.31" rel="15.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-15" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="e7c717ce8e092330f9d2366d509ce7f88dac4386aa1f7b813dae76c5e67d76c3" name="perl-Mail-Sender" arch="noarch">
  <version epoch="1" ver="0.903" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.903-21" date="1686312000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="122ceb5d8a419d0989e0291491a402462115be1e0600dea53ce49fca4b911b0f" name="perl-Mail-Sendmail" arch="noarch">
  <version epoch="0" ver="0.83" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.82-1" date="1752580800">- Update to 0.82
  - Fixed typos (CPAN RT#88351, CPAN RT#119000)
 - Improvement to use Sys::Hostname::Long (CPAN RT#36112, GH#2)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.83-1" date="1783512000">- Update to 0.83
  - Strip CR/LF from header values, to prevent insertion of rogue headers
    (GH#11, CVE-2026-13092)
  - Switched to a new test Sendmail server for t/original.t, as the old one
    was no longer accepting connections
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="9768b911c88da5fc67f5f2b983d9d14d563b9a21de241da3792a8b3987da55a2" name="perl-MailTools" arch="noarch">
  <version epoch="0" ver="2.22" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.21-13" date="1682596800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.22-1" date="1731931200">- Update to 2.22 (rhbz#2326982)
  - To/Cc/Bcc/From fields may appear only once (GH#4)</changelog>
</package>
<package pkgid="73f287c991029ca875643e4d52952720b25ae777aa7340570d50f0144813285c" name="perl-Math-Base-Convert" arch="noarch">
  <version epoch="0" ver="0.13" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-1" date="1758024000">- Update to 0.13
  - Fix precedence issue highlighted by perl 5.42 (CPAN RT#168226)
  - Correct typo: 96 ASCII characters should be 95
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="22d6f7b71bdc333f1c29ac24fcd94f0f1847f2b1a339a3b8b0426c2bb2ca73b8" name="perl-Math-Round" arch="noarch">
  <version epoch="0" ver="0.08" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-25" date="1682596800">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1696939200">- Update to 0.08
  - NEILB has taken over maintenance
  - Added usual directory structure with lib/ and t/
  - Converted test.pl to traditional Test::More suite
  - Added LICENSE to doc and ensured metadata has license
  - Switched to dzil</changelog>
</package>
<package pkgid="d99ceca24ee50be7099fac99cdd42c778e55e2f03bc32a762e2649d9db2d39b2" name="perl-Meta-Builder" arch="noarch">
  <version epoch="0" ver="0.004" rel="14.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-14" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="65c625e0d5fd56a764102e58dbbfb1597b83eaa32eb0668c641478da8f4ba486" name="perl-MetaCPAN-Client" arch="noarch">
  <version epoch="0" ver="2.044000" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.033000-2" date="1752148800">- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker ≤ 7.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.034000-1" date="1764849600">- Update to 2.034000
  - Add distribution to list of known fields in DownloadURL response (GH#129)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.035000-1" date="1767787200">- Update to 2.035000
  - Fix a compatibility issue for ES 8 in scroller setting (GH#131)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.037000-1" date="1767873600">- Update to 2.037000
  - Fix es_filter to merge into query (GH#132)
  - More ES 8 related fixes (GH#133)
  - Updated scripts in examples/ (GH#133)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.038000-1" date="1769774400">- Update to 2.038000
  - Support CVE index</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.039000-1" date="1772280000">- Update to 2.039000
  - Add more types that can be scrolled (GH#134)
  - Fix 'all' fetching from CVE and example scripts (GH#135)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.040000-1" date="1773057600">- Update to 2.040000
  - Use a boolean in reverse_deps term (GH#136)
  - Allow JSON-&gt;true and JSON-&gt;false (GH#137)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.042000-1" date="1777291200">- Update to 2.042000
  - Rating: Fail instead of silent empty response (GH#141)
  - CVE: Clean-up and updated (GH#142)
  - CVE: Fixed search + unbroke 'all' method (GH#144)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.043000-1" date="1777550400">- Update to 2.043000
  - Cleaned up code references to 'type' (GH#148)
  - Support count method (GH#147)
  - Fixed author fields list (GH#145)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.044000-1" date="1782216000">- Update to 2.044000
  - ResultSet: items return an arrayref (GH#151, GH#152)
  - Documentation updates (GH#150)</changelog>
</package>
<package pkgid="f4f7fcd6d387aa1d4e74fff24f52eca45c1ee26e0895b66a0d7e1454c681caaf" name="perl-Mixin-Linewise" arch="noarch">
  <version epoch="0" ver="0.111" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.111-1" date="1672574400">- Update to 0.111
  - Update author information
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.111-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="86a5561760ba5d684ae3e26d73e83be9a238bc289cd4b0569e7e4a8d638b514b" name="perl-Mock-Quick" arch="noarch">
  <version epoch="0" ver="1.111" rel="20.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.111-20" date="1681128000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="de2f941513291759efea56d065c1ed0c6e7fb7c2dbec4ea4626265669aa3c891" name="perl-Module-Build" arch="noarch">
  <version epoch="2" ver="0.42.34" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.31-12" date="1648555200">- Handle missing ExtUtils::CBuilder as a missing compiler (#1547165)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.32-1" date="1670587200">- Update to 0.4232
  - Drop Pod::Man dependency for 5.8 compatibility
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:0.42.34-1" date="1682683200">- Update to 0.4234
  - PodParser now respects =encoding directives
  - Don't use libraries in t/bundled for Build.PL
  - make_tarball: workaround for broken tar on Darwin
  - Respect $Config{man1ext}/$Config{man3ext}
  - Do not require a compiler if c_source is an empty list
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="9f7e11dade3201ee574c55f8aa3a5f7915c4dc05278df2f98a72cafa3ca9b8a2" name="perl-Module-Build-Deprecated" arch="noarch">
  <version epoch="0" ver="0.4210" rel="26.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4210-26" date="1689681600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="fc7ee499c5bb86a8b347c0234d5afbe46098b14d77cd2be0f3484202e182b776" name="perl-Module-Build-Tiny" arch="noarch">
  <version epoch="0" ver="0.053" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.048-1" date="1714392000">- Update to 0.048
  - Implement dynamic prerequisites</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.049-1" date="1725451200">- Update to 0.049
  - Make CPAN::Requirements::Dynamic an optional dependency
- This package retains hard dependency for consistency of use</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.050-1" date="1725451201">- Update to 0.050
  - Revert "Make CPAN::Requirements::Dynamic an optional dependency"
    (GH#36)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.051-1" date="1725624000">- Update to 0.051
  - Make CPAN::Requirements::Dynamic an optional dependency
- This package retains hard dependency for consistency of use
- Run tests verbosely</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.052-1" date="1747137600">- Update to 0.052
  - Add extra_compiler_flags and extra_linker_flags command line arguments</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.053-1" date="1772625600">- Update to 0.053
  - Always set dynamic_config=0 in MYMETA
  - Set PERL_DL_NONLAZY=1 during testing</changelog>
</package>
<package pkgid="1e672959e9ebb45608c4b0c49913c4d55994bff9aa9a4dd218fe66bacf882de7" name="perl-Module-Build-XSUtil" arch="noarch">
  <version epoch="0" ver="0.19" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.19-17" date="1674561600">- Spec tidy-up
  - Use SPDX-format license tag
  - Use %license unconditionally
  - Fix permissions of installed files
  - Avoid redundant perl(:MODULE_COMPAT_*) dependency</changelog>
</package>
<package pkgid="09d13f978261aa6e3440bb027e3054d1ff3d08ec03b23b85098313716c56b9ae" name="perl-Module-CPANTS-Analyse" arch="noarch">
  <version epoch="0" ver="1.03" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-2" date="1780056000">- Use relative symlinks rather than absolute symlinks in test (GH#51)
- Assume List::Util 1.33 is always available
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-1" date="1782302400">- Update to 1.03
  - Fix tests to work with newer Archive::Tar (GH#51)
  - Check link errors and warnings while extracting an archive</changelog>
</package>
<package pkgid="f79aee0940ad70e2b3e1fc0fb9f1b45e5c803af283ef41808722125d59620822" name="perl-Module-CPANfile" arch="noarch">
  <version epoch="0" ver="1.1004" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1004-12" date="1631534400">- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1004-16" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="db2148262795c7b23cd6925a67b886760633643dae724d9e07e11c8122fbd510" name="perl-Module-CoreList" arch="noarch">
  <version epoch="1" ver="5.20260720" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20251220-1" date="1766404800">- Update to 5.20251220
  - Updated for v5.43.6</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260119-1" date="1768910400">- Update to 5.20260119
  - Updated for v5.43.7</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260220-1" date="1771675200">- Update to 5.20260220
  - Updated for v5.43.8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260308-1" date="1773057600">- Update to 5.20260308
  - Updated for v5.42.1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260320-1" date="1774180800">- Update to 5.20260320
  - Updated for v5.43.9</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260330-1" date="1774872000">- Update to 5.20260330
  - Updated for v5.42.2
  - Updated for v5.40.4</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260420-1" date="1776686400">- Update to 5.20260420
  - Updated for v5.43.10</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260601-1" date="1780401600">- Update to 5.20260601
  - Updated for v5.43.11</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260708-1" date="1784203200">- Update to 5.20260708
  - Updated for v5.44.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:5.20260720-1" date="1784721600">- Update to 5.20260720
  - Updated for v5.45.1</changelog>
</package>
<package pkgid="7b1bc6cc892a4ab16bc801e4a9792b2b43a6155a4ceea3ee599d3ee9af2549a0" name="perl-Module-Extract-Namespaces" arch="noarch">
  <version epoch="0" ver="1.026" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.023-4" date="1682683200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.024-1" date="1707652800">- Update to 1.024
  - Refresh distro, update email address, release under new PAUSE ID BRIANDFOY</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.025-1" date="1737979200">- Update to 1.025
  - Refresh distro
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.026-1" date="1744632000">- Update to 1.026
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="15cdef0d669ca899f9942c1de3357792d7643db4bc46b9ca36cf286c84a8a832" name="perl-Module-Extract-Use" arch="noarch">
  <version epoch="0" ver="1.055" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.053-1" date="1723896000">- Update to 1.053
  - More upstream metadata changes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.054-1" date="1744632000">- Update to 1.054
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.055-1" date="1776600000">- Update to 1.055
  - extract_modules can now search PATH for file</changelog>
</package>
<package pkgid="2040c15575bac24787a143c60b0baba3c7bbb9b00379e0bdaa3376df9758f1ab" name="perl-Module-Extract-VERSION" arch="noarch">
  <version epoch="0" ver="1.121" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.118-1" date="1737547200">- Update to 1.118
  - Refresh dist
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-1" date="1744718400">- Update to 1.119
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.121-1" date="1782129600">- Update to 1.121
  - Support the old qv() syntax from version.pm</changelog>
</package>
<package pkgid="43c98896eea9482d59b5d22ec9077de83ef2fbaee0345fec528214b884c3be14" name="perl-Module-ExtractUse" arch="noarch">
  <version epoch="0" ver="0.345" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.345-1" date="1673956800">- Update to 0.345
  - Auto generate meta_yml_has_provides experimental Kwalitee
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.345-5" date="1718366400">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="672bb9e22c42319627d3c2497cae3d5ec6cc79bed8826b9559707de0692121c8" name="perl-Module-Find" arch="noarch">
  <version epoch="0" ver="0.17" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.16-3" date="1682596800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-1" date="1739793600">- Update to 0.17
  - Avoid warnings when extracting the distribution tarball, which prevented
    installation under cpanm and other tools (GH#13, CPAN RT#148978)</changelog>
</package>
<package pkgid="2713fd0ef596aa2e68d3f8f7159b7aaa2165b8f76e3c68986c9e763b54ae0bd6" name="perl-Module-Implementation" arch="noarch">
  <version epoch="0" ver="0.09" rel="36.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-36" date="1682856000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="af9aa7ad6bfbeab40bd7046d5fb5f2d69a7c7cbcfcb473b3f003ec347d4cb050" name="perl-Module-Info" arch="noarch">
  <version epoch="0" ver="0.39" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-22" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.39-1" date="1724846400">- Update to 0.39
  - Get rid of ' as package namespace separator
  - Fixed compatibility with 5.8.1 (CPAN RT#129677)</changelog>
</package>
<package pkgid="bb95cacade3f7f74375a35d2cec943c3ff371c7ae4702c27a54b045abf8ea284" name="perl-Module-Load" arch="noarch">
  <version epoch="1" ver="0.36" rel="499.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.36-499" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="b8853b5dccaf7c299bbe546e502355e503117c0aeefa751f4e15811c50adcd36" name="perl-Module-Load-Conditional" arch="noarch">
  <version epoch="0" ver="0.74" rel="499.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.74-499" date="1689595200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="86bf456d4293417bedc7ef059c2688584d6cb98a5c67c68c57906b3f8a115c6e" name="perl-Module-Manifest" arch="noarch">
  <version epoch="0" ver="1.09" rel="18.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-18" date="1689681600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="743eca3b28f73b289b4f7feb816078ff5dd66b0e47cf5941d84d958de4d8c6e5" name="perl-Module-Metadata" arch="noarch">
  <version epoch="0" ver="1.000039" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000039-1" date="1775304000">- Update to 1.000039
  - Adds recognition of attributes in "class" declarations (GH#39)
- User %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="211a8e663f5e7777cf9610dcc63835654ab9a1b59412a6b69535924be14686ad" name="perl-Module-Pluggable" arch="noarch">
  <version epoch="2" ver="6.4" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.1-1" date="1729684800">- Update to 6.1
  - Fix typo in examples
  - Fix spelling of "FatPacker"
  - Add before_instantiate and after_instantiate hooks
  - Use explicit test plan instead of done_testing
  - Don't use vars, use our
  - Ignore the .AppleDouble
  - Improve vim swapfile patterns
  - Fix behaviour of File::Find and symlinks on certain versions of Win32
  - Skip unreadable files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.2-1" date="1729857600">- Update to 6.2
  - Add search_dirs, searching filesystem, different from search_path,
    searching namespace</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.2-2" date="1730030400">- Fix clean-up of temporary directory in test (CPAN RT#156362)
- Work around failure of unreadable file test when running as root (CPAN RT#156367)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.3-1" date="1736596800">- Update to 6.3
  - Fix make_path() in t/29unreadable.t (CPAN RT#156362)
  - Fix t/29unreadable.t tests failing as root (CPAN RT#156367)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2:6.4-1" date="1785153600">- Update to 6.4
  - Add a CI/CD pipeline for the first time in 26 years
  - Add the ability to make search search "strict" and only walk the given
    search_dirs
  - Add much more documentation to Module::Pluggable::Object
  - Make it so that you can give each search_path its own custom options
  - Finally fix spurious test failure because of already installed modules
  - Remove optional_features from Makefile.PL META_MERGE that sometimes caused
    installation confusion
  - Add the ability to have different sorting algorithms
  - Fix the issues with OSX extended-attributes on files
  - Clean up old stale core-lib</changelog>
</package>
<package pkgid="e09687d932daa878770bcdb7db9afd4e5c83dc492ba5eb4da07d06a8ea9c2ad1" name="perl-Module-Refresh" arch="noarch">
  <version epoch="0" ver="0.18" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-1" date="1652184000">- Update to 0.18
  - Fix uninitialized warnings when modules were not successfully loaded</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-5" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="8ec436039a5fcf1a0afafdfed389b691b68e0b5c5e77bf02d18b1282d18d62b0" name="perl-Module-Runtime" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.016-19" date="1689336000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1743940800">- Update to 0.017 (rhbz#2357698)
  - Fixed internal Pod links
  - Various internal formatting changes
  - Check for eval failures via return value, not $@
  - Update packaging to remove Module::Build and set x_static_install
  - Remove broken SIGNATURE file
- Switch to ExtUtils::MakeMaker flow
- Package LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1745236800">- Update to 0.018
  - Avoid xattr headers in release tarball
  - Minor code reformatting</changelog>
</package>
<package pkgid="a4333a7a4bde1fb502c4993ef1ae24aeb601102c5c6faad1cfb49a0e000f2aaf" name="perl-Module-Runtime-Conflicts" arch="noarch">
  <version epoch="0" ver="0.003" rel="20.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-20" date="1689336000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="046c51e0ed3f6a1fe82708ffba1e46c9200d8574c1a6b9a82ead53618bdfa955" name="perl-Module-Signature" arch="noarch">
  <version epoch="0" ver="0.96" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.89-1" date="1726488000">- Update to 0.89
  - Replace keyserver with keyserver.ubuntu.com (GH#34, GH#38)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.90-1" date="1749816000">- Update to 0.90
  - Fix fail on signature file with an unexpected empty line (CPAN RT#166901)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.92-1" date="1751025600">- Update to 0.92
 - Add SECURITY.md policy
 - Move to three-arg open
 - Remove spaces from eol
 - Change build process to Dist::Zilla
- Recommend perldoc and PAR::Dist, needed for some cpansign functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.93-1" date="1751112000">- Update to 0.93
  - The cpansign script was not installed with version 0.92 (GH#44)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.95-1" date="1777291200">- Update to 0.95 (rhbz#2461945)
  - Announce deprecation of the module</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.96-1" date="1777377600">- Update to 0.96
  - Fix issue from last release where search keys is interactive
- SECURITY.md no longer shipped</changelog>
</package>
<package pkgid="131e138c59c725ba51cc8f82281b9c58ab797c548e34bdd4d64f351a8dbfbcc4" name="perl-MojoX-MIME-Types" arch="noarch">
  <version epoch="0" ver="2.30" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.24-5" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-1" date="1707220800">- Update to 2.26
  - IANA updates
  - Support multi-level extensions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.26-3" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.27-1" date="1738929600">- Update to 2.27
  - IANA updates
  - Explicitly set $/ before reading the file by line</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-1" date="1745064000">- Update to 2.28
  Fixes:
  - Some 'deprecated' texts made it to types.db
  Improvements:
  - text/ecmascript RFC9239
  - Default charsets according to RFC6657
  - Update reference to specs RFC6838 and RFC9694
  - IANA updates
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.28-2" date="1753531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.29-1" date="1757937600">- Update to 2.29
  - Require 5.16 (2012)
  - Remove xt/98perl.t
  - ::Type-&gt;defaultCharset()
  - Remove use of bareword filehandle
  - IANA updates</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.30-1" date="1765195200">- Update to 2.30
  Fixes:
  - No undef when simplifying illegal type (GH#15)
  Improvements:
  - Add bugtracker to meta
  - Better OO use of attributes</changelog>
</package>
<package pkgid="cc7a0e6d5f3afc22984406e496ca5bcd765cbde78993455755c31cda2f85d8c5" name="perl-Moo" arch="noarch">
  <version epoch="0" ver="2.005005" rel="11.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.005005-11" date="1768996800">- Assume Sub::Util is always available
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="7086f177cf56949a3f35575efe9e542d58bde713a2ddaaad24e3873ca04e5cfd" name="perl-Moose" arch="x86_64">
  <version epoch="0" ver="2.4000" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2203-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2205-1" date="1690113600">- Update to 2.2205 (rhbz#2224800)
  Tests
  - Adjust the expected list of UNIVERSAL methods, to account for changes in
    perl 5.39.1: some things, like the import method, could end up existing
    based on the perl version or based on a prerequite loading UNIVERSAL.pm
    (GH#183)
- Revert test change for Perl 5.39 if our perl is older than 5.22</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2206-1" date="1690113601">- Update to 2.2206
  - Fix parsing error in test in 2.2205 release</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-1" date="1705838400">- Update to 2.2207
  - Remove test dependency on Test::CleanNamespaces (GH#184)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-2" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-5" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6.1" date="1745150400">- Add provide for Moose::Conflicts, used in test suite for MooseX-Types
- Use %{make_build} and %{make_install}
- Drop Obsoletes/Provides for perl-Class-MOP, merged into perl-Moose in Fedora
  15 (2011)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4000-1.0" date="1751889600">- Update to 2.4000
  Documentation
  - Clarified some wording regarding the interactions between attribute
    configuration options "init_arg" and "required" (GH#187)
  Other
  - The release schedule and numbering scheme has changed; see
    Moose::Manual::Support</changelog>
</package>
<package pkgid="6de511522aa62e7b3d02e83673f967fc4341a3f37d7204cafbd10a04c56bb16f" name="perl-MooseX-GlobRef" arch="noarch">
  <version epoch="0" ver="0.0701" rel="35.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0701-35" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="387fcd6550950497de6135ed80556d266ea8077fb8e1d1a270064b2030fe639d" name="perl-MooseX-InsideOut" arch="noarch">
  <version epoch="0" ver="0.106" rel="35.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.106-35" date="1682942400">- Use SPDX-format license tag
- Use author-independent source URL
- Use %license unconditionally</changelog>
</package>
<package pkgid="2e1211b1041924815d09e0258de8f48d3543906338d01e6a2264f84a4085a546" name="perl-MooseX-NonMoose" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-26" date="1682942400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1735905600">- Update to 0.27
  - Drop dependency on List::MoreUtils
  - New maintainer and repository: https://github.com/uperl/MooseX-NonMoose</changelog>
</package>
<package pkgid="aa41d3db3f6afb9e176ffdfdedca16ff3a46e00690602befe7c08d6d03dd56eb" name="perl-MooseX-Role-Parameterized" arch="noarch">
  <version epoch="0" ver="1.11" rel="12.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-12" date="1682942400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e41b80dd0b521750fe124e247b58c01f0d3be687b43137bfe53cfc0b99284e01" name="perl-MooseX-Role-WithOverloading" arch="x86_64">
  <version epoch="0" ver="0.17" rel="30.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-25" date="1682942400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-26" date="1689422400">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-30" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="2c28ed54f79d0a2fbaca2b228f5235d3c3eedaebf76467a6063ae72195e0157c" name="perl-MooseX-Types" arch="noarch">
  <version epoch="0" ver="0.51" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-19" date="1683028800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Fix permissions of installed files
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1745150400">- Update to 0.51
  - Use Sub::Util rather than Sub::Name, since Sub::Util is in core</changelog>
</package>
<package pkgid="320a187640e394d4a25f079888b8f4167a7c1a2a79df7120a9bcdfa84b73b9dd" name="perl-Mouse" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-21" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-22" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-1" date="1722772800">- Update to 2.5.11
  - Use Devel-PPPort 3.59 (GH#113)
  - Mark "builtin" as foreign (GH#123)
- Update bundled ppport.h to version 3.62</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-4" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-5" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.0-1" date="1761825600">- Update to 2.6.0 (rhbz#2407306)
  - Update minimum perl version from 5.8 =&gt; 5.10 (GH#112)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-1" date="1766232000">- Update to 2.6.1 (rhbz#2424094)
  - Provide empty import on Mouse::Deprecated for imported Moose test
    (GH#120, GH#127)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.2-1" date="1775390400">- Update to 2.6.2 (rhbz#2455030)
  - Fix the conversion from floating point number to string with quadmath Perl
    (GH#126)</changelog>
</package>
<package pkgid="411d5c4801cdfd7d664b8b0220e798e1f33b2e90464a2479250b162ed3ef28c9" name="perl-Net-CIDR" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-1" date="1741521600">- Update to 0.22
  - Improve several error messages
  - Allow unabbreviated IPv6 addresses
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1741608000">- Update to 0.23
  - Allow unabbreviated IPv6 addresses</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1747742400">- Update to 0.24 (no changes)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24.1-1" date="1747828800">- Update to 0.24.1
  - Strip extra leading zeros from octets in addr2cidr (GH#4)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-1" date="1748088000">- Update to 0.25
  - Fix warning with Perl 5.40</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-1" date="1750593600">- Update to 0.26
  - cidrvalidate() should accept IPv6 addresses with one uncompressed 0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1755086400">- Update to 0.27
  - cidrvalidate() bug fix (GH#9)</changelog>
</package>
<package pkgid="b646ad5b42b1342244f555f3c7cde4813672347984e7b9007567138d725b9a98" name="perl-Net-CIDR-Lite" arch="noarch">
  <version epoch="0" ver="0.24" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1775908800">- Update to 0.23
  - Security: Fix IPv4 mapped IPv6 packed length (CVE-2026-40199)
  - Security: Reject invalid uncompressed IPv6 (CVE-2026-40198)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1778500800">- Update to 0.24
  - Reject Unicode digits and trailing newlines in parser inputs
    (CVE-2026-45190)
  - Reject zero-padded CIDR masks (CVE-2026-45191)</changelog>
</package>
<package pkgid="7d61a72f8ac22023612df8f096b172b0a9e1ded248825a7403de3d423b57c71b" name="perl-Net-DNS" arch="noarch">
  <version epoch="0" ver="1.56" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.0.cf" date="1751889600">- Update to 1.51
  - Resync with IANA DNS Parameters registry
  - Add prototype DELEG RR package
  - Minor code and documentation improvements
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.1.cf" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-1.0.cf" date="1753876800">- Update to 1.52
  - Refactor SVCB to avoid internal use of generic keyNN
  - DELEG documentation and code improvement
  - Fix bug in resolver base selection on non-Unix/Linux platforms
    (CPAN RT#168433)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1756814400">- Update to 1.53
  - Suppress autovivified undefined $rr-&gt;{class} and $rr-&gt;{ttl}
  - Rework test scripts for SVCB and DELEG</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-2.0.cf" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1768824001">- Update to 1.54
  - Resync with IANA DNS parameters registry
  - Resync with IANA DNSSEC algorithms registry
  - Backport DELEG parser to SVCB</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1781179200">- Update to 1.55
  - Fix UDP truncation tests that relied on large RSA RRSIGs
  - Fix unhelpful TAINT error (CPAN RT#178183)
  - TCP read loop treated 1-byte recv() of "0" (0x30) as EOF, corrupting AXFRs
    (CPAN RT#177003)
  - UNIX.pm: Avoid `backticks` that depend on shell (CPAN RT#176900)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1784462400">- Update to 1.56
  - Fix documentation issue for Net::DNS::RR::RRSIG::verify() (CPAN RT#180088)
  - Fix Denial of Service via long DNS compression chains (CPAN RT#179946)
  - Fix remote code injection via EDNS EXTENDED ERROR (CPAN RT#179945)
  - Fix unreachable code warning in UNIX.pm using Apache/mod_perl
    (CPAN RT#179692, CPAN RT#176900)</changelog>
</package>
<package pkgid="3fb7c26276f12b087074b9a597f046b7ccea2b886e133afff4af0138925ca06a" name="perl-Net-DNS-Nameserver" arch="noarch">
  <version epoch="0" ver="1.56" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.0.cf" date="1751889600">- Update to 1.51
  - Resync with IANA DNS Parameters registry
  - Add prototype DELEG RR package
  - Minor code and documentation improvements
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-1.1.cf" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.51-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-1.0.cf" date="1753876800">- Update to 1.52
  - Refactor SVCB to avoid internal use of generic keyNN
  - DELEG documentation and code improvement
  - Fix bug in resolver base selection on non-Unix/Linux platforms
    (CPAN RT#168433)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-1.0.cf" date="1756814400">- Update to 1.53
  - Suppress autovivified undefined $rr-&gt;{class} and $rr-&gt;{ttl}
  - Rework test scripts for SVCB and DELEG</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.53-2.0.cf" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.54-1.0.cf" date="1768824001">- Update to 1.54
  - Resync with IANA DNS parameters registry
  - Resync with IANA DNSSEC algorithms registry
  - Backport DELEG parser to SVCB</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-1.0.cf" date="1781179200">- Update to 1.55
  - Fix UDP truncation tests that relied on large RSA RRSIGs
  - Fix unhelpful TAINT error (CPAN RT#178183)
  - TCP read loop treated 1-byte recv() of "0" (0x30) as EOF, corrupting AXFRs
    (CPAN RT#177003)
  - UNIX.pm: Avoid `backticks` that depend on shell (CPAN RT#176900)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.55-2.0.cf" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1.0.cf" date="1784462400">- Update to 1.56
  - Fix documentation issue for Net::DNS::RR::RRSIG::verify() (CPAN RT#180088)
  - Fix Denial of Service via long DNS compression chains (CPAN RT#179946)
  - Fix remote code injection via EDNS EXTENDED ERROR (CPAN RT#179945)
  - Fix unreachable code warning in UNIX.pm using Apache/mod_perl
    (CPAN RT#179692, CPAN RT#176900)</changelog>
</package>
<package pkgid="aba4e9a2e25fded5dab998f0ab297654365cf178ec67ee77824c85ab136b1891" name="perl-Net-DNS-Resolver-Programmable" arch="noarch">
  <version epoch="0" ver="0.009" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.009-17" date="1680091200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="4e233ba1073911ef528fe99439704563ffd9d289cdc51df22ace3150e792e1ae" name="perl-Net-Daemon" arch="noarch">
  <version epoch="0" ver="0.52" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1774267200">- Update to 0.51
  Bug fixes:
  - Fix Socket::INADDR_ANY constant for unix socket client auth (GH#1, GH#27)
  - Fix post_clone() hook - Clone() never called new(), so the
    $self-&gt;{'parent'} check in new() was dead code; added post_clone() method
    that Clone() calls after creating the new object (GH#2, GH#26)
  - Open logfile when filename string is provided via --logfile; OpenLog()
    previously returned the logfile value as-is when it was a defined string,
    causing Log() to fall through to STDERR (CPAN RT#76133, GH#3, GH#25)
  - Reap forked child processes to prevent zombie accumulation; SigChildHandler
    now uses a proper waitpid reaper instead of returning 'IGNORE', fixing
    zombie buildup on Windows/Strawberry Perl after ~64 connections
    (GH#5, GH#23)
  - Fix ReadConfigFile implementation traversing @INC (CPAN RT#123213, GH#8)
  - Detach threads in ChildFunc to prevent memory leaks; thread objects were
    never joined or detached, causing leftover thread mappings to accumulate
    (GH#12, GH#22)
  - Only load threads if forks hasn't already been loaded and threads exists
    (GH#16)
  Improvements:
  - Add post_clone() hook for per-connection initialization; sub-classes can
    override to perform per-connection setup (GH#2, GH#26)
  - Add --listen option to Options() to allow overriding the default listen
    backlog of 10 (GH#4, GH#24)
  Maintenance:
  - Modernize Makefile.PL metadata: add LICENSE, MIN_PERL_VERSION,
    TEST_REQUIRES, upgrade META_MERGE to meta-spec v2, update GitHub URLs
    (GH#28)
  - Modernize CI workflow: upgrade actions/checkout to v4, use
    perldocker/perl-tester images, dynamic Perl version matrix covering 5.8
    through devel, add disttest job (GH#29)
  - Disable t/ithreadm.t for Windows (GH#19)
  - Improve skip messages and detection of ithreads/forks in tests
  - Convert t/base.t to Test::More
  - Apply consistent perltidy formatting
  - Add strict/warnings, replace 'use vars' with 'our'
  - Remove perl 4-ish subroutine calls
- Use %{make_build} and %{make_install}
- Note that Net::Daemon::Test is GPL-2.0-or-later</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1775476800">- Update to 0.52
  Bug fixes:
  - Fix dead $RegExpLock that was never acquired in ithreads mode; the lock
    variable existed but was never actually locked before regexp compilation,
    leaving ithreads unprotected; also fix share() call to pass explicit ref
    for runtime-loaded prototype (GH#33)
  - Fix ithreads auto-detection to gate on Perl 5.10+ and exclude Windows; on
    Perl 5.8.x threads::shared is never loaded, making lock() a no-op; on
    Windows, DuplicateHandle() corrupts Winsock sockets - WSADuplicateSocket()
    is required instead (GH#19, GH#30, GH#34, GH#35, GH#50)
  - Correct $eventId hash key typo in Log.pm that prevented event IDs from
    being logged (GH#36)
  - Fix Done() call in test server Loop method - was called without arguments,
    preventing proper server shutdown (GH#38)
  - Clean up stale test artifacts (log, ndtest.cnt) (GH#40)
  - Harden ReadConfigFile against $@ contamination and $! errors (GH#44)
  - Skip pidfile write when pidfile option is not set, preventing spurious
    empty pidfile creation (GH#45)
  - Close cloned listening socket in ithreads handler threads; Perl ithreads
    dup every open handle into new threads; on Windows closing these at thread
    exit invalidated the parent's handle; also re-add Windows skip with
    root-cause documentation (GH#19, GH#30, GH#46)
  - Address CPAN testers failures in t/reap.t and t/fork.t (GH#48)
  - Skip ithread-detach.t on Perl &lt; 5.10 (GH#49)
  - Verify privilege drop succeeded in Bind(); assigning to $&gt;/$) silently
    fails without permission - the daemon would continue running as root (GH#51)
  - Use POSIX::setuid/setgid for permanent privilege drop in Bind(); the
    previous $&lt; = ($&gt; = $user) left saved-set-user-ID as root, allowing a
    compromised process to regain privileges (GH#55)
  Improvements:
  - Modernize open() calls to 3-arg form with lexical filehandles throughout
    the codebase (GH#41)
  Maintenance:
  - Fix POD typos and remove outdated alpha warning (GH#37)
  - Fix stale --mode=threads references and config example syntax in
    documentation (GH#39)
  - Update ancient FSF address in Net::Daemon::Test copyright (GH#35)
  - Convert server tests from raw TAP to Test::More (GH#42)
  - Convert ithreads tests to Test::More and fix Test.pm fd leak (GH#43)
  - Convert remaining tests (loop.t, loop-child.t, unix_clients.t, forkm.t) to
    Test::More (GH#47)</changelog>
</package>
<package pkgid="4870b0f30d75dee599484d9ba16b0c9f1c19237624ccb7a13282833d455a5021" name="perl-Net-FTPSSL" arch="noarch">
  <version epoch="0" ver="0.42" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.42-2" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e446b5998f4f9c20ba0c5f4b79c59ca56acbc4a835290fc69c853a9c105d2a02" name="perl-Net-HTTPTunnel" arch="noarch">
  <version epoch="0" ver="0.51" rel="4.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-4" date="1689681600">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="dd30ac7138ae407c8ffa75c6139736b8c110cc09060037f36492e7d91ddae695" name="perl-Net-IDN-Encode" arch="x86_64">
  <version epoch="0" ver="2.500" rel="22.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-17" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-21" date="1714737600">- Adapt to perl-5.38.0 and stricter GCC (rhbz#2241714)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.500-22" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="3cdd28aa47e9084afe28a1cf9873fbb987a1d1e3ef917970f3a54643922ef405" name="perl-Net-IP" arch="noarch">
  <version epoch="0" ver="1.26" rel="30.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-30" date="1683288000">- Use SPDX-format license tag
- Switch upstream from search.cpan,org to metacpan.org
- Avoid use of deprecated patch syntax
- Use %license unconditionally
- Package README file</changelog>
</package>
<package pkgid="e2efe5eb1e6fb7302ac97e15e5a77e3cf46a5f6ba8e8cbb75acee247e1ecdad1" name="perl-Net-LibIDN" arch="x86_64">
  <version epoch="0" ver="0.12" rel="50.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-46" date="1689163200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-50" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="0d70f9c1ea471054dce60bfdaa1cc066efe5b2e5605e76fbd8a1af0c7995cdac" name="perl-Net-SMTP-SSL" arch="noarch">
  <version epoch="0" ver="1.04" rel="20.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-20" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="46451ef39fc03dc831df7172aa8b86526f034d4088af82896d2b1a563b8b3ce5" name="perl-Net-SMTP-TLS" arch="noarch">
  <version epoch="0" ver="0.12" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.12-2" date="1689768000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="48d47f881c3478613cde636d9f24dc896f2dd7e1257325d751d5c94af3204ab3" name="perl-Net-SSLeay" arch="x86_64">
  <version epoch="0" ver="1.96" rel="2.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-4.0.cf" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-5.0.cf" date="1720526400">- BR: openssl-devel-engine on Fedora 41 onwards, at least for now, as the
  build fails in the absence of &lt;openssl/engine.h&gt; (rhbz#2295331)
  (https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-7.0.cf" date="1721736000">- Build without OpenSSL ENGINE support from Fedora 41 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-9.0.cf" date="1742990400">- Fix for test suite compatibility with OpenSSL 3.4
  (https://github.com/radiator-software/p5-net-ssleay/pull/514)
- Drop support for old distributions prior to F-28, EL-8
  - Drop F-26 compatibility patch
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.94-10.0.cf" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.96-1.0.cf" date="1774180800">- Update to 1.96
  - Skip NPN tests when NPN is disabled in OpenSSL instead of assuming NPN is
    always enabled
  - Update GitHub Actions CI workflow; a number of test jobs were broken
    because some GitHub runners were discontinued, changes in QEMU setup,
    changes in Cygwin, etc.
  - Adjust test 32_x509_get_cert_info.t to match formatting changes in
    OpenSSL 3.4.0 and 3.4.1
  - OpenSSL 3.9.0 and later remove EVP_add_digest()
  - Increase timeout in 62_threads-ctx_new-deadlock.t to allow the test to pass
    on very slow platforms
  - Add missing documentation for STACK_OF() free functions sk_X509_free and
    sk_X509_INFO_free
  - Add $prefx/lib/64 to lib paths in Makefile.PL for Illumos
  - Support vendor-supplied OpenSSL 3.x on VMS and update %ENV modification in
    test 10_rand.t to work on VMS
  - Compiler -D switches Makefile.PL sets are no longer added to the MakeMaker
    CCFLAG attribute because of portability reasons; the switches are now
    passed either via WriteMakefile() or appending them to the
    'perl Makefile.PL ...' DEFINE argument
  - Update GitHub Actions CI testing:
    - Perl on Ubuntu 24.04: Add Perl 5.38, 5.40 and 5.42, add OpenSSL 3.3, 3.4
      and 3.5 minor releases, add LibreSSL 3.9, 4.0 and 4.1 release branches
    - Alpine Linux: Remove 3.15, 3.16 and 3.17; Add 3.19, 3.20, 3.21 and 3.22
    - Freebsd: Add 14.3 and replace 13.2 with 13.5
    - OpenBSD: Add 7.6 and 7.7. Remove 7.2 and 7.3
    - NetBSD: Add 10.1 and replace 9.3 with 9.4
  - Update test 62_threads-ctx_new-deadlock.t to work with LibreSSL 4.1.0
  - Support SSL_CTX_set1_sigalgs_list and SSL_CTX_set1_client_sigalgs_list
  - Support SSL_set1_sigalgs_list, SSL_set1_client_sigalgs_list,
    SSL_get_sigalgs and SSL_get_shared_sigalgs, and add the function
    SSL_CTX_set_cert_cb
  - Add test file 67_sigalgs.t for the sigalgs functions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.96-2.0.cf" date="1781092800">- Add support for OpenSSL 4.0.0 (rhbz#2458197, GH#553)</changelog>
</package>
<package pkgid="c7290af140f7ad6afe24b972391e36d50e0305809ffec6c0f902c891e5b04b48" name="perl-Net-Server" arch="noarch">
  <version epoch="0" ver="2.018" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.014-6" date="1726574400">- Only initialize existing Net::SSLeay methods
  - https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
  - https://rt.cpan.org/Public/Bug/Display.html?id=154333
  - https://github.com/rhandom/perl-net-server/pull/38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.015-1" date="1769083200">- Update to 2.015
  - Compatibility fix to work with MakeMaker prior to 6.58 (GH#35)
  - Update META info from dzil (CPAN RT#94977)
  - Compatibility fix to work with Net::SSLeay prior to 1.34 (GH#38)
  - Multiplex fix for Perl 5.40.x (CPAN RT#172029)
  - Compatibility fix to work with Socket.pm prior to 1.93
  - Remove all bindv6only sniffing; always use setsockopt to set IPV6_V6ONLY
    flag appropriately based on {ipv}
  - Honour {ipv6_package} preference, if specified
  - Fix to work without deprecated "Socket6.pm" module (IO::Socket::IP can
    handle everything now)
  - Fix {reverse_lookups} with {udp_true}
  - Fix tests where "localhost" is not listed as IPv6 loopback
  - Add more various {ipv} and NO_IPV6 tests
  - Fix comments, wordings, messages, and POD (CPAN RT#85052)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.016-1" date="1769688000">- Update to 2.016
  - Honour platform-provided IPV6_V6ONLY value
  - Fix $xflags NIx_* logic emulation
  - Make stub honour wantarray context invocation
  - Don't require ipv6_package to run routines
  - Show correct line number if stub routine dies
  - Warn clean safe_* routines
  - Avoid "string" eval
  - Allow caller to import any Proto routine
  - Allow to import all exportable Socket macros</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.017-1" date="1770638400">- Update to 2.017
  - Address IO::Socket rudely force-importing random symbols
  - Warn-clean IO::Socket::INET6 "Subroutine redefined" spewage
  - Various patches generated with the help of Grok4 xAI
  - Various test suite framework improvements
    - Make test suites return non-zero upon failure
    - Fix IPv6 pre-check for tests
    - Timeout test server if client crashes, instead of rudely mooching on the
      listen port forever in the background
  - Warn-clean for older MakeMaker, such as 6.30
  - Fix POD errors
  - Allow static Proto methods to be imported as normal routines
  - Create Net::Server::IP compatibility wrapper module
  - Honour {ipv6_package} config preference more reliably
  - GetAddrInfoFlags compatibility patch for systems with spoofed networks on
    loopback interfaces using IO::Socket::IP
    - Now IPv4 and IPv6 finally work with OpenVZ or fake loopback or venet0 or
      even on IPv6-only machines even without public routability for that AF_*
      Address Family (these used to fail)
  - Handle special IPv6 behaviours, like OpenBSD and WinXP
  - Emulate IO::Socket::IP {V6Only} behaviour for IO:Socket::INET6
  - Fall back to IO::Socket::INET if no IPv6 module available
  - Various SSLEAY fixes:
    - Add more SSLEAY tests to help with debugging
    - Fixed errors on older Net::SSLeay &lt; 1.49
    - Fix tied SYSREAD $scalar input syntax instead of only ref \$scalar
      sysread FILEHANDLE,SCALAR,LENGTH,OFFSET
    - Fix SSLEAY-&gt;read_until logic
    - Fixed some errors with newer Net::SSLeay &amp; OpenSSL 3.x:
      167772454. error:0A000126:SSL routines::unexpected eof while reading
      167772567. error:0A000197:SSL routines::shutdown while in init
  - Get test suite to pass cleanly on all variations tested:
    - Linux Kernel: 2.6.18, 3.10.0, 4.18.0, 5.14.0, 6.2.16, 6.8.0
    - Flavour: Ubuntu 24.04, Debian 12, Fedora 42, RHEL5/6/7/8/9
    - Windows: Cygwin, MinGW64, WinXP, Win7, Win10, Win11, GitBash
    - Other OS: OpenBSD, Darwin, MacOSX, FreeBSD
    - OpenSSL 0.9.8e, 1.0.1e, 1.0.2k, 1.1.1k, 3.2.2, 3.5.1
    - Hypervisor: OpenVZ, KVM, VirtualBox, VirtIO, VMWare, Docker
    - Dual-Stack Networks: IPv4, IPv6, IPv*, IPv4-Only, IPv6-Only
    - Perl: 5.8.8 5.10.1 5.16.3 5.26.3 5.32.1 5.34.1 5.36.0 5.38.2 5.40.2
    - Net::SSLeay: 1.30, 1.35, 1.55, 1.88, 1.94
    - Socket: 1.78, 1.82, 1.97, 1.99, 2.010, 2.027, 2.031, 2.040
    - Socket6: None, 0.19, 0.23, 0.28, 0.29
    - IO::Socket::IP: None, 0.21, 0.38, 0.41
    - IO::Socket::INET6: None 2.51 2.56 2.66 2.67 2.69 2.72 2.73</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.018-1" date="1771416000">- Update to 2.018
  - Add more ipv6_package tests
  - Fix t/Options.t to expect 0.0.0.0 on IPv4-only systems
  - Get rid of requires_ipv6() sniffing
  - Make Proto-&gt;object always return a single object
  - Honour {ipv6_package} config preference even for IPv*</changelog>
</package>
<package pkgid="0248d9e86ca23b522bb9c98c515650351a3d3d35e8ce878df6444f66509f31c9" name="perl-Net-Telnet" arch="noarch">
  <version epoch="0" ver="3.05" rel="6.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.05-6" date="1689681600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="7306443e4c9a81a7e6197cca6dde712e4a7f7a684604fcdd81943461520d9b0b" name="perl-NetAddr-IP" arch="x86_64">
  <version epoch="0" ver="4.079" rel="29.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-23" date="1686139200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-24" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-26" date="1705233600">- Socket6 will be dropped by Fedora from Fedora 40 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.079-29" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="fef3d662f36a94aff58b3cff2d5e741c4b8deef382788d3c9a79394d6f9847da" name="perl-Number-Compare" arch="noarch">
  <version epoch="0" ver="0.03" rel="35.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-35" date="1689336000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="10ead1e2e4b11cedc4ebb2d43490206679bb96debc80ea337317cc4fe22f6ec1" name="perl-Object-HashBase" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1724846400">- Update to 0.014
  - Add extra init() functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1725278400">- Update to 0.015
  - Fix double-import bug</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-3" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-4" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.016-1" date="1778587200">- Update to 0.016
  - Add [PruneCruft] to dist.ini so build artifacts (blib/, pm_to_blib,
    MYMETA.*) no longer leak into release tarballs
  - Add '@Class::Name' parent prefix to import (shortcut for `use parent`)
  - Add '&amp;Role::Name' role prefix to import (compose Role::Tiny role)
  - Skip 'new' injection when Object::HashBase is imported into a Role::Tiny
    role
  - Role::Tiny is a soft requirement, loaded only when '&amp;' prefix used
  - '&amp;' prefix requires Perl 5.10+</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1780920000">- Update to 0.017
  - List Role::Tiny (1.003000+) and Class::Method::Modifiers as RuntimeSuggests
    in dist.ini
  - Skip role tests when Role::Tiny is missing or older than 1.003000
    (no is_role), so install is not blocked
  - Move 'around' modifier test to its own file (t/role_modifiers.t) that skips
    when Class::Method::Modifiers is unavailable; Role::Tiny loads it lazily
    only for method modifiers (GH#5)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1781006400">- Update to 0.018
  - Fix bogus parent/role croaks losing their message on perl &lt; 5.14: croak now
    happens outside the local($@) scope, so the exception is no longer
    clobbered when the local is restored during unwind
  - Replace '//=' (perl 5.10+) with a defined check so the module compiles on
    perl 5.8.x as declared by MIN_PERL_VERSION 5.008001</changelog>
</package>
<package pkgid="2abf35a6a239e6b93d074e384692eac809116481e397d1b6b0b1b799611334df" name="perl-Object-HashBase-tools" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-2" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1724846400">- Update to 0.014
  - Add extra init() functionality</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-1" date="1725278400">- Update to 0.015
  - Fix double-import bug</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-3" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-4" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.016-1" date="1778587200">- Update to 0.016
  - Add [PruneCruft] to dist.ini so build artifacts (blib/, pm_to_blib,
    MYMETA.*) no longer leak into release tarballs
  - Add '@Class::Name' parent prefix to import (shortcut for `use parent`)
  - Add '&amp;Role::Name' role prefix to import (compose Role::Tiny role)
  - Skip 'new' injection when Object::HashBase is imported into a Role::Tiny
    role
  - Role::Tiny is a soft requirement, loaded only when '&amp;' prefix used
  - '&amp;' prefix requires Perl 5.10+</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1780920000">- Update to 0.017
  - List Role::Tiny (1.003000+) and Class::Method::Modifiers as RuntimeSuggests
    in dist.ini
  - Skip role tests when Role::Tiny is missing or older than 1.003000
    (no is_role), so install is not blocked
  - Move 'around' modifier test to its own file (t/role_modifiers.t) that skips
    when Class::Method::Modifiers is unavailable; Role::Tiny loads it lazily
    only for method modifiers (GH#5)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1781006400">- Update to 0.018
  - Fix bogus parent/role croaks losing their message on perl &lt; 5.14: croak now
    happens outside the local($@) scope, so the exception is no longer
    clobbered when the local is restored during unwind
  - Replace '//=' (perl 5.10+) with a defined check so the module compiles on
    perl 5.8.x as declared by MIN_PERL_VERSION 5.008001</changelog>
</package>
<package pkgid="e83bcaba84d4e06535935655eab1af97be8a8c32b2750654117a408dd2d0188e" name="perl-Object-ID" arch="noarch">
  <version epoch="0" ver="0.1.2" rel="28.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.1.2-28" date="1683288000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="99f507c75345631a70d66d5c9629ed8860d769f5756b9ce0bd2552aa5e944d14" name="perl-PAR-Dist" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1683460800">- Update to 0.52
  - Change bug tracker to GitHub issues
  - Quote all version numbers in META.yml files in test *.par files
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1718798400">- Update to 0.53
  - PAR::Dist::blib_to_par quoted the version number of the dist when making
    the PAR file (GH#2)
  - Quote value of "version" in generated META.yml (if there is no (MY)META.yml)</changelog>
</package>
<package pkgid="da9fc79bccd96729ff7785deb1cd133105e5e41b670fbfa640b631e932cecd76" name="perl-PPI" arch="noarch">
  <version epoch="0" ver="1.291" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.279-1" date="1724414400">- Update to 1.279
  - Implemented a cache to speed up sibling iteration (GH#287)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.281-1" date="1735387200">- Update to 1.281
  - Framework for recognition of parsing feature activation via:
    - 'use $PERL_VERSION' in code
    - 'use feature' in code
    - 'use $Common::CPAN::Module' in code
    - PPI::Document-&gt;new( feature_mods =&gt; ... )
    - PPI::Document-&gt;new( custom_feature_includes =&gt; ... )
    - PPI::Document-&gt;new( custom_feature_include_cb =&gt; ... )
    - $ENV{PPI_CUSTOM_FEATURE_INCLUDES}
  - Added ability to parse features:
    - signatures, as PPI::Structure::Signature
    - try catch, as PPI::Statement::Compound
- Drop support for using old List::Util versions</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.283-1" date="1746360000">- Update to 1.283
  - Allow zero byte documents to have a location
  - Handle simple lists in feature arg decomposing
  - Warn on unknown feature arg decompose instead of die
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.284-1" date="1762257600">- Update to 1.284
  - Fix regex anchors in PPI::Statement::Compound-&gt;type (GH#316)
  - Fix author tests: pod-no404s.t (GH#315)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.286-1" date="1777291200">- Update to 1.286
  - Add support for dotted bitwise operators (GH#322)
  - File opening errors are now reported usefully by PPI::Document
  - Remove the executable bit on several files (GH#323)
  - Fix for performance degradation on initial parse (GH#318)
  - Better reporting of Document-&gt;new input errors</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.291-1" date="1780056000">- Update to 1.291 (rhbz#2483210)
  - Improve parse performance impact of feature tracking even more with a parse
    stack cache (GH#318)
  - Fix two misbehaviors of location indexing code (GH#326)
  - Documentation fixes
  - Fail parse on double-referenced input</changelog>
</package>
<package pkgid="7f35dd8c555df181cf3f7d18d47bd3171f409ed4a8f0e57b56662deb30105c60" name="perl-PPIx-QuoteLike" arch="noarch">
  <version epoch="0" ver="0.024" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-1" date="1781352000">- Update to 0.024
  - Remove references to the RT bug tracking system
  - Replace wyant@cpan.org with harryfmudd@comcast.net
  - Repackage licenses so that GitHub can find them (maybe)
  - Add SECURITY policy
  - No functional changes
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="6ed581dc5b4f98d0787c68b684d7a60f00e22f2f304d7d8f9a910bec9bb8841d" name="perl-PPIx-Regexp" arch="noarch">
  <version epoch="0" ver="0.092" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.089-1" date="1747656000">- Update to 0.089
  - The /x modifier should not affect the parse of the replacement string in a
    substitution operator, i.e. the '#' in s/x/#/x does NOT introduce a comment
  - Correct POD link in PPIx::Regexp::Token::Literal
  - Annotate sub class(), since with Perl 5.38 it is a built-in
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.090-1" date="1758542400">- Update to 0.090
  - Explain s///eee... more than 2 'e' modifiers are permitted, and cause the
    result of the expression to be eval-ed n-1 times, where n is the number of
    'e' modifiers
  - Fix typo in comment
- Package new SECURITY policy</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.091-1" date="1759924800">- Update to 0.091
  - Avoid "Possible attempt to escape whitespace" warning, which is emitted in
    perl-5.43.2 and forward
  - Revise internal usage of 'PPI::Document'</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.092-1" date="1781352000">- Update to 0.092
  - Remove references to the RT bug tracking system
  - Replace wyant@cpan.org with harryfmudd@comcast.net
  - Correct documentation errors
  - No functional changes</changelog>
</package>
<package pkgid="3a21c3fe7d5944837c5b1188926bfb84e190e620b029bcff163926b30e88a767" name="perl-PPIx-Utilities" arch="noarch">
  <version epoch="0" ver="1.001000" rel="48.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001000-48" date="1683547200">- Use SPDX-format license tag
- Extra tests no longer include spell checks
- Use %license unconditionally</changelog>
</package>
<package pkgid="6ee77b86bf1d3d0a36689ca53b01e97815bfee2c890fbbc6ddf9312941e64bf7" name="perl-PPIx-Utils" arch="noarch">
  <version epoch="0" ver="0.004" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-9" date="1688731200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.004-1" date="1746360000">- Update to 0.004
  - Update LICENSE text
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="069259601546b115a67d8d128f5790cb55577c17245aa6b9addeecedcc0550bd" name="perl-Package-Anon" arch="x86_64">
  <version epoch="0" ver="0.05" rel="39.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-34" date="1683547200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-35" date="1689249600">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-39" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="2b43ab742249470b707fb9a01c6edacd543cb3ddbaea0b8c33704581e434fdd1" name="perl-Package-Constants" arch="noarch">
  <version epoch="1" ver="0.06" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.06-27" date="1689681600">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="7709e008847237ef0198d3aaba0acca68526ea37a7ea75f0ef6b44c93409625a" name="perl-Package-DeprecationManager" arch="noarch">
  <version epoch="0" ver="0.18" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-1" date="1676894400">- Update to 0.18
  - Use Sub::Util instead of Sub::Name, which is part of Scalar-List-Utils,
    which itself is already a dependency (GH#3)
- Use SPDX-format license tag
- Use %license unconditionally
- Package CODE_OF_CONDUCT.md
- Drop support for building with List::Util &lt; 1.33 since we require Sub::Util,
  which became available at the same time as List::Util 1.33</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="ca7d331def57c9f485bbec8e57eb16737458729e15b4471d58ece93e290c26d6" name="perl-Package-Generator" arch="noarch">
  <version epoch="0" ver="1.106" rel="28.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.106-28" date="1680264000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="30adb6cd2241513e9aa65c5f375f15f1da1b5b45ed894a157eb9bd2f57dc416f" name="perl-Package-Stash" arch="noarch">
  <version epoch="0" ver="0.40" rel="4.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.40-1" date="1645444800">- Update to 0.40
  - Update bundled version of ExtUtils::HasCompiler, for new new Apple include
    paths
- Drop support for EOL distributions prior to EL-7:
  - BR: optional test dependency perl(Package::Anon) unconditionally
  - Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.40-4" date="1683547200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="855b4b35390f9cf17656bd32f98ca19ce8800fb4b3690b4d42a024b2e70999bb" name="perl-Package-Stash-XS" arch="x86_64">
  <version epoch="0" ver="0.30" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.30-3" date="1683547200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.30-4" date="1689249600">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.30-8" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="bbca763f982babf58dcbfab1bdcfe7e1f8f89e30a0026718c251a1c9082f9bf0" name="perl-PadWalker" arch="x86_64">
  <version epoch="0" ver="2.5" rel="14.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-8" date="1683633600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-9" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5-14" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="f842fc7d95b7b2d07605d426f92585d434a1ce38dfc03da95e02d6719ea98696" name="perl-Parallel-Runner" arch="noarch">
  <version epoch="0" ver="0.014" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-30" date="1681128000">- Use SPDX-format license tag
- Use https:// source URL
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1714132800">- Update to 0.014
  - Move to Dist::Zilla
  - Switch to Test2::V0</changelog>
</package>
<package pkgid="49f04f466168f26afac53e7a87913a8cf48f30648459bb21d462ec387a50abde" name="perl-Params-Check" arch="noarch">
  <version epoch="1" ver="0.38" rel="491.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.38-491" date="1684843200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6f3f46a2e0072249f03b97a25b2a87c6a000d08b2632640081e757cefd7d5a76" name="perl-Params-Classify" arch="x86_64">
  <version epoch="0" ver="0.015" rel="23.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-18" date="1681214400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-19" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-23" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="d6e16a66e7175f2709fa2f26659edaba39a85ce858b878958d2a938cd078b30d" name="perl-Params-Coerce" arch="noarch">
  <version epoch="0" ver="0.15" rel="9.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.15-9" date="1679918400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="9a820b3fab876628f12d70b1d9910da37995eeb05c696f11b35a8f364b71cb10" name="perl-Params-Util" arch="x86_64">
  <version epoch="0" ver="1.102" rel="15.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.102-11" date="1689076800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.102-15" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="0f6f70ebad70fddf201fe80fef13580e52e803ead9d3d864a10faff3c0fbfae5" name="perl-Params-Validate" arch="x86_64">
  <version epoch="0" ver="1.31" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1666526400">- Update to 1.31
  - Include Devel::PPPort 3.68 for compatibility with Perls ≤ 5.8.5 (GH#25)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-4" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-8" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="95ab147beb02be2c25a5711b7614ca8adaba03a8c1ed684cfe93ee392dfffb81" name="perl-Params-ValidationCompiler" arch="noarch">
  <version epoch="0" ver="0.31" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-1" date="1673179200">- Update to 0.31
  - Require Class::XSAccessor 1.17+ when trying to load it; earlier versions
    cause test failures (GH#27)
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="7e8a9d300f120002d54f698d6babb07f07460b7ef0b226413b4a7de19a02e418" name="perl-Parse-Distname" arch="noarch">
  <version epoch="0" ver="0.05" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-1" date="1649419200">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-2" date="1651147200">- Incorporate feedback from package review (#2073377)
  - perl(strict) is a run-time dependency, not just a test dependency
  - Don't package the tests as documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-5" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="65a8abc2727da2f8b693fd2450ced083c34bcc95d109820cca15b3b2ec7142ec" name="perl-Parse-RecDescent" arch="noarch">
  <version epoch="0" ver="1.967015" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.967015-19" date="1689681600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with ExtUtils::MakeMaker &lt; 6.58</changelog>
</package>
<package pkgid="a683992103048c29dcb7257f85c79750500d1522e485efa2c017e4388de61cf9" name="perl-Path-Class" arch="noarch">
  <version epoch="0" ver="0.37" rel="24.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-24" date="1683633600">- Use SPDX-format license tag
- Switch to ExtUtils::MakeMaker flow
- Use %license unconditionally</changelog>
</package>
<package pkgid="3b84de7ad67d5a43f858d1219782f33eda114834c1f5f57791d38b2567f6ed8f" name="perl-Path-FindDev" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.5.3-19" date="1689508800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="fc634a8d71343d27e7b68b67d16951805875f51ea8fd7b30c657d2b9de1a06b9" name="perl-Path-IsDev" arch="noarch">
  <version epoch="0" ver="1.001003" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001003-19" date="1688990400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="ccbaca0f64031e3935842aabbe53187507ded04d01dbfeaabdd1015f377199cd" name="perl-Path-Tiny" arch="noarch">
  <version epoch="0" ver="0.150" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.146-1" date="1715342400">- Update to 0.146
  - Improved error message spewing to a file in a non-existent directory</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.148-1" date="1742212800">- Update to 0.148
  - Invalid arguments when hash references are expected throw exceptions
  - Fixed problems with exceptions
  - Cross-referenced slurp and lines in documentation
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.150-1" date="1753099200">- Update to 0.150
  - Released with newest Dist::Zilla to avoid xattrs in the tarball</changelog>
</package>
<package pkgid="9b5f62f4595a4b264679c2b000ebb199b3373e16ed0212f41d9a2fef408d0f34" name="perl-Perl-Critic" arch="noarch">
  <version epoch="0" ver="1.156" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-4" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-1" date="1729512000">- Update to 1.154 (rhbz#2320114)
  Enhancements
  - ProhibitedUnusedCapture now recognizes %+, %-, %{^CAPTURE} and
    %LAST_PAREN_MATCH (GH#1065)
  - Fixed a deprecation warning in the extras/perlcritic.el Emacs script
    (GH#1067)
  - RequireExplicitPackage now accepts a use VERSION as the first line
    (GH#1070)
  Fixes
  - Fix some false positives for function calls as a hash index (GH#1071)
  Documentation
  - Clarify package_exemptions rules (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-2" date="1729512001">- Require ExtUtils::Manifest for Perl::Critic::TestUtils::bundled_policy_names()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-1" date="1729684800">- Update to 1.156 (rhbz#2321227)
  - Subroutines::ProhibitManyArgs no longer gets confused by underscores in
    variable names (GH#1027)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-3" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-4" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-5" date="1780315200">- Run tests with LANG=en_US.UTF-8 to fix pod spelling test on Rawhide</changelog>
</package>
<package pkgid="9841492bfd97e14b04cce84e0b0e1c1c0432d531af715530c1006ae2942dcfa0" name="perl-Perl-Critic-Deprecated" arch="noarch">
  <version epoch="0" ver="1.119" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-22" date="1641038400">- Dictionary aspell-en no longer needed for spelling check
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.119-27" date="1683720000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- No longer need to set LANG for spell check</changelog>
</package>
<package pkgid="5d0e6f356c8641057838dd804738a99104e464763cbb39156b4fab02785a5c82" name="perl-Perl-Critic-Lax" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-1" date="1672574400">- Update to 0.014
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1689768000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="bfefdce9616a8f56b4735723cd850727d7cfd5fe5ce96a8e71dc95cbfeeb9139" name="perl-Perl-Critic-More" arch="noarch">
  <version epoch="0" ver="1.003" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.003-27" date="1688990400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="f40957f886d8dab88f21cbcd426b4edf258566c359d2532860954539818d2435" name="perl-Perl-Critic-Pulp" arch="noarch">
  <version epoch="0" ver="100" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 100-1" date="1760356800">- Update to 100
  - ProhibitUnknownBackslash allow \F new in Perl 5.16
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="268620aac18e2e3de878d15f262e9815b2b76305ff8fc9db82311d8726634d73" name="perl-Perl-Destruct-Level" arch="x86_64">
  <version epoch="0" ver="0.02" rel="40.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-35" date="1683720000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-36" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-40" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="862b123938898a9ffca10ab589fea639a4b477cf46acfacfa9e19819f90b2c49" name="perl-Perl-MinimumVersion" arch="noarch">
  <version epoch="0" ver="1.44" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.40-9" date="1688990400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1" date="1746360000">- Update to 1.44
  - Remove detection for Perl versions older than 5.008, which means that 5.006
    is now the minimum required version that will be reported (GH#7)
  - Fix formatting of the summary printed by the perlver script (GH#14)
  - Recognize the minimum required version for the tr///r flag (GH#25) and
    indented heredocs (GH#27)
  - Recognize the minimum required Perl versions for:
    - The "use re '/flags'" pragma (GH#29)
    - Postfix dereferences (GH#30)
    - The &lt;&lt;&gt;&gt; operator (GH#31)
  - Update LICENSE text
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="8fad090fd954e24e0aad1f168a6dda1a198c77abd7b720ddf8d6a5f72c8da3af" name="perl-Perl-OSType" arch="noarch">
  <version epoch="0" ver="1.010" rel="491.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.010-491" date="1683720000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="d5fe2a624392eb2e54d676b6cc6923a71a360b1a1e2c5bf51061390f10cfc0c8" name="perl-Perl-PrereqScanner-NotQuiteLite" arch="noarch">
  <version epoch="0" ver="0.9918" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.9918-1" date="1775390400">- Update to 0.9918</changelog>
</package>
<package pkgid="bd60fba406b6cd31e58422de09c47506cfaccbb7f1ec25bfcd06148a4e771238" name="perl-Perl-Tidy" arch="noarch">
  <version epoch="0" ver="20260705" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250214-1" date="1739448000">- Update to 20250214 (see CHANGES.md for details) (rhbz#2345575)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250311-1" date="1741780800">- Update to 20250311 (see CHANGES.md for details) (rhbz#2351446)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250616-1" date="1750075200">- Update to 20250616 (see CHANGES.md for details)
- Use %{make_build} and %{make_install}
- Drop workaround for issue with EL-7 dependency generator</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250711-1" date="1752494400">- Update to 20250711 (see CHANGES.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250711-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250912-1" date="1757764800">- Update to 20250912 (see CHANGES.md for details) (rhbz#2394876)
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260109-1" date="1767873600">- Update to 20260109 (see CHANGES.md for details) (rhbz#2428067)
- Change Pod::Html dependency to Pod::Simple::XHTML, which is now the preferred
  back-end option for HTML generation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260109-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260204-1" date="1770120000">- Update to 20260204 (see CHANGES.md for details) (rhbz#2436356)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260705-1" date="1783425600">- Update to 20260705 (see CHANGES.md for details) (rhbz#2497057)</changelog>
</package>
<package pkgid="53ce761661cc2dde8dd967e5032c7c183cb23a9139bf3e051f7f90fe442b65e8" name="perl-Perl6-Caller" arch="noarch">
  <version epoch="0" ver="0.100" rel="28.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100-28" date="1683806400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="6024eb86a61b4b8de20bf071f6c5e00f92a660f96475706cfcf2aa68ea51d3e9" name="perl-Perl6-Junction" arch="noarch">
  <version epoch="0" ver="1.60000" rel="28.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60000-28" date="1683806400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="23c1831aa8e9d85557c494420e788d1a2733a59e995f45759a7899995d4bf24e" name="perl-Perl6-Slurp" arch="noarch">
  <version epoch="0" ver="0.051005" rel="28.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.051005-28" date="1683806400">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="f796b76a36dc79926f3a8df9f8338044e0dfb1ad49d41065fc66add9a76b83cf" name="perl-PerlIO-gzip" arch="x86_64">
  <version epoch="0" ver="0.20" rel="26.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-21" date="1683633600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-22" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.20-26" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="9053793ea51cfdf39ebbcd68f7e84fd3136c5c10d78306fd1600c5e64938699b" name="perl-PerlIO-utf8_strict" arch="x86_64">
  <version epoch="0" ver="0.010" rel="7.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-1" date="1666872000">- Update to 0.010
  - Re-release with updated ppport.h for 5.8.5 compatibility
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-3" date="1689163200">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-7" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="c362fee46081cf2e92e54d0bbc35d702c49e100d707f04b7d92abf07ce8764cc" name="perl-PlRPC" arch="noarch">
  <version epoch="0" ver="0.2020" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.2020-15" date="1674561600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.2020-16" date="1695297600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="c60cb4a151431508a35d47374515e296608fabe0a3c5b3eb9e73d301cb2aecda" name="perl-Pod-Coverage" arch="noarch">
  <version epoch="0" ver="0.23" rel="29.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-29" date="1688990400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="3f774bb9e43f00bbad68abc1745f5d23c7af9920c390f24e9e12995ffa12a4fb" name="perl-Pod-Coverage-Moose" arch="noarch">
  <version epoch="0" ver="0.08" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-23" date="1683720000">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Additional build requirements for optional tests
- Fix permissions of installed files
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1693051200">- Update to 0.08
  - Fix "Attempt to call undefined import method with arguments" error on
    perl 5.39.1
- Add patch to use US English spelling of LICENSE in pod</changelog>
</package>
<package pkgid="747ba5bbe33781d092b178296add6b1263676a76b1f647cfb766117b096f452f" name="perl-Pod-Coverage-TrustMe" arch="noarch">
  <version epoch="0" ver="0.002002" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002001-1" date="1743249600">- Update to 0.002001
  - Encode test output when needed to avoid wide character warnings
  - Fix tests when Pod::Coverage is installed but not Test::Pod::Coverage
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002002-1" date="1781611200">- Update to 0.002002
  - Fix passing options to all_pod_coverage_ok</changelog>
</package>
<package pkgid="5a15f2993ed9ccc7765b38969450ea3b22aa71ff450b0174cef85a95295d7817" name="perl-Pod-Coverage-TrustPod" arch="noarch">
  <version epoch="0" ver="0.100006" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100006-1" date="1672574400">- Update to 0.100006
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag
- Always assume we have rpm ≥ 4.9
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100006-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="212d70f77a4c87637e72a864bc002d73401630493094ae87a5d180734cfeef52" name="perl-Pod-Escapes" arch="noarch">
  <version epoch="1" ver="1.07" rel="490.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:1.07-490" date="1688731200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0cd3aa04446d9973c1f7fd503ef0cf407becb8ac32962ee8a2881dbd2ec7c390" name="perl-Pod-Eventual" arch="noarch">
  <version epoch="0" ver="0.094003" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094003-1" date="1672574400">- Update to 0.094003
  - Update author contact info
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.094003-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="71311c512473a66368047300850ed5dc87e669303ab61cf00c661d280d044e56" name="perl-Pod-MinimumVersion" arch="noarch">
  <version epoch="0" ver="50" rel="37.fc42"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 50-37" date="1689768000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="104bfe852672f3407b947b97d7e2a27e084ea750eda13d0d00398494d9db6f4d" name="perl-Pod-Readme" arch="noarch">
  <version epoch="0" ver="1.2.3" rel="14.fc42"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 1.2.3-14" date="1683892800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="c0ce3ace7b9b72c46d15cf2eb8ce26a5fce2203c036b4633d44c457eb849d46e" name="perl-Pod-Simple" arch="noarch">
  <version epoch="1" ver="3.48" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.46-1" date="1747051200">- Update to 3.46
  - XHTML: =over without =item should render as a blockquote
  - Add support for underlined text U&lt;&gt; formatting
  - Make 'temp' name checking more succinct
  - GitHub: Fix and add tests
  - Makefile.PL: Add missing 'warnings' prereq
  - Add select method compatible with Pod::Select
  - Modernize htmlbat.t, corpus.t
  - Fix links, typos, acknowledgments
  - Add documentation on subclassing
  - Fix version checking
  - Fix version number
  - Use rel2abs instead of abs_path
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.47-1" date="1747396800">- Update to 3.47
  - No git-related files in MANIFEST (GH#183)
  - Rename method and field to avoid conflicts (GH#185)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.48-1" date="1775476800">- Update to 3.48
  - Add sections to manpage URLs (GH#193)
  - Better fallback when no HTML::Entities (GH#189)
  - Don't call each on an anonymous hash (GH#191)
  - Fix encoding of Unicode URL fragments (GH#194)</changelog>
</package>
<package pkgid="c97d1dcfdf95c8762e22b3ebb0e7b4181722d3a18e670bfeb5ed8fa965358125" name="perl-Pod-Spell" arch="noarch">
  <version epoch="0" ver="1.27" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.26-1" date="1678795200">- Update to 1.26
  - Encode output as UTF-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.27-1" date="1729512000">- Update to 1.27
  - Fix encoding of output as UTF-8
  - Fix link in Pod</changelog>
</package>
<package pkgid="591c0a95d931b01f284020c03ef9175c02ffc5365eee140ad1afd0260791449f" name="perl-Pod-Strip" arch="noarch">
  <version epoch="0" ver="1.100" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100-8" date="1683892800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="0a98acf6712b51025cb317b16556680b7deaad8f359cc8f4ab6c465db484281f" name="perl-Probe-Perl" arch="noarch">
  <version epoch="0" ver="0.03" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-27" date="1688644800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="6b4bed84bd429f4d0415bdc11ae1f8db094be6101ae3ae6da5114d3f9dfb05e0" name="perl-Readonly" arch="noarch">
  <version epoch="0" ver="2.05" rel="24.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-21" date="1677844800">- Use SPDX-format license tag
- Use %license unconditionally
- Drop ancient obsoletes/provides for old tests sub-package</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.05-24" date="1718366400">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="24aa8663ecb67ce001bbde8587d37f0150bd0b7d5e58c8cf8c250a863da8d5e2" name="perl-Readonly-XS" arch="x86_64">
  <version epoch="0" ver="1.05" rel="51.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-46" date="1683633600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-47" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.05-51" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="9e93952f8a4009f13bbfb387ed71c23e3804c917c3b56f6dc93e9d47f1f45dd2" name="perl-Ref-Util" arch="noarch">
  <version epoch="0" ver="0.204" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.204-17" date="1683720000">- SPDX migration
- Use %license unconditionally</changelog>
</package>
<package pkgid="369128bc96227090526a6de073bcb61af9fc993e6d3034425a4ba245c1901641" name="perl-Ref-Util-XS" arch="x86_64">
  <version epoch="0" ver="0.117" rel="23.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-18" date="1683806400">- SPDX migration</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-19" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.117-23" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="347592179e9e2dd296364fdd4ca952aaa8d80852bad95f7aa91f81e234edb314" name="perl-Regexp-Common" arch="noarch">
  <version epoch="0" ver="2024080801" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2017060201-21" date="1689336000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2024080801-1" date="1723204800">- Update to 2024080801
  + Eliminate 'use vars'
  + Update the MySQL comment pattern</changelog>
</package>
<package pkgid="4f24dadd6787783e6d460d700958dffe726e709343615338190202a59b08811a" name="perl-Regexp-Parser" arch="noarch">
  <version epoch="0" ver="0.27" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-1" date="1774008000">- Update to 0.24
  Features:
  - Add support for Perl 5.10+ regex constructs (GH#8):
    \K (keep), \R (linebreak), \h/\H, \v/\V, named captures (?&lt;name&gt;...),
    named backrefs \k&lt;name&gt;, possessive quantifiers
  - Add \g{N} and \g{-N} backreference syntax from Perl 5.10+ (GH#16)
  - Add /a, /d, /l, /u charset modifier flags from Perl 5.14+ (GH#16)
  - Add /n no-capture flag from Perl 5.22 (GH#16)
  - Support Perl 5.14+ (?^:...) caret flag reset syntax (GH#4)
  - Add optional flags parameter to regex() method (GH#5)
  Bug Fixes:
  - Treat trailing dash in character class as literal (GH#6)
  - Compare character values numerically in range validation (GH#3)
  - Support POSIX character classes with visual method (GH#7)
  Maintenance:
  - Migrate test suite from deprecated Test.pm to Test::More (GH#15)
  - Add round-trip and error rejection test suites; tests 200 -&gt; 409 (GH#19)
  - Modernize CI: consolidate into single testsuite.yml, update actions, use
    perldocker containers (GH#17)
  - Set minimum Perl version to 5.16
  - Add CLAUDE.md for AI-assisted development (GH#19)
  - Switch to GitHub Actions for CI
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-1" date="1774180800">- Update to 0.25
  Features:
  - Add recursive pattern support: (?R), (?0), (?1), (?+1), (?-1), (?&amp;name) for
    named subpattern recursion (GH#22)
  - Add Python-compatible regex syntax: (?P&lt;name&gt;...) named capture, (?P=name)
    named backref, (?P&gt;name) named recursion (GH#22)
  - Add \o{NNN} octal escape support from Perl 5.14+ (GH#20)
  - Add (*VERB) backtracking control verbs: FAIL, F, ACCEPT, SKIP, PRUNE,
    COMMIT, THEN, MARK with optional :arg (GH#20)
  - Add (?|...) branch reset groups from Perl 5.10+ (GH#20)
  - Add (*positive_lookahead:...) and other alphabetic assertion forms from
    Perl 5.28+ (GH#20)
  - Add (*script_run:...), (*sr:...), (*atomic_script_run:...), (*asr:...)
    script run assertions from Perl 5.28+ (GH#20)
  - Add /xx flag support via (?xx:...) from Perl 5.26+ (GH#20)
  Maintenance:
  - Migrate t/08regex_flags.t and t/09backref_flags.t from deprecated Test.pm
    to Test::More - all test files now use Test::More (GH#21)
  - Update CLAUDE.md and modernize Parser.pm POD (GH#21)
  - Add CLAUDE.md and MANIFEST.SKIP to MANIFEST
  - Tests now 620 across 16 test files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-1" date="1774267200">- Update to 0.26
  Features:
  - Add \Q...\E (quotemeta) support for literal quoting in regular expressions
    (GH#23)
  - Add \b{type}/\B{type} extended boundary support including \b{gcb}, \b{wb},
    \b{sb}, and \b{lb} from Perl 5.22+ (GH#24)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1774526400">- Update to 0.27
  Features:
  - Add (?(DEFINE)...) definition-only groups for defining named subpatterns
    without matching (GH#27)
  - Add (?(&lt;name&gt;)...) and (?('name')...) named capture conditions with new
    'define' and 'grouppn' object types (GH#27)
  Maintenance:
  - Replace `use base 'Exporter'` with `use parent 'Exporter'`; base is
    discouraged since Perl 5.12 (GH#25)
  - Remove unused 'use NEXT' from Objects.pm; recommend 'next::method' from mro
    (core since 5.10) instead (GH#25)
  - Remove duplicate 'use strict; use warnings;' in Parser.pm (GH#25)
  - Fix META_MERGE URLs to point to cpan-authors/Regexp-Parser with HTTPS and
    fix dead wiki.github homepage URL (GH#25)
  - Expand t/11errors.t from 17 to 240 tests covering all 28 RPe_* error codes
    in Diagnostics.pm (GH#26)
  - Add AI_POLICY.md for transparency</changelog>
</package>
<package pkgid="1d6c67658c1ea329d9b6498bc916a23f7b0c25e82ac68f40c1718fddadfef071" name="perl-Regexp-Trie" arch="noarch">
  <version epoch="0" ver="0.02" rel="15.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-15" date="1684238400">- Use SPDX-format license tag
- Drop support for building with ancient distributions prior to EL-7
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="57370f1c24ed6e67fea13415f56721ec22ffebd575549d5d73c60d6fcb2a099d" name="perl-Role-Tiny" arch="noarch">
  <version epoch="0" ver="2.002005" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002005-1" date="1779105600">- Update to 2.002005 (rhbz#2478347)
  - Split role initialization from setting pragmas to allow more flexibility
    for subclasses
  - Ensure consistent internal handling of Class::C3 versus mro
  - Reduced Exporter dependency to 0 (any version)
- Use %{make-build} and %{make_install}</changelog>
</package>
<package pkgid="185d55d3eb1163b51d33e4d72cf089a4331b9523dbe4fefdb83aaa94d0239002" name="perl-SQL-Statement" arch="noarch">
  <version epoch="0" ver="1.414" rel="10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.414-10" date="1688644800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="e416b84e2f07fe56520283bed98ea1df70f75168d1fca0fb3b2e7a2ea9065960" name="perl-SUPER" arch="noarch">
  <version epoch="0" ver="1.20190531" rel="14.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.20190531-14" date="1683201600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4e2b1de69a8b6bb6b0233588074347b50f5246002654537f17884ed03dc6e136" name="perl-SVN-Notify" arch="noarch">
  <version epoch="0" ver="2.87" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.87-2" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="fc855d3d7aaaa6a933ed4d3142ec20540e73f9c174ed028c119a383f0eecd3e1" name="perl-Safe-Isa" arch="noarch">
  <version epoch="0" ver="1.000010" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.000010-16" date="1684238400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="2679a64a9a2a2a00e8397fd50da1ff1a62dfbbd87dc651f3ec4defa0e471a649" name="perl-Scalar-Properties" arch="noarch">
  <version epoch="0" ver="1.100860" rel="34.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100860-31" date="1646913600">- Work around package note files breaking t/release-dist-manifest.t (#2062685)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.100860-34" date="1683892800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="f62034c1e54bb5c81f143573dbb77093280bcdea491e2c8a648dea9ed5e7e486" name="perl-Scope-Guard" arch="noarch">
  <version epoch="0" ver="0.21" rel="24.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-24" date="1680264000">- Use SPDX-format license tag
- Use author-indepentdent source URL</changelog>
</package>
<package pkgid="f561d5d8f20eeaced3575e44d1e0084289b339516f6f35670d303abb8a059ab5" name="perl-Search-Elasticsearch" arch="noarch">
  <version epoch="0" ver="8.12" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.717-1" date="1659009600">- Update to 7.717
  - Stable release for Elasticsearch 7.17</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.00-1" date="1672315200">- Update to 8.00
  - Stable release for Elasticsearch 8.5
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.00-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.12-1" date="1706184000">- Update to 8.12
  - Stable release for Elasticsearch 8.12</changelog>
</package>
<package pkgid="36b7007e81f1d404c9841bcef2f2986e9437b458e05e278c4fddf72825d5e2ba" name="perl-Sendmail-AccessDB" arch="noarch">
  <version epoch="0" ver="1.04" rel="4.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-4" date="1688644800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Drop support for building with ancient db4 packages
- Use %license unconditionally</changelog>
</package>
<package pkgid="d34a1d96ea6fb127d16b6100ff9885360be28bab9ec8875e4983de47b0f927ad" name="perl-Sendmail-PMilter" arch="noarch">
  <version epoch="0" ver="1.28" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-1" date="1783080000">- Update to 1.28
  - Proper handling of NULL mail-from (CPAN RT#179844)
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="e992bf5cd62260a7cf50e9fca2d59b0d15bda5d6b606ab12ac751fb8d52dfaad" name="perl-Set-Scalar" arch="noarch">
  <version epoch="0" ver="1.29" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.29-25" date="1688644800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5a5dd71a2f29a89cf455a7bfa3dac669be1ad17b38a5f9f767edffeebe7aca43" name="perl-Socket6" arch="x86_64">
  <version epoch="0" ver="0.29" rel="22.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-17" date="1679659200">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-18" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-22" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="befec0af8d08daa0a9ad1086b3a09dcc8bee0fa108261591ff8e526524da1d94" name="perl-Software-License" arch="noarch">
  <version epoch="0" ver="0.104007" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104003-1" date="1684497600">- Update to 0.104003
  - Add Artistic 1.0 Perl license and make Perl license use it
  - Remove extra "59" from LGPL-2.1
- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104004-1" date="1684929600">- Update to 0.104004
  - Rename Perl Artistic License to avoid confusion in detecting license</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104005-1" date="1700568000">- Update to 0.104005
  - Explictly require perl v5.12.0, which was already effectively required
    because of upstream libraries
  - Update author metadata
- This release by RJBS ⇒ update source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104006-1" date="1707652800">- Update to 0.104006
  - Use valid SPDX identifier for BSD license
  - Undefine SSLeay spdx_expression
  - Update URL to SSLeay license
- This release by LEONT ⇒ update source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.104007-1" date="1746360000">- Update to 0.104007 (rhbz#2363949)
  - Update GPL v1 text to current version
  - CPAN::Meta v1 "gpl" license is explicitly GPL v2
  - Improve recognition for Apache 1.1 and 2.0+
- Use %{make_build} and %{make_install}
- Drop explicit provides for support of old dependency generator</changelog>
</package>
<package pkgid="69f3aadf997c7d38328595bebc2ee965e7cf399c0652d714e1a1571796ad9f5c" name="perl-Software-License-CCpack" arch="noarch">
  <version epoch="0" ver="1.11" rel="39.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-34" date="1684238400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-38" date="1706270400">- Drop test dependency Test::Vars from Fedora 39 onwards since Test::Vars is
  FTBFS with Perl 5.38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-39" date="1726574400">- Test::Vars is fixed</changelog>
</package>
<package pkgid="12cc8cb77548936a4e0c4748cb7efb02ce12de8d29d80ce08bb8189187ee7747" name="perl-Specio" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-6" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-7" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1735041600">- Update to 0.49
  - Attempting to import any structured type caused a confusing
    "Can't store CODE items" error
  - Removed the "this is alpha" warning from Specio::Library::Structured; it's
    as production-ready as it's going to get</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1739966400">- Update to 0.50
  - Fixed a bug in the Int type that caused it to accept numbers like
    124512.000000000123, which when stringified, are stringified as integers
    (GH#22)
- Drop EL-7 support
  - Always have List::Util ≥ 1.33
  - Always have Sub::Util
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1750420800">- Update to 0.51
  - Made it possible to force Specio to use only pure Perl dependencies, by
    setting the SPECIO_IMPLEMENTATION environment variable to "PP" (GH#23)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1754913600">- Update to 0.52
  - Really made it possible to force Specio to use only pure Perl dependencies;
    the changes in 0.51 were incomplete, so lots of places still loaded the
    Clone (XS) module (GH#23)
- Package new GOVERNANCE.md, SECURITY.md and SUPPORT.md files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1759924800">- Update to 0.53
  - Fixed a test failure when trying to open $^X on some platforms</changelog>
</package>
<package pkgid="f4641d45c45e549ef70f40c38b2798208b7dd6d195acc245db820dc6c7b6e34b" name="perl-Spellunker" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-27" date="1683201600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="0e4a15735205a845d2c9fec9f34467a040d71ed335dc2452526345107e0ba28e" name="perl-Spiffy" arch="noarch">
  <version epoch="0" ver="0.46" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.46-27" date="1683201600">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="86527a29ec803ddef60135187e87da024ec70f15b17694dca6aa9d3d3dbf2c75" name="perl-String-Escape" arch="noarch">
  <version epoch="0" ver="2010.002" rel="39.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2010.002-39" date="1688472000">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="eaaa84d08ee1d8d46ad0387b4740775ab894dd7687369e19afb210482c3648e1" name="perl-String-Format" arch="noarch">
  <version epoch="0" ver="1.18" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.18-16" date="1684584000">- Use SPDX-format license tag
- Drop support for building with ExtUtils::MakeMaker &lt; 6.5702
- Use %license unconditionally</changelog>
</package>
<package pkgid="7ccb276de43c746953501db5c1bad675df4be112e119adecb8a47c3ed8bab1f2" name="perl-Sub-Exporter" arch="noarch">
  <version epoch="0" ver="0.991" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.991-8" date="1780401600">- Remove unused dependency on perl(blib)
- Drop support for building with ExtUtils::MakeMaker &lt; 6.78
- Drop manual provides for old rpm versions
- Drop redundant doc-file-dependency filter
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="ba5a37410011f39ce7283988c9c27fe9d5dcf64fc638409344ff1eb4e94653a3" name="perl-Sub-Exporter-ForMethods" arch="noarch">
  <version epoch="0" ver="0.100055" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100055-1" date="1672574400">- Update to 0.100055
  - Update packaging and metadata
  - Minimum required Perl is now v5.12
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.100055-2" date="1689422400">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="8845a6f57e5316e0bf0c7f00a5ab9f4b15534a1f524cded341370010e1448fb1" name="perl-Sub-Exporter-Progressive" arch="noarch">
  <version epoch="0" ver="0.001013" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.001013-21" date="1683892800">- Spec tidy-up
  - Use SPDX-format license tag
  - Use %license unconditionally</changelog>
</package>
<package pkgid="5280292a99f6aeaab616d0966cf000c224f0cb9afb29bbf2ef35c8f20f94ca82" name="perl-Sub-Identify" arch="x86_64">
  <version epoch="0" ver="0.14" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-22" date="1680523200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-23" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-27" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="859d781b22a575052eeae1c826c0f9e4411d83e0dfb12fad8ae89404d7ff433f" name="perl-Sub-Info" arch="noarch">
  <version epoch="0" ver="0.002" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002-21" date="1688299200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="629879888c6ea067f4b1cb7d3b9c1efdffaa8090c3af318253f499df187f274e" name="perl-Sub-Install" arch="noarch">
  <version epoch="0" ver="0.929" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.929-1" date="1672574400">- Update to 0.929
  - Update packaging and metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.929-2" date="1689249600">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="416a1c55cf76bdb3cab92cbdb45340d63e7b6d649dcb28178cd0e80f26017471" name="perl-Sub-Name" arch="x86_64">
  <version epoch="0" ver="0.28" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.26-12" date="1678104000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-1" date="1682769600">- Update to 0.27
  - Skip quote-separator tests on newer perls that deprecate this behaviour</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-2" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-6" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.28-1" date="1734350400">- Update to 0.28
  - Fix version comparison logic for forward compatibility
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
</package>
<package pkgid="526c23fcef5ae6c3474dc0ad9dc29c4c4107b61a08b1b827cc7290ea009d2858" name="perl-Sub-Quote" arch="noarch">
  <version epoch="0" ver="2.006009" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.006009-1" date="1755777600">- Update to 2.006009
  - Fix new warning for bare \ in qw()
  - Fix documentation for hintshash option
- Use %{make_build} and %{make_install}
- Assume Sub::Util always available</changelog>
</package>
<package pkgid="a8ce744fd75c20f219ab354496340ff1daf6ca0fb1bf23e1d4fb2e535131185c" name="perl-Sub-Uplevel" arch="noarch">
  <version epoch="1" ver="0.2800" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.2800-19" date="1683979200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally
- Package examples</changelog>
</package>
<package pkgid="5a047ef466522511c102875836a8ce9a55317d9225cbfa4311be07421b46864f" name="perl-Symbol-Util" arch="noarch">
  <version epoch="0" ver="0.0203" rel="32.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0203-32" date="1684584000">- Use SPDX-format license tag
- Drop workaround for ancient hunspell versions prior to Fedora 14
- Use %license unconditionally</changelog>
</package>
<package pkgid="1cfd7f9d24d41ccda5e7a740d7deb99241ad73677bd4af1933edba39f7e9e22e" name="perl-Sys-HostAddr" arch="noarch">
  <version epoch="0" ver="0.993" rel="4.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.993-4" date="1689768000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="f100809220ca4624a6d1e1bcbf6cd2e14c7b227eb9deaf22912d9bc21f3f2769" name="perl-Sys-Hostname-Long" arch="noarch">
  <version epoch="0" ver="1.5" rel="26.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.5-26" date="1684670400">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="61c4488f43bbe78920f7d563d55eb61ffb939b27caf8e5a007c859411c190c06" name="perl-Taint-Runtime" arch="x86_64">
  <version epoch="0" ver="0.03" rel="53.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-48" date="1683979200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-49" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-53" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="7419aa173d133d6075a2fb079224205a49fe28a46ab2732ae6ccd009107b2cff" name="perl-Taint-Util" arch="x86_64">
  <version epoch="0" ver="0.08" rel="37.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-32" date="1684756800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- BR: Pod::Man ≥ 2.26 to avoid man page issue (#998447)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-33" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-37" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="ae9bffd089064151c58c703e788df00289c8345f2d19f1d9a83e5ec0b52aff74" name="perl-Task-Weaken" arch="noarch">
  <version epoch="0" ver="1.06" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-16" date="1684065600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="ceaf33ab0c075368959a3141e6cffd75eec5b8bf4af99fee0a255e332dc44a0e" name="perl-Term-ReadKey" arch="x86_64">
  <version epoch="0" ver="2.38" rel="22.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-16" date="1684065600">- Port Configure.pm to C99</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-17" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.38-22" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="4f28dc2b7e049a8f0389dec86bdea578528c07b302a5934907a6b98af29b1e16" name="perl-Term-ReadLine-Gnu" arch="x86_64">
  <version epoch="0" ver="1.47" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-2" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-7" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-8" date="1737633600">- Fix for C23 compatibility (GH#32, rhbz#2341037)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.47-1" date="1751889600">- Update to 1.46
  - Add readline-8.3 support
    - New functions: rl_reparse_colors, rl_print_keybinding
    - New variables: rl_full_quoting_desired, rl_macro_display_hook,
      rl_completion_rewrite_hook
    - New state values for rl_readline_state: RL_STATE_READSTR
  - Sample code updates
    - Import almost all examples from the GNU Readline Library
    - Use "/usr/bin/env" for sh-bang
    - Add eg/README.md
  - Make the check for being in emacs to be more like bash (GH#28)
  - Add a wrap function on every function that has Keymap as an argument
  - Add some constant functions
    - Add macro functions for rl_readline_state: RL_SETSTATE(),
      RL_UNSETSTATE(), RL_ISSTATE()
    - Export READERR
  - Fix for compilation in C23 mode (GH#32)
  - POD updates
    - Fix description of add_defun() in BUGS section (GH#23)
    - Fix formatting
  - GitHub actions: update OS and perl-version matrix</changelog>
</package>
<package pkgid="747314e59aa993880d7cef2dc9c86da85245b478a561a9e44f9c7715ddbb4f5f" name="perl-Term-Table" arch="noarch">
  <version epoch="0" ver="0.028" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.020-1" date="1722945600">- Update to 0.020
  - Fix use cycle between Test-Simple and Term::Table now that Test2::Suite was
    merged into Test-Simple
  - Fix test broken on Test::More</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.022-1" date="1723032000">- Update to 0.022
  - Fix warnings in HashBase.t
  - Some initial support for non-ASCII systems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-1" date="1730030400">- Update to 0.023
  - t/honor_env_in_non_tty.t requires Test2::Tools::Tiny &gt;= 1.302097; use
    Test::More if not available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.023-2" date="1731240000">- Don't unbundle Object::HashBase from F-41 onwards (module in Perl Core)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-1" date="1735387200">- Update to 0.024
  - Additional changes to t/honor_env_in_non_tty.t, and adding debugging</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-519" date="1751976000">- Use %{make_build} and %{make_install}
- Assume that weak dependencies are always available</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.025-1" date="1756900800">- Update to 0.025
  - Typo fix in comment
  - Hide some diagnostics when tests run in perl core</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.027-1" date="1763380800">- Update to 0.027
  - Fix terminal size detection
- Run the test suite within expect so that we get usable IO handles</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.028-1" date="1764244800">- Update to 0.028
  - Replace '//' with '||' for 5.8 support</changelog>
</package>
<package pkgid="3d7b3a2922eb978762c08695ff5c35beb30e0a34ef087d6b2244ab3cacbc6d9b" name="perl-Test-API" arch="noarch">
  <version epoch="0" ver="0.010" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-17" date="1684756800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="29acf09645dcea84f040c091d918a838539126542ac22a06793bf0028adfd92a" name="perl-Test-Assert" arch="noarch">
  <version epoch="0" ver="0.0504" rel="39.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0504-36" date="1647000000">- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0504-39" date="1680091200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="314682d938c72d84fd8401d27b7ad3ce69df1f927c8a1ef48f53c6330d0e0e15" name="perl-Test-Base" arch="noarch">
  <version epoch="0" ver="0.89" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.89-16" date="1688212800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1f600ec58f8e7ece7ac225c984242fe9805cc21d9258d738116df00f1d1a926c" name="perl-Test-CPAN-Meta" arch="noarch">
  <version epoch="0" ver="0.25" rel="33.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-33" date="1689163200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="e0016df2c68e6d191aa162c7646a9b1cd239a784f92a303a550747f22e25d37c" name="perl-Test-CPAN-Meta-JSON" arch="noarch">
  <version epoch="0" ver="0.16" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.16-25" date="1684065600">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Use %license unconditionally</changelog>
</package>
<package pkgid="b70b8a6ac7eb3a486c3a2721a4abaa344de26891b0c0e9b3c99f4e092e0e84b0" name="perl-Test-CPAN-Meta-YAML" arch="noarch">
  <version epoch="0" ver="0.25" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-25" date="1684843200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="e1a668aa6539b59078428ba8a85a6336cebb03f1cce65808424e3de418ba0bba" name="perl-Test-CheckChanges" arch="noarch">
  <version epoch="0" ver="0.14" rel="38.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.14-38" date="1684843200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="fb10f53592d2803f5524609921e013768f00e06393fa3e909948b6ada9fd88e2" name="perl-Test-CheckDeps" arch="noarch">
  <version epoch="0" ver="0.010" rel="37.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.010-37" date="1684843200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="8ca20de3c9238ed1740bf03f0307c6e8b5c10eff9551a97cb197fe6b17aa586d" name="perl-Test-ClassAPI" arch="noarch">
  <version epoch="0" ver="1.07" rel="24.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.07-24" date="1688212800">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="dc8dbf75889e10bde103f944d59d340b018aa389c4422954e7dac7093d9bddc4" name="perl-Test-CleanNamespaces" arch="noarch">
  <version epoch="0" ver="0.24" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-19" date="1684065600">- Use SPDX-format license tag
- Weaken dependency on Role::Tiny where possible
- Use %license unconditionally</changelog>
</package>
<package pkgid="efe9238cf7b105429021ac6489dae3786c46202005d62d08e9fac85a051865d6" name="perl-Test-Deep" arch="noarch">
  <version epoch="0" ver="1.205" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.204-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.205-1" date="1743508800">- Update to 1.205
  - Add "use v5.12" to Test::Deep, just for clarity
  - Fix a test so that if an "A" module is in @INC, the tests still pass
- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker &lt; 6.78</changelog>
</package>
<package pkgid="89771087a2f08c49e93410046dd7f71e1b78d051b466f179d29e7b0593372717" name="perl-Test-Differences" arch="noarch">
  <version epoch="0" ver="0.7200" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7100-1" date="1697198400">- Update to 0.71
  - Stop pointless use of taint mode in tests, so tests pass when perl is
    built without taint support
  - Document and test different behaviour regarding Booleans in perl 5.38.0
    compared to earlier versions (GH#21)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7100-5" date="1724155200">- Fix version handling for build with different locales set</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7200-1" date="1751889600">- Update to 0.72
  - Changes to tests only, so tests pass when you have a new perl that supports
    bools, but an old Data::Dumper that doesn't
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="e82b347da9608f8f4300e0b360732edcd317a7e9b76ce0c38c8cadde23446644" name="perl-Test-Directory" arch="noarch">
  <version epoch="0" ver="0.052" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.052-1" date="1677499200">- Update to 0.052
  - Fix error message on failure to remove directory in 'clean'
    (GH#2, CPAN RT#130570)
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="1086ae1678893017e64989182f78f1b352dafe919d1f9fa2347ae1011f9b1831" name="perl-Test-DistManifest" arch="noarch">
  <version epoch="0" ver="1.014" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-23" date="1646136000">- Work around package note files breaking t/02manifest.t (#2059504)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-25" date="1662465600">- Drop workaround for package note files from Fedora 37 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.014-27" date="1688126400">- Use SPDX-format license file</changelog>
</package>
<package pkgid="c8a37042b6d32df111976bb3f9fc0d12dc78008f54ebfc483e662f6b37747e78" name="perl-Test-Distribution" arch="noarch">
  <version epoch="0" ver="2.00" rel="42.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.00-42" date="1684929600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="4712fc5b8a4f1c4d1051f7782dcd0c616c40f8b4bea38f90d3a792be6810699e" name="perl-Test-EOL" arch="noarch">
  <version epoch="0" ver="2.02" rel="8.fc42"/>
  <changelog author="aul Howarth &lt;paul@city-fan.org&gt; - 2.02-8" date="1684929600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="1ab66a506507a4aee2ea79e3f5cf60cfdb9ce128e998915f7a6a5eedca81663a" name="perl-Test-Exception" arch="noarch">
  <version epoch="0" ver="0.43" rel="23.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.43-23" date="1684152000">- Spec tidy-up
  - Use SPDX-format license tag
  - Avoid use of deprecated patch syntax
  - Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="d833059f8763c150549cbb8506a3d3f4155ef990f54207031ff9552e4e3053ae" name="perl-Test-FailWarnings" arch="noarch">
  <version epoch="0" ver="0.008" rel="30.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.008-30" date="1685620800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="bc8c7dd981cea4951f8d990cf820e273dbe211222beb0c73dc00bb311406905c" name="perl-Test-Fatal" arch="noarch">
  <version epoch="0" ver="0.018" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.018-1" date="1762516800">- Update to 0.018
  - Now requires perl v5.12.0
  - Now tolerant of false exceptions coming from a boolean-overloaded object
- Use %{make_build} and %{make_install}
- Drop support for building with ExtUtils::MakeMaker &lt; 6.78</changelog>
</package>
<package pkgid="6bea3d5f010855c3f216d35653c95eb183068436cecc53d3139ed021cd5fb57b" name="perl-Test-File" arch="noarch">
  <version epoch="0" ver="1.99.5" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.3-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.3-4" date="1691496000">- Fix FTBFS in Rawhide due to %rpmversion macro becoming an rpm built-in
  (rhbz#2229872)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.4-1" date="1735905600">- Update to 1.994
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.99.5-1" date="1744632000">- Update to 1.995
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="ba1b57c5bfc408fe389e9c4eeaedabeecd2dfd4eb11916c8e5db36417dbb5e87" name="perl-Test-File-ShareDir" arch="noarch">
  <version epoch="0" ver="1.001002" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.001002-19" date="1688126400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="300953265c821c42e3985a48b199b2e0c07731d8003fa7b24fa89548c84e8579" name="perl-Test-HTML-Lint" arch="noarch">
  <version epoch="0" ver="2.32" rel="20.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-15" date="1674475200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-16" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-18" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-19" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.32-20" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="d1ea7fabe7e4730267280ba396c8ab11e7fdcff40b65ef691932e91cf8cc00d8" name="perl-Test-Harness" arch="noarch">
  <version epoch="1" ver="3.52" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.44-491" date="1688126400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.46-1" date="1691496000">- Update to 3.46
  - Colour the "ok"s as well
  - Skip symlink tests on msys2
  - Use absolute path for executable tests
  - Space-quote executable if it has spaces
  - Avoid using Errno::EINTR directly for platforms without it
  - Stop calling import on App::Prove plugins</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.47-1" date="1691928000">- Update to 3.47
  - Add missing negation in EINTR check
  - Fix HARNESS_PERL_SWITCHES=-I handling in TAP::Harness::Env</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.48-1" date="1696334400">- Update to 3.48
  - Accept TAP version 14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.50-1" date="1723636800">- Update to 3.50
  - Simplify runtests for easier extension
  - Tidy up core dump file
  - Simplify injecting of @INC paths
  - Prevent double summary on bail-out
  - Prevent bail_out summary when no handler for it is defined
  - Better check for t/ directory in Perl handler</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:3.52-1" date="1746360000">- Update to 3.52
  - Support additional indicators on block scalars in YAML
  - Fix string comparisons with $] to use numeric comparison instead
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="86720b9b0284dee3ea7b03ff92303f29e71d1ea37d7a54c31e98fdb700282b59" name="perl-Test-HasVersion" arch="noarch">
  <version epoch="0" ver="0.014" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-22" date="1685016000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-27" date="1725624000">- Add manpage for test_version</changelog>
</package>
<package pkgid="6d9ac8abd86ef4711b24a85ee4b9f703608704eee6cb6224617434cf7066947e" name="perl-Test-InDistDir" arch="noarch">
  <version epoch="0" ver="1.112071" rel="26.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.112071-21" date="1689768000">- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.112071-25" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.112071-26" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="e39287a10f095de4d79046dc61ccef12ab8a133f96cbf50a82b9b107b23c48c5" name="perl-Test-Kwalitee" arch="noarch">
  <version epoch="0" ver="1.28" rel="14.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-13" date="1685016000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.28-14" date="1727956800">- Avoid pulling in aspell</changelog>
</package>
<package pkgid="0b845434928fa48a681df3d359e2a42720e1d5327c6abc8335acb991f68cfc11" name="perl-Test-Kwalitee-Extra" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="20.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-20" date="1685016000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="10d1c50f3fd19856b3d6b791a1f00a51a39690f9872ae2ee4af72ea94d8a2f8e" name="perl-Test-LeakTrace" arch="x86_64">
  <version epoch="0" ver="0.17" rel="20.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-11" date="1680264000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-12" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-18" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-19" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-20" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="690d6e6e972a289a1862d23a6bcf28c3681a76cd5f12a1274ecff54fb3bbbc51" name="perl-Test-LongString" arch="noarch">
  <version epoch="0" ver="0.17" rel="26.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-26" date="1688040000">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org</changelog>
</package>
<package pkgid="354f19b8e5909df568ba8d8ba105b042b10b47c3c87c69b6d3f17b06fe10bdd4" name="perl-Test-Manifest" arch="noarch">
  <version epoch="0" ver="2.026" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.023-5" date="1684152000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.024-1" date="1704801600">- Update to 2.024
  - Refresh distro</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.025-1" date="1736078400">- Update to 2.025
  - Refresh distro and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.026-1" date="1744632000">- Update to 2.026
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="d6dea369112cdc944252aa465bf612606de192f4acdd4ee5cdf3fa7a436746d5" name="perl-Test-Memory-Cycle" arch="noarch">
  <version epoch="0" ver="1.06" rel="23.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-23" date="1684152000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="dd1b7718ae3898fd5f9ac17c94357fbf0406f64c0f1a8af620f62e5646052b67" name="perl-Test-MinimumVersion" arch="noarch">
  <version epoch="0" ver="0.101083" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101083-1" date="1672574400">- Update to 0.101083
  - Update packaging and metadata
- Use SPDX-format license tag
- Use %license unconditionally
- Add patch to support building with ExtUtils::MakeMaker &lt; 6.78</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101083-2" date="1689336000">- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="08151f59eccfcf555e6dc19907ec99cef88142e7706ede4cb7b91b5e48f1af06" name="perl-Test-MockModule" arch="noarch">
  <version epoch="0" ver="0.185.3" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.179.0-1" date="1725019200">- Update to 0.179.0
  - Bump Module::Build requirement (GH#65)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.180.0-1" date="1751544000">- Update to 0.180.0
  - Remove Software::License from runtime dependencies (GH#67, GH#68)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.182.0-1" date="1777636800">- Update to 0.182.0
  - See https://github.com/geofffranks/test-mockmodule/releases for details
  - Highlight: Moose and Mouse meta-class aware mocking (GH#55)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.183.0-1" date="1777809600">- Update to 0.183.0
  - Drop unused weaken import
  - Fix: new() returns distinct objects per package (GH#48)
  - Fix: Correct stacking edge cases in mock-layer restore (follow-up to GH#48)
  - Refactor: integrate stacking with Moose/Mouse meta layer and re-mock
    corners (follow-up to GH#77)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.184.0-1" date="1778068800">- Update to 0.184.0
  - Fix: Restore noop() to return 1 for backward compatibility (GH#80)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.185.0-1" date="1778155200">- Update to 0.185.0
  - Revert to pre-v0.181.0 behaviour: new() returns singleton-per-package by
    default again; pass distinct =&gt; 1 for v0.181's fresh-object-per-call
    behaviour (GH#83)
  - New: Test::MockModule-&gt;original_for($pkg, $sub): Call the original sub from
    inside a mock closure without capturing $mock</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.185.1-1" date="1779883200">- Update to 0.185.1
  - Gate author-perlcritic.t behind AUTHOR_TESTING (GH#87, GH#88)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.185.2-1" date="1780142400">- Update to 0.185.2
  - Fix optional Moose test dependencies (GH#91)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.185.3-1" date="1781611200">- Update to 0.185.3
  - Don't require Moose when mocking Moo (GH#93, GH#94)</changelog>
</package>
<package pkgid="f49549c657778e171d381510096054b9bed583830d08152e6785e61a9f328d63" name="perl-Test-Modern" arch="noarch">
  <version epoch="0" ver="0.013" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.013-25" date="1685016000">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="06ea941b81c2c14816fcc58bd7290f2d63318e88a7d403f8b1266fe0a079c9d3" name="perl-Test-Mojibake" arch="noarch">
  <version epoch="0" ver="1.3" rel="32.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-27" date="1685102400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-31" date="1706270400">- Drop BR: perl(Test::Vars) from Fedora 39 onwards as Test::Vars is FTBFS with
  Perl 5.38</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3-32" date="1726574400">- Test::Vars is fixed</changelog>
</package>
<package pkgid="9199401042cae0ba1b55529d890a35800176e96692e48fb9db58237a770913d6" name="perl-Test-Moose" arch="x86_64">
  <version epoch="0" ver="2.4000" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2203-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2205-1" date="1690113600">- Update to 2.2205 (rhbz#2224800)
  Tests
  - Adjust the expected list of UNIVERSAL methods, to account for changes in
    perl 5.39.1: some things, like the import method, could end up existing
    based on the perl version or based on a prerequite loading UNIVERSAL.pm
    (GH#183)
- Revert test change for Perl 5.39 if our perl is older than 5.22</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2206-1" date="1690113601">- Update to 2.2206
  - Fix parsing error in test in 2.2205 release</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-1" date="1705838400">- Update to 2.2207
  - Remove test dependency on Test::CleanNamespaces (GH#184)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-2" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-4" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-5" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2207-6.1" date="1745150400">- Add provide for Moose::Conflicts, used in test suite for MooseX-Types
- Use %{make_build} and %{make_install}
- Drop Obsoletes/Provides for perl-Class-MOP, merged into perl-Moose in Fedora
  15 (2011)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.4000-1.0" date="1751889600">- Update to 2.4000
  Documentation
  - Clarified some wording regarding the interactions between attribute
    configuration options "init_arg" and "required" (GH#187)
  Other
  - The release schedule and numbering scheme has changed; see
    Moose::Manual::Support</changelog>
</package>
<package pkgid="b4cf736398632a2cb71d9307fb06ae658c296f2038f1098dfdd5dd5651bcd33e" name="perl-Test-More-UTF8" arch="noarch">
  <version epoch="0" ver="0.05" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-2" date="1687867200">- Use SPDX-format license tag
- Use author-independent source URL</changelog>
</package>
<package pkgid="261000036f3cd045e0c8bd92a4e0feca90c663998ecd46513f7f7f48a58086fc" name="perl-Test-Most" arch="noarch">
  <version epoch="0" ver="0.42" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.41-1" date="1777550400">- Update to 0.41
  - Prevent strange import behaviour caused by @EXPORT twiddling
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.42-1" date="1778241600">- Update to 0.42 (rhbz#2467785)
  - Restore support for 'use Test::Most import =&gt; [...]' to select which
    symbols to export; the 0.39 export rework broke it (GH#18)</changelog>
</package>
<package pkgid="66c0024cb5ecc0aba5f80a5ae7c64795aeb640118a63c570508a815fd54c0f7c" name="perl-Test-Mouse" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-21" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.10-22" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-1" date="1722772800">- Update to 2.5.11
  - Use Devel-PPPort 3.59 (GH#113)
  - Mark "builtin" as foreign (GH#123)
- Update bundled ppport.h to version 3.62</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-4" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.11-5" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.0-1" date="1761825600">- Update to 2.6.0 (rhbz#2407306)
  - Update minimum perl version from 5.8 =&gt; 5.10 (GH#112)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-1" date="1766232000">- Update to 2.6.1 (rhbz#2424094)
  - Provide empty import on Mouse::Deprecated for imported Moose test
    (GH#120, GH#127)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.1-2" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.6.2-1" date="1775390400">- Update to 2.6.2 (rhbz#2455030)
  - Fix the conversion from floating point number to string with quadmath Perl
    (GH#126)</changelog>
</package>
<package pkgid="982f8517cc3a8f3b73f6ead1c0806704f04ef0e4df9105fbc236c212366f5870" name="perl-Test-Needs" arch="noarch">
  <version epoch="0" ver="0.002010" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002009-1" date="1622030400">- Update to 0.002009
  - Fix tests when @INC includes directories that shouldn't have their archname
    or version subdirectories added
  - Fix test compatibility with Windows
  - Fix warnings from Test::Builder if Test::Needs is loaded first, and is used
    to check for a Test module
  - Fix location in code reported when a module check fails
  - Support short forms of perl versions
  - Support perl versions greater than 5
  - Fix handling of v-string versions on perl 5.6</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002010-1" date="1674475200">- Update to 0.002010
  - Split main test into three separate scripts
  - Avoid outputting multiple plans if used with no_plan
- Use SPDX-format license tag</changelog>
</package>
<package pkgid="79e82b66eeccdda1df91be5f0f8b93b7d98997ef8b4c1bd65abbbb01a7daa1cb" name="perl-Test-NoTabs" arch="noarch">
  <version epoch="0" ver="2.02" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.02-17" date="1685102400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="8949f263f5d78c24bc8b14c5e14c08f98e5c93b40d519fae99da8a567cf58615" name="perl-Test-NoWarnings" arch="noarch">
  <version epoch="0" ver="1.06" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-1" date="1627473600">- Update to 1.06
  - Clarify docs around tests without a plan
  - Documentation cleanups and typo fixes
  - Minor code cleanups
  - use warnings in tests
  - Skip fork test if perl can't fork
  - Note conflicts with Carp::Always in documentation
  - Made had_no_warnings turn off the checking at END time for use with
    done_testing based tests with no test count; also added docs
- Use %license unconditionally
- Distribution no longer includes Extra Tests
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.06-5" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="37598998658380eed15436696c7aa0f5b459df131e6b4727d6ee344f05f95a73" name="perl-Test-Object" arch="noarch">
  <version epoch="0" ver="0.08" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-17" date="1687867200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="6fb2a1a23166f33a29c4988659ed8a59792a836dd1757d8b29a632b70378784d" name="perl-Test-Output" arch="noarch">
  <version epoch="0" ver="1.036" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.034-1" date="1688558400">- Update to 1.034
  - Remove unnecessary -T from pod tests: now that v5.38 allows you to compile
    without taint support and those perls won't run if they see a -T, these
    tests needlessly fail there
  - Correct spelling mistakes (GH#10)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.034-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.035-1" date="1735905600">- Update to 1.035
  - Distro refresh and move to BRIANDFOY
- Package new file SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.036-1" date="1744718400">- Update to 1.036
  - Require a newer version.pm for v5.10.1 tests
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="62c05f884ceeee48910897ae492f3301f534f1d6681544b57f0568edee6e2e9b" name="perl-Test-Perl-Critic" arch="noarch">
  <version epoch="0" ver="1.04" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-14" date="1640952000">- Use %license unconditionally
- No spell checking done in package build</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.04-19" date="1683633600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="c55a6f369b0f06bcc4311377b3f208770d148ff2aa52dbd9c21a5424b35b498f" name="perl-Test-Perl-Critic-Policy" arch="noarch">
  <version epoch="0" ver="1.156" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.152-4" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-1" date="1729512000">- Update to 1.154 (rhbz#2320114)
  Enhancements
  - ProhibitedUnusedCapture now recognizes %+, %-, %{^CAPTURE} and
    %LAST_PAREN_MATCH (GH#1065)
  - Fixed a deprecation warning in the extras/perlcritic.el Emacs script
    (GH#1067)
  - RequireExplicitPackage now accepts a use VERSION as the first line
    (GH#1070)
  Fixes
  - Fix some false positives for function calls as a hash index (GH#1071)
  Documentation
  - Clarify package_exemptions rules (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.154-2" date="1729512001">- Require ExtUtils::Manifest for Perl::Critic::TestUtils::bundled_policy_names()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-1" date="1729684800">- Update to 1.156 (rhbz#2321227)
  - Subroutines::ProhibitManyArgs no longer gets confused by underscores in
    variable names (GH#1027)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-2" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-3" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-4" date="1768824000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.156-5" date="1780315200">- Run tests with LANG=en_US.UTF-8 to fix pod spelling test on Rawhide</changelog>
</package>
<package pkgid="35e46ef7865d07be7ce2813c8b5f55a87b81ca1f3458aa4adcd48187e403371f" name="perl-Test-Pod" arch="noarch">
  <version epoch="0" ver="1.52" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.52-16" date="1687867200">- Use SPDX-format license tag
- Switch upstream from search.cpan,org to metacpan.org</changelog>
</package>
<package pkgid="ac0474772ece8177d15862cacdaf2c13fc51809f53033205b19df4f279af44cb" name="perl-Test-Pod-Coverage" arch="noarch">
  <version epoch="0" ver="1.10" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10-25" date="1689163200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f0b5371ff1d922cd55208ed85cff499fa70579166352c860880f9a712f4f8b84" name="perl-Test-Portability-Files" arch="noarch">
  <version epoch="0" ver="0.10" rel="18.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-15" date="1687780800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-18" date="1714737600">- Test::Vars unavailable after Fedora 39</changelog>
</package>
<package pkgid="bc2d671f0889379add316af7589fd23562afb0e514d4f042b603a340fb9b506e" name="perl-Test-Prereq" arch="noarch">
  <version epoch="0" ver="2.005" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.003-11" date="1685102400">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.005-1" date="1735905600">- Update to 2.005
  - Refresh distro
  - Move to BRIANDFOY user
  - Add SECURITY.md policy
- Use %{make_build} and %{make_install}</changelog>
</package>
<package pkgid="7113b44b9cd38dc7db4d8b98a66565d41da9694ba6620f9a6d2555f5de31a8df" name="perl-Test-Regexp" arch="noarch">
  <version epoch="0" ver="2017040101" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2017040101-21" date="1684152000">- SPDX migration</changelog>
</package>
<package pkgid="41375699ef72a2fd90326aa625a732c05da75b06d30100ca43df27cc9dc3a3dc" name="perl-Test-Requires" arch="noarch">
  <version epoch="0" ver="0.11" rel="11.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-11" date="1678104000">- Use SPDX-format license tag
- Drop decade-old obsoletes/provides for old tests sub-package
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="cfee0970e0dc762286ca55ef6c8e47a711ddc3240c9a6c5b4f4b89f53220cba3" name="perl-Test-RequiresInternet" arch="noarch">
  <version epoch="0" ver="0.05" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.05-25" date="1684238400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="6bbf8222f8c74e85591a169349d1803d5a079694a05a989ab863312e75e026a6" name="perl-Test-Script" arch="noarch">
  <version epoch="0" ver="1.31" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.30-1" date="1754395200">- Update to 1.30
  - Documentation improvements (GH#42)
  - Fix bug where implicit function export would happen regardless of which
    functions were explicitly exported (GH#45, GH#46)
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.31-1" date="1755000000">- Update to 1.31
  - Fix bug introduced in 1.30 where exports were not happening correctly in
    legacy mode (GH#47)</changelog>
</package>
<package pkgid="817a90488e92aaa26e50a8306b08728cb4f40c0b5232b8161f741229b834ffae" name="perl-Test-Signature" arch="noarch">
  <version epoch="0" ver="1.11" rel="29.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-26" date="1647000000">- Work around FTBFS triggered by package note feature</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.11-29" date="1685102400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="b29d0ec07b68480b0624a6345722191a436fde148c0650e5fcb9179a5a9dd01d" name="perl-Test-Simple" arch="noarch">
  <version epoch="3" ver="1.302222" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302212-1" date="1747569600">- Update to 1.302212
  - Add a workaround for Test::Class::Moose</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302213-1" date="1747656000">- Update to 1.302213
  - Fix duplicate words in Changes file (GH#1044)
  - Fix spelling issue (GH#1043)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302214-1" date="1748174400">- Update to 1.302214
  - Fix typo in documentation</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302214-2" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302216-1" date="1763294400">- Update to 1.302216
  - Fix typos
  - Fix undef string bug in Test::Tester</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302218-1" date="1765195200">- Update to 1.302218
  - Add Test2::V1 bundle</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302219-1" date="1765368000">- Update to 1.302219
  - Fix downstream test not to install Test2::Suite
  - Fix documentation mistakes</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302220-1" date="1781179200">- Update to 1.302220
  - Add [PruneCruft] to dist.ini so build artifacts (blib/, pm_to_blib,
    MYMETA.*) no longer leak into release tarballs
  - Remove Net::BitTorrent from broken list
  - Amend tests to adapt to more accurate line number reporting in core
    (GH#1080)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302221-1" date="1781524800">- Update to 1.302221
  - Prevent the new EBCDIC support from breaking 5.6</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3:1.302222-1" date="1781611200">- Update to 1.302222
  - Add missing Changes entry
  - Fix test that fails on some Windows versions due to path separators</changelog>
</package>
<package pkgid="823f0280e768452baa1cfaada8090f716df671543be3b54e1d62b05e22acc82c" name="perl-Test-Specio" arch="noarch">
  <version epoch="0" ver="0.53" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-6" date="1706270400">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.48-7" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-1" date="1735041600">- Update to 0.49
  - Attempting to import any structured type caused a confusing
    "Can't store CODE items" error
  - Removed the "this is alpha" warning from Specio::Library::Structured; it's
    as production-ready as it's going to get</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.49-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.50-1" date="1739966400">- Update to 0.50
  - Fixed a bug in the Int type that caused it to accept numbers like
    124512.000000000123, which when stringified, are stringified as integers
    (GH#22)
- Drop EL-7 support
  - Always have List::Util ≥ 1.33
  - Always have Sub::Util
  - Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-1" date="1750420800">- Update to 0.51
  - Made it possible to force Specio to use only pure Perl dependencies, by
    setting the SPECIO_IMPLEMENTATION environment variable to "PP" (GH#23)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-2" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.52-1" date="1754913600">- Update to 0.52
  - Really made it possible to force Specio to use only pure Perl dependencies;
    the changes in 0.51 were incomplete, so lots of places still loaded the
    Clone (XS) module (GH#23)
- Package new GOVERNANCE.md, SECURITY.md and SUPPORT.md files</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.53-1" date="1759924800">- Update to 0.53
  - Fixed a test failure when trying to open $^X on some platforms</changelog>
</package>
<package pkgid="38aa440c326d03ab118663e2267a1834d64910e29a1bd322dbdbb98433464037" name="perl-Test-Spelling" arch="noarch">
  <version epoch="0" ver="0.25" rel="13.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.25-13" date="1685102400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="da8d1d9f905eacde5071ef8198605314e24cff0c8e1b639ccbc08514f8f2c324" name="perl-Test-SubCalls" arch="noarch">
  <version epoch="0" ver="1.10" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10-17" date="1685188800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c55bf78aecb9b0278ba4e1a1bc6920ffc5e1f613559111e185ee10d14769d1fd" name="perl-Test-Synopsis" arch="noarch">
  <version epoch="0" ver="0.18" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-12" date="1751976000">- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-1" date="1783944000">- Update to 0.18
  - Fix: =for test_synopsis directives are now applied regardless of their
    position relative to the SYNOPSIS code block (GH#20, regression since 0.14)</changelog>
</package>
<package pkgid="50594dc1cd4cfe398018975acf8931b27aebce2c8d913890b5663d6d08297ec0" name="perl-Test-Taint" arch="x86_64">
  <version epoch="0" ver="1.08" rel="18.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-13" date="1687780800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-14" date="1689163200">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.08-18" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="ef2582ce5dd026c6ee2274d87486ea1eb8ae5a2519f66e2bf55913b4e1f35987" name="perl-Test-TrailingSpace" arch="noarch">
  <version epoch="0" ver="0.0601" rel="6.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-1" date="1630065600">- Update to 0.0601
  - Split File::TreeCreate off to its own distribution
- Use %license unconditionally
- Fix dist tags for Alma and Rocky Linux</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0601-6" date="1685361600">- SPDX migration</changelog>
</package>
<package pkgid="6f012930da1f281c021436f36566272553660edb8f5802bb4858b99b6ec37729" name="perl-Test-TypeTiny" arch="noarch">
  <version epoch="0" ver="2.010001" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.0" date="1744804800">- Update to 2.008001
  Bug Fixes:
  - The Optional type constraint on its own, will now be treated the same as
    Optional[Any]; previously, when used for named parameters, it would fail to
    generate predicate methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.1" date="1745496000">- Fix test compatibility with MooseX-Types 0.51 (GH#176)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-1.0" date="1746100800">- Update to 2.008002
  Bug Fixes:
  - MooseX-Types 0.51 broke Type::Tiny's ability to reliably detect if Moose
    types were being used; this release fixes that</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-2.0" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008003-1.0" date="1756814400">- Update to 2.008003
  Bug Fixes:
  - Make sure methods fake-inherited from Moose (if it's loaded) are a last
    resort
  Other:
  - Slightly streamlined `Type::Tiny::can` and `Type::Tiny::AUTOLOAD`
  - When dumping structures via Data::Dumper (mostly in error messages),
    suppress any warnings Data::Dumper would emit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008004-1.0" date="1760702400">- Update to 2.008004
  Documentation:
  - Type::Tiny pod syntax fix
  Other:
  - Added: Type::Tiny::Duck (used by HasMethods) now includes a
    new_intersection constructor</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008005-1.0" date="1763726400">- Update to 2.008005
  - Minor optimization for Type::Params: sometimes it would construct an
    arrayref of hashref from the slurpy arguments to a function and then check
    that the arrayref it created was an arrayref, or check the hashref it
    created was a hashref; those checks seem unnecessary - if they had ever
    failed it would indicate something deeply wrong with Perl itself, so these
    superfluous checks are now avoided
  - Minor optimization for Type::Params: sometimes it would wrap a 'goto' in a
    'do' block for no reason, which could potentially slow down the call as
    Perl might create a new lexical context unnecessarily; it is unlikely to
    make a measurable difference</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008006-1.0" date="1764244800">- Update to 2.008006
  - Minor optimization for non-XS type check code for Enum types: if there are
    only a small number of valid strings (five or under), check using 'eq' and
    'or' operators instead of compiling a regexp to check against them all at
    once; this can be controlled by passing the 'use_eq' attribute to the
    Type::Tiny::Enum constructor, but is otherwise automatic</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010000-1.0" date="1767182400">- Update to 2.010000
  Added:
  - Added: Add 'check_coerce' method to Type::Coercion
  - Added: Add 'check_coerce' method to Type::Tiny
  - Added: Add environment variables to affect how 'signature_for' checks
    appear in stack traces, debugging, and profiling
  - Added: Type::Params args objects now provide __TO_LIST__, __TO_ARRAYREF__,
    and __TO_HASHREF__ methods
  - Added: Type::Params now provides hooks for the event of wrapping a sub in a
    signature
  Documentation:
  - Update NEWS file
  - Update Type::Tiny::Manual::Policies with planned changes for Type::Tiny 3
  - Add security policy to Type::Tiny::Manual::Policies
  - Fix syntax in some of the documentation for Type::Params
  - Update documentation to potential future changes to coercions in
    Types::Standard
  - Document that Type::Tiny::Enum defines its own sorter
  Test Suite:
  - Skip t/20-modules/Type-Tie/06clone.t on very old Perls
  - Add test suggestion dependencies on Devel::Hide and namespace::clean
  Other:
  - If you lexically import 't' from Type::Registry, then it will no longer be
    tied to the caller's per-package type registry
  - Type::Tiny::Enum now throws an exception if you try to pass a sorter
    coderef to the constructor
  - Minor optimization to avoid wrapping certain inlined checks in do {...}
    blocks</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010001-1.0" date="1767787200">- Update to 2.010001
  - Fix for $LIST_SEPARATOR changes breaking Type::Coercion, Types::Common,
    Types::Standard</changelog>
</package>
<package pkgid="885ac430d1cb793cb8aa1f1cc62e088ce26d83aa68c11c481dd23f3aa2d643d8" name="perl-Test-Unit-Lite" arch="noarch">
  <version epoch="1" ver="0.12.02" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.12.02-1" date="1665144000">- Make rpm version reflect upstream version better (rhbz#2132720)
- Assume build with rpm ≥ 4.9
- Use SPDX-format license tag
- Use %license unconditionally
- Use mktemp to create GNUPGHOME</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.12.02-2" date="1689768000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
</package>
<package pkgid="3417877af65fb156da32a33029b0035b9b5ac2a866f1d99dfab6bc32c987967d" name="perl-Test-UseAllModules" arch="noarch">
  <version epoch="0" ver="0.17" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.17-25" date="1685448000">- Use SPDX-format license tag
- Line endings don't need fixing</changelog>
</package>
<package pkgid="d528115ee6d41042b1cdddbb958da1bc850da2468d1d81b49aa464a1b966517b" name="perl-Test-Valgrind" arch="noarch">
  <version epoch="0" ver="1.19" rel="23.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-22" date="1684324800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.19-23" date="1690718400">- Fix FTBFS in Fedora 39 due to failing t/20-bad.t (rhbz#2222854)</changelog>
</package>
<package pkgid="507e4e06c4932ab9e081da153780c4ec8c511b0eb06e62ffd7bcd868e7aefb37" name="perl-Test-Vars" arch="noarch">
  <version epoch="0" ver="0.017" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.015-9" date="1685448000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.017-1" date="1726574400">- Update to 0.017
  - Support new opcodes introduced in 5.37 development cycle: PADSV_STORE
    and AELEMFASTLEX_STORE (GH#52)
  - Return build system to ExtUtils::MakeMaker (GH#54)
- Switch to ExtUtils::MakeMaker flow</changelog>
</package>
<package pkgid="37557006fb385d8ce7fb09591ae15aaed64eb493c96be356f64553620a796a74" name="perl-Test-Version" arch="noarch">
  <version epoch="0" ver="2.09" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.09-21" date="1685534400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4207b7c59f23433154e01e8f975a73ff12e893128f0d6d50b3cdab3ebd4eb3d0" name="perl-Test-Warn" arch="noarch">
  <version epoch="0" ver="0.37" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-1" date="1660392000">- Update to 0.37
  - Allow duplicate warnings when using warnings_exist (GH#8)
- Use author-independent source URL</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-2" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="df04ee4e265772dcf96bb6cefcab35071adaa3f09232642c005ec01899668921" name="perl-Test-Warnings" arch="noarch">
  <version epoch="0" ver="0.038" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.031-6" date="1684324800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.032-1" date="1696161600">- Update to 0.032
  - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
    temporarily turning failures into reports</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.033-1" date="1706011200">- Update to 0.033
  - Add Test2 compatibility in the test triggered by done_testing()
  - New long-awaited feature (!!!) "allow_patterns", to either
    temporarily or globally exempt particular warning patterns</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.034-1" date="1735905600">- Update to 0.034
  - Fix Test2 compatibility for done_testing()
  - Test2::Warnings added as a simple wrapper (for now)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.036-1" date="1736078400">- Update to 0.036
  - Allow tests to pass even when Import::Into is not installed (CPAN RT#158296)
  - Add backcompat shim for cases where Test::More is loaded in tests after
    Test::Warnings
  - Avoid redefinition warnings when $^W is enabled in tests (CPAN RT#158297)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.037-1" date="1736164800">- Update to 0.037
  - Remove unneeded use of Import::Into
  - Fix for tests that invoke Test::Warnings-&gt;import directly</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.038-1" date="1738497600">- Update to 0.038
  - Refrain from swapping out done_testing method if :no_end_test is configured</changelog>
</package>
<package pkgid="58768c2a2f585682e49c6d0a0b7a39e2e3af0a2db52a14c0901ffceeb4315290" name="perl-Test-Without-Module" arch="noarch">
  <version epoch="0" ver="0.23" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-1" date="1670846400">- Update to 0.21
  - Harden test suite against changed error message coming with 5.38
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.21-2" date="1689336000">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.22-1" date="1720267200">- Update to 0.22
  - Fix test suite to not skip a failing test
- License changed to Artistic-2.0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.23-1" date="1721044800">- Update to 0.23
  - Lower minimum required Perl version back to 5.006 (GH#5)</changelog>
</package>
<package pkgid="50efccf0d432c49253bcf38c7d91a302a4084ddbec86f87e657d15d872174f86" name="perl-Test-WriteVariants" arch="noarch">
  <version epoch="0" ver="0.014" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.014-2" date="1687694400">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="6861cbb9a706eaa3ffdf04e334cf6cbe2c4743d7fbc69f0e2bb617628e1cf614" name="perl-Test-YAML" arch="noarch">
  <version epoch="0" ver="1.07" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.07-16" date="1685534400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="443a1b7d9314dff3473ba1c7c2f7f05c678af6006b43adc97e00a44ff2596e8a" name="perl-Test-YAML-Valid" arch="noarch">
  <version epoch="0" ver="0.04" rel="39.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.04-39" date="1685534400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="09ae4c1b1ae22b0cc0fd29b3b6889a537cd5ead166b48026f2ee1d5dcfe861bd" name="perl-Test-utf8" arch="noarch">
  <version epoch="0" ver="1.03" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-10" date="1687780800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-1" date="1731672000">- Update to 1.03
  - Fix tests to adapt to Perl removing apostrophe as package separator
    (CPAN RT#154915)
  - Upgraded distro files like packaged Module::Install version and META.yml,
    to avoid other looming Perl deprecation issues
- Switch source URL from cpan.metacpan.org to www.cpan.org to work around
  ongoing issues with metacpan</changelog>
</package>
<package pkgid="7f67ab1ca65d9acda793c0751aae9548cd0cc968d779fd9d71ff4a076879c381" name="perl-Test2-Plugin-NoWarnings" arch="noarch">
  <version epoch="0" ver="0.10" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-9" date="1684324800">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-1" date="1712491200">- Update to 0.10
  - Previously, when tests were run via prove without the verbose flag and
    there was a warning that caused a test failure, there was no output
    indicating that a warning caused the failure; this has now been corrected
    and you'll see output that includes "Unexpected warning"</changelog>
</package>
<package pkgid="87c65624a8845439966b1614027bfeae670515c03f435904b718991c5a09a69c" name="perl-Test2-Tools-Explain" arch="noarch">
  <version epoch="0" ver="0.02" rel="12.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-12" date="1685534400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="545dccc2372a97ad46b9b5a1933091ebc8b551a4647013a6f0c3b46acdafd3e1" name="perl-Text-CSV_XS" arch="x86_64">
  <version epoch="0" ver="1.64" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.56-1" date="1723377600">- Update to 1.56 (rhbz#2303862)
  - Yet another strict/comment_str conflict (GH#57)
  - Strict affected by column_names</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.57-1" date="1731412800">- Update to 1.57 (rhbz#2325504)
  - Add on_error callback to csv()
  - Retain runtime error from csv()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.58-1" date="1735560000">- Update to 1.58 (rhbz#2334923)
  - Add strict_eol (warnings default in csv())
  - Add XS line number in errors
  - Add streaming support (not set in stone)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.59-1" date="1736078400">- Update to 1.59 (rhbz#2335660)
  - Fixed EOL test for Windows with crnl layer
  - It is 2025</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1" date="1738324800">- Update to 1.60 (rhbz#2343165)
  - Add SECURITY.md
  - CR/NL/CRNL inside quoted fields not affected by strict_eol
  - Fix incorrect error 2014 (GH#62)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-2" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1753617600">- Update to 1.61 (rhbz#2383739)
  - Add love letter to CSV from xan project with reference
  - Bugtracker to Github (long overdue) (GH#63)
  - Update to Devel::PPPort-3.73</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.62-1" date="1777464000">- Update to 1.62 (rhbz#2463743)
  - It is 2026
  - Fix possible stack corruption (GH#65, CVE-2026-7111)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.63-1" date="1782129600">- Update to 1.63
  - Check attribute lengths (memory protection)
  - Minor code consistencies (not user-visible)
  - Dropped support for 5.6.x and 5.8.0; minimum perl is now 5.8.1
  - Fix special str setting consistency for types, undef_str and comment_str
  - Characters []:*/\ are not allowed in XLSX sheet names</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.64-1" date="1782129601">- Update to 1.64 (rhbz#2491334)
  - Fix syntax error in csv2xlsx</changelog>
</package>
<package pkgid="a92d1dba910288510a96a38767168afb1537cddfc009b122d8336182bdfaf981" name="perl-Text-Diff" arch="noarch">
  <version epoch="0" ver="1.45" rel="18.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-18" date="1686225600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="9481097cefba1fb85538d1ede8482aea96771acb5e68e5b12b377f2322354635" name="perl-Text-Glob" arch="noarch">
  <version epoch="0" ver="0.11" rel="20.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.11-20" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="5c921e5aa5b37382f1556ec685c79b0208575145fbac406404b14799e0addc24" name="perl-Text-Haml" arch="noarch">
  <version epoch="0" ver="0.990118" rel="21.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.990118-21" date="1689595200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="006731fec7637b7fcfffd91a2a164402f91571edadd9f101725c6aa237e1a8e3" name="perl-Text-Hunspell" arch="x86_64">
  <version epoch="0" ver="2.16" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.16-1" date="1657886400">- Update to 2.16
  - Documentation improvements (GH#16, GH#18)
  - Add LICENSE file (GH#14)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.16-3" date="1685534400">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with ExtUtils::MakeMaker &lt; 6.52</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.16-4" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.16-8" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="1bc698799357f4def0f6c2b46df41847483d99d64fdd4c5bf106665edde5659c" name="perl-Text-Template" arch="noarch">
  <version epoch="0" ver="1.61" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-1" date="1630843200">- Update to 1.60
  - Fix another POD syntax error
- Fix dist tags for Alma and Rocky Linux
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.60-2" date="1647604800">- Work around package note files breaking t/author-signature.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-1" date="1651233600">- Update to 1.61
  - Skip taint tests if perl was compiled with taint disabled (GH#20)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.61-2" date="1687694400">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="dc26ee236d812a55e20dfb4cf78abd6cfe990d5f2e58c2d405511add679f1665" name="perl-Text-Trac" arch="noarch">
  <version epoch="0" ver="0.24" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.24-2" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="23b299a781290a7e0a7a3d394421b01cbc1f121fb2357d1f09d2978b531b9927" name="perl-Tie-IxHash" arch="noarch">
  <version epoch="0" ver="1.23" rel="35.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-35" date="1686225600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="46a66d48e84f95867d5d2f42ec9217815b4b9890511c367fbdb590e3218a8ae4" name="perl-Tie-RefHash-Weak" arch="noarch">
  <version epoch="0" ver="0.09" rel="41.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-41" date="1685620800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="74fc59432ac638f809a3177e10f1ae31d2fef6f3fb2a44f67703df97e08b888c" name="perl-Tie-ToObject" arch="noarch">
  <version epoch="0" ver="0.03" rel="44.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.03-44" date="1682596800">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="241cab354ad405ba20794743435274ae74d774f7b451f54141b660fed9db1bf8" name="perl-Time-y2038" arch="x86_64">
  <version epoch="0" ver="20100403" rel="36.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20100403-31" date="1685620800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20100403-32" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20100403-36" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="165a90f6b8b562bec0f7ae033603f02513b7c63b5b1aa68d52764c58bdf6d44c" name="perl-TimeDate" arch="noarch">
  <version epoch="1" ver="2.35" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.34-1" date="1772366400">- Update to 2.34
  - Increase coverage in documentation
  - Refactor: Extract _build_lookups helper, remove hash-building duplication
  - Correct language data bugs and minor code review fixes
  - Fix up utf8 and add tests
  - Use Dist::Zilla for the distro
  - Rebase: Apply review feedback on GH#49 and GH#52
  - Fix: Uncomment Indian Standard timezone (IST)
  - Feature: Support boost C++ timestamp format (%Y-%b-%d %H:%M:%S.%f)
  - Correct typos across documentation and comments
  - Stop using 'use vars'
  - Remove limitation from Date::Parse
  - Create Arabic.pm
- Use %{make_build} and %{make_install}
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.35-1" date="1774180800">- Update to 2.35
  - Test: Document and pin CPAN RT#84075/GH#12 fix in regression suite
  - Fix: Add NST, NFT, and NDT (Newfoundland) timezone support
  - Fix: Add ICT and PHT timezone support
  - Fix: Restore rebase regressions and clarify first-century limitation
  - Fix: Normalize two-digit years in str2time to avoid Time::Local windowing
    mismatch
  - Fix: Use standard 2-letter German weekday abbreviations
  - Fix: Detect timegm/timelocal overflow for far-future dates (CPAN RT#88777)
  - Test: Add regression tests for CPAN RT#88777 (negative epoch for far-future
    dates)
  - Fix: Use stored epoch in format_Z/format_z to fix DST fall-back timezone
    name
  - Fix: Document MSK timezone history and add regression test (CPAN RT#98949)
  - Fix: strftime %s with timezone now returns correct epoch (CPAN RT#52387)
  - Test: Add POD validity regression test for CPAN RT#53557
  - Fix: Include day in year-inference for dates without an explicit year
  - Fix: Document MSK timezone history and add regression test (CPAN RT#81350)
  - CI: Install Pod::Checker via cpm in Linux CI
  - Docs: Add SECURITY.md with vulnerability reporting policy
  - Test: Add regression tests for CPAN RT#57800/GH#3 (numeric m/d/yyyy
    pre-1970 dates)
  - Fix: Normalize year offset for dates before 1901 in strptime
    (CPAN RT#106105)
  - Fix: Reject timezone-only inputs in strptime (CPAN RT#70650)
  - Test: Add failing tests for CPAN RT#70650 (ludicrous date parsing)
  - Fix: Prevent negative month from strptime for 6-digit inputs like '199001'
  - Test: Add Portuguese format and round-trip tests from GH#61
  - Fix: Treat number &gt; 31 after month name as year, not day (GH#2)
  - Fix: Translate timezone abbreviations (%Z) in language-specific formatting
  - Fix: tz_name() offset in seconds was treated as minutes (CPAN RT#59298)
  - Docs: Fix ISO-8601 example date in Date::Parse POD (GH#6)
  - Feat: Add optional LANGUAGE parameter to time2str()
  - Feat: Allow str2time() to accept a custom reference epoch (CPAN RT#64789)
  - Docs: Clarify strptime() return format for ISO 8601 dates (GH#44)
  - Feat: Add Portuguese language module
  - Fix: Prefer CEST over MEST as canonical Central European Summer Time name
  - Fix: Add ICT and PHT timezone abbreviations to Time::Zone (CPAN RT#123247)
  - Fix: Standardize Greek.pm to use native Unicode instead of \x{} escapes
  - Test: Add regression test for CPAN RT#105031/GH#17 (1965-12-31 maps to 2065)
  - Fix: Declare Carp as runtime prerequisite in Makefile.PL
  - Fix: Infer current year for future months when no year given (CPAN RT#92611)
  - Test: Add regression tests for CPAN RT#53413 (4-digit year mangling)
  - Fix: Handle leap day in year-only date parsing test
  - Fix: Support IANA timezone names in tz2zone and tz_offset (CPAN RT#76968)
  - Fix: Preserve comma as ISO 8601 decimal separator in strptime
  - Fix: Add French day ordinal suffix in format_o
  - Fix: Make tz_name tests deterministic across DST transitions</changelog>
</package>
<package pkgid="85f78c62799a641939968463843d83645bfe466144b41fdd13b77a53300baea5" name="perl-Tree-DAG_Node" arch="noarch">
  <version epoch="0" ver="1.39" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.33-1" date="1743336000">- Update to 1.33
  - Replace the discouraged File::Slurp::Tiny with File::Slurper
  - Add a security policy file SECURITY.md
  - Update Makefile.PL to include both ExtUtils::MakeMaker and perl
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.34-1" date="1745841600">- Update to 1.34
  - Fix test failures due to line endings on Windows (GH#4)
  - The 2 test files t/tree.with*.txt ship as ISO-8859-1, while
    t/tree.utf8.attributes.txt ships as UTF-8; so...
    - Don't explicitly use UTF-8 encoding in DAG_Node.pm's sub read_tree();
      rather, use a regexp to standardize line endings after reading, and
      likewise, in t/read.tree.t, do the same
    - Un-comment the 2 extra tests at the end of t/read.tree.t; specifically,
      line 50 was 'for (qw/utf8/)# with without/)' and now says
      'for (qw/utf8 with without/)'
    - Reformat test data files t/tree.*.attributes.txt; this was done with the
      new files share/read.write.tree.(pl, sh), and it was done because some of
      the test data files had been written by old code with slightly different
      indenting
  - Add a new test data file, t/metag.cooked.tree.txt; it's a copy of
    MarpaX::Grammar::Parser's share/metag.cooked.tree, and the test program
    t/read.tree.t was edited to include this new file
  - Patch tree::DAG_Node.format_node() to output 'Attributes: {}' and not just
    'Attributes:' when the user does not want attributes reported; this makes
    the code match the sample trees shipped in t/</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.35-1" date="1747051200">- Update to 1.35
  - Change sub hashref2string() so it does not generate an error or warning when
    the node or node name is '' (empty string), undef or 0 (zero)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-1" date="1782648000">- Update to 1.36
  - No functional changes
  - Fix typo in the 2nd FAQ: "How to process every node in tree?"
  - Add new version of LICENSE to the distro
  - Add new files LICENSE-Artistic-2.0 and LICENSE-GPL-3 to the distro
  - Add Data::Dumper, Getopt::Long, perl to Makefile.PL
  - Remove open from Makefile.PL
  - Modernize MANIFEST.SKIP</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1782734400">- Update to 1.37
  - No functional changes
  - Replace the body of the LICENSE file with what is recommended at
    https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html
  - Patch the source code reference to refer to this LICENSE file
  - Remove the excess and confusing files LICENSE-Artistic-2.0 and LICENSE-GPL-3
  - Reset the required version of Data::Dumper back to 0</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.38-1" date="1783425600">- Update to 1.38
  - Replace LICENCE file content with the Perl_5 license from Software::License
  - Add AI_POLICY.md file
  - Modernize MANIFEST.SKIP again</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1" date="1783512000">- Update to 1.39
  - Regenerate LICENSE using latest Software::License (GH#1)</changelog>
</package>
<package pkgid="db57d24c90ed20e949a9e065badb861bec0ca2847e46f695155c72854c429257" name="perl-Try-Tiny" arch="noarch">
  <version epoch="0" ver="0.32" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-5" date="1680523200">- Avoid use of deprecated patch syntax
- Note that license is SPDX: MIT</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-6" date="1689249600">- Drop MODULE_COMPAT dependency from Fedora 38 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.32-1" date="1723896000">- Update to 0.32
  - Skip given, when tests on perls ≥ 5.41.3 which removed these constructs</changelog>
</package>
<package pkgid="efd3b14bd89e83a802891d5b7a5849a7a3a64d1e49ad40c7cc3f55d948d9c554" name="perl-Type-Tiny" arch="noarch">
  <version epoch="0" ver="2.010001" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.0" date="1744804800">- Update to 2.008001
  Bug Fixes:
  - The Optional type constraint on its own, will now be treated the same as
    Optional[Any]; previously, when used for named parameters, it would fail to
    generate predicate methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008001-1.1" date="1745496000">- Fix test compatibility with MooseX-Types 0.51 (GH#176)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-1.0" date="1746100800">- Update to 2.008002
  Bug Fixes:
  - MooseX-Types 0.51 broke Type::Tiny's ability to reliably detect if Moose
    types were being used; this release fixes that</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008002-2.0" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008003-1.0" date="1756814400">- Update to 2.008003
  Bug Fixes:
  - Make sure methods fake-inherited from Moose (if it's loaded) are a last
    resort
  Other:
  - Slightly streamlined `Type::Tiny::can` and `Type::Tiny::AUTOLOAD`
  - When dumping structures via Data::Dumper (mostly in error messages),
    suppress any warnings Data::Dumper would emit</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008004-1.0" date="1760702400">- Update to 2.008004
  Documentation:
  - Type::Tiny pod syntax fix
  Other:
  - Added: Type::Tiny::Duck (used by HasMethods) now includes a
    new_intersection constructor</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008005-1.0" date="1763726400">- Update to 2.008005
  - Minor optimization for Type::Params: sometimes it would construct an
    arrayref of hashref from the slurpy arguments to a function and then check
    that the arrayref it created was an arrayref, or check the hashref it
    created was a hashref; those checks seem unnecessary - if they had ever
    failed it would indicate something deeply wrong with Perl itself, so these
    superfluous checks are now avoided
  - Minor optimization for Type::Params: sometimes it would wrap a 'goto' in a
    'do' block for no reason, which could potentially slow down the call as
    Perl might create a new lexical context unnecessarily; it is unlikely to
    make a measurable difference</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.008006-1.0" date="1764244800">- Update to 2.008006
  - Minor optimization for non-XS type check code for Enum types: if there are
    only a small number of valid strings (five or under), check using 'eq' and
    'or' operators instead of compiling a regexp to check against them all at
    once; this can be controlled by passing the 'use_eq' attribute to the
    Type::Tiny::Enum constructor, but is otherwise automatic</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010000-1.0" date="1767182400">- Update to 2.010000
  Added:
  - Added: Add 'check_coerce' method to Type::Coercion
  - Added: Add 'check_coerce' method to Type::Tiny
  - Added: Add environment variables to affect how 'signature_for' checks
    appear in stack traces, debugging, and profiling
  - Added: Type::Params args objects now provide __TO_LIST__, __TO_ARRAYREF__,
    and __TO_HASHREF__ methods
  - Added: Type::Params now provides hooks for the event of wrapping a sub in a
    signature
  Documentation:
  - Update NEWS file
  - Update Type::Tiny::Manual::Policies with planned changes for Type::Tiny 3
  - Add security policy to Type::Tiny::Manual::Policies
  - Fix syntax in some of the documentation for Type::Params
  - Update documentation to potential future changes to coercions in
    Types::Standard
  - Document that Type::Tiny::Enum defines its own sorter
  Test Suite:
  - Skip t/20-modules/Type-Tie/06clone.t on very old Perls
  - Add test suggestion dependencies on Devel::Hide and namespace::clean
  Other:
  - If you lexically import 't' from Type::Registry, then it will no longer be
    tied to the caller's per-package type registry
  - Type::Tiny::Enum now throws an exception if you try to pass a sorter
    coderef to the constructor
  - Minor optimization to avoid wrapping certain inlined checks in do {...}
    blocks</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.010001-1.0" date="1767787200">- Update to 2.010001
  - Fix for $LIST_SEPARATOR changes breaking Type::Coercion, Types::Common,
    Types::Standard</changelog>
</package>
<package pkgid="c99ab7f9c77c2beed79084930845da8f4d979a222013b57f4e72452b3e4fdb3d" name="perl-Types-Path-Tiny" arch="noarch">
  <version epoch="0" ver="0.006" rel="22.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-17" date="1689768000">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-21" date="1721649600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.006-22" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="bbbd7e2420f027837d17a7d0a785b9c217d9a73351bf0c6c1f49d92f4bfbcdde" name="perl-Types-Serialiser" arch="noarch">
  <version epoch="0" ver="1.01" rel="8.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.01-8" date="1684324800">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="1b56e4f34335f023ea7d26b927563444ec5e3de4f71e4eb7c9d1e1f3759d6e33" name="perl-UNIVERSAL-require" arch="noarch">
  <version epoch="0" ver="0.19" rel="7.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.19-7" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
</package>
<package pkgid="1d2bc824c9e1f9fdef9613ee44c00e92cdb8dd4b6abb8a0a117ce0a4c067df2d" name="perl-URI-cpan" arch="noarch">
  <version epoch="0" ver="1.009" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-1" date="1640088000">- Update to 1.008
  - Fix prereqs to rely on URI, not the unindexed URI::_generic
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.008-4" date="1685620800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.009-1" date="1693742400">- Update to 1.009
  - Updates to dist metadata only</changelog>
</package>
<package pkgid="9a199dfc63775b57a70f8ccd27b75405a9bf6e6e275e4a2c0841330103817770" name="perl-Unicode-CheckUTF8" arch="x86_64">
  <version epoch="0" ver="1.03" rel="42.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-37" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-39" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-41" date="1718193600">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.03-42" date="1726574400">- Correct URL
  (https://src.fedoraproject.org/rpms/perl-Unicode-CheckUTF8/pull-request/1)
- Use SPDX-format license tag
  (https://src.fedoraproject.org/rpms/perl-Unicode-CheckUTF8/pull-request/2)</changelog>
</package>
<package pkgid="1c519bd30d0a0fe0b616274ac85f5db11cbf5fc6c3b486a174216ff7b3a5ac67" name="perl-Unicode-Map" arch="x86_64">
  <version epoch="0" ver="0.112" rel="64.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-59" date="1685620800">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-60" date="1689249600">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.112-64" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="fdc454d039ba6985566dc750f33cedc1e10db8ac5ef081aeccb29bd59c4198b8" name="perl-Unicode-Map8" arch="x86_64">
  <version epoch="0" ver="0.13" rel="48.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-43" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-44" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.13-48" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="7a94e6d47f5ba22a34bb6a95ccaf6de2037ab4f1b846c71dcf91795626f03232" name="perl-Unicode-MapUTF8" arch="noarch">
  <version epoch="0" ver="1.14" rel="10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.14-10" date="1685707200">- SPDX license migration</changelog>
</package>
<package pkgid="9a6ff28f271577be0da2e81857b906dea4f9b4f86e8c268ca0c1084866935fc0" name="perl-Unicode-String" arch="x86_64">
  <version epoch="0" ver="2.10" rel="27.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.10-22" date="1687608000">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.10-23" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.10-27" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="580775714f5dba7b6eb06b9f4f02c7e3c325183db028666b610b10dbc0c65087" name="perl-Unicode-UTF8" arch="x86_64">
  <version epoch="0" ver="0.75" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.62-28" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-1" date="1766404800">- Update to 0.63
  - Remove the non-portable tests for Perl's "super" code points; testing
    values beyond 0x7FFF_FFFF isn’t necessary
  - Documentation typo corrections</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-1" date="1771848000">- Update to 0.64
  - Unicode::UTF8 now allows noncharacters; they receive no special handling
    and are processed like any other code point
  - According to Corrigendum #9, noncharacters (the values U+nFFFE and U+nFFFF
    (where n is from 0 to 10^16) and the values U+FDD0..U+FDEF) are permanently
    reserved but should be allowed in interchange:
    https://www.unicode.org/versions/corrigendum9.html</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.65-1" date="1771934400">- Update to 0.65
  - C99-compliant compiler is now required for Unicode::UTF8
  - Scan 16 bytes at a time to detect non-ASCII bytes, falling back to sequence
    validation for non-ASCII input; this approach resulted in a 900% throughput
    improvement on English text and a 200% improvement on Swedish text compared
    with Encode.pm</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.66-1" date="1772020800">- Update to 0.66
  - Rewrote the UTF-8 validator using a shift-based DFA from
    https://github.com/chansen/c-utf8-valid by the same author; benchmarks show
    up to 10x faster decoding compared with Encode.pm</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.68-1" date="1772452800">- Update to 0.68
  - Fix SIMD feature gating for x86; avoid SSE2 intrinsics on non-SSE2 i686
    builds
  - Use Dist::Zilla for the distro
- Package new LICENSE file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.70-1" date="1774008000">- Update to 0.70
  - Update the c-utf8 library code: improved GCC code generation, including
    with -O2, resulting in higher throughput
  - Use utf8_check_ascii with a 16-byte ASCII fast path</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.72-1" date="1783425600">- Update to 0.72
  - read_utf8() now takes a single-pass fast path on PerlIO fast-gets layers,
    validating/copying/counting straight out of the layer buffer (up to ~11%
    faster on multibyte-heavy input; see benchmarks/)
  - Fixed read_utf8() on non-buffered handles stranding the trailing incomplete
    sequence that was read to satisfy the requested length: the pending bytes
    are now pushed back with PerlIO_unread() so the following read sees them,
    matching decode_utf8() when drained to end of file
- Add patch to avoid trying to use 64-bit SSE2 on ix86 (GH#14)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.74-1" date="1784030400">- Update to 0.74
  - Added slurp_utf8($filename), which reads an entire file and returns its
    contents decoded from UTF-8 as a character string
  - Added support for older MSVC C compilers by using __inline in place of the
    C99 inline keyword on pre-Visual Studio 2015 builds
  - Fixed SSE2 detection to only enable the SIMD implementation on 64-bit x86
    targets, which prevents unsupported SSE2 code from being selected on 32-bit
    x86 builds (GH#14)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.75-1" date="1784116800">- Update to 0.75
  - Fixed slurp_utf8() leaking the file descriptor if a fatal "utf8" warning
    (e.g. warnings FATAL =&gt; 'utf8') was thrown while reading an ill-formed file</changelog>
</package>
<package pkgid="9b707154063dd51fb6f98661540768f96490321914625e8002ae8bca773274de" name="perl-Unix-Syslog" arch="x86_64">
  <version epoch="0" ver="1.1" rel="50.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-45" date="1684411200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-46" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1-50" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="206533354d1970471ac15c0a8a019132acbfd738dbcab428c5a00b4420d790a2" name="perl-Variable-Magic" arch="x86_64">
  <version epoch="0" ver="0.64" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-1" date="1663761600">- Update to 0.63
  - Add support for 5.37.3's PADSV_STORE optimization; B.pm-related tests have
    been taught about this new thing (CPAN RT#144052)
  - Updated contact information
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.63-3" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-1" date="1710849600">- Update to 0.64 (rhbz#2270204)
  - This is a maintenance release; the code contains no functional change
  - Contributing guidelines are now listed in the new CONTRIBUTING file
  - Fix for t/18-opinfo.t broken under blead (CPAN RT#151104)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.64-2" date="1718280000">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="3fc3e95d38a545e8f16606a7a188c06b339d2a6ef2f7c418f80b88ec39f48494" name="perl-Variable-OnDestruct" arch="x86_64">
  <version epoch="0" ver="0.09" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.07-1" date="1709121600">- Initial RPM version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-1" date="1711540800">- Update to 0.08
  - Revert not catching exceptions from destruct handlers
  - Restore functionality on perl ≤ 5.12</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.09-1" date="1711800000">- Update to 0.09
  - Further fix on older perls</changelog>
</package>
<package pkgid="e1e12e6784749abfd55ad4eb637d65a508a87c0d459a9f0395a3a93319e620b4" name="perl-Version-Requirements" arch="noarch">
  <version epoch="0" ver="0.101023" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.101023-25" date="1685707200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Use %license unconditionally</changelog>
</package>
<package pkgid="3d3a0d187aee159e28ed40714a419cf4ddb75b862c99f3cf2c4cbbf23eff928d" name="perl-WeakRef" arch="x86_64">
  <version epoch="0" ver="0.01" rel="26.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-24" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-25" date="1687521600">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.01-26" date="1689076800">- Perl 5.38 rebuild</changelog>
</package>
<package pkgid="e22c144bb4858904303958d3478b5b4cc571bac79bff625aa9f5dea43310c244" name="perl-XML-DTDParser" arch="noarch">
  <version epoch="0" ver="2.01" rel="34.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.01-34" date="1687521600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="83d49581fedcdf540b44505a796edee666f722e866dda440451b633186633d55" name="perl-XML-LibXML" arch="x86_64">
  <version epoch="1" ver="2.0213" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0210-2.0" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0210-5.0" date="1752148800">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0212-1.0" date="1779278400">- Update to 2.0212
  Security/Bug Fixes:
  - Prevent out-of-bounds UTF-8 read in domParseChar by replacing it with
    libxml2's xmlValidateName; truncated multi-byte sequences could cause heap
    reads past the NUL terminator across five DOM entry points (createElement,
    createAttribute, setNodeName, etc.) (GH#146, GH#149)
  - Enforce no_network even when a global externalEntityLoader is set;
    previously, XML_PARSE_NONET was silently ignored once a global callback was
    installed, enabling SSRF in multi-module applications that combine a
    third-party entity loader with no_network parsers (GH#133, GH#143)
  - Prevent integer overflow in SAX CBuffer length tracking; total character
    data exceeding INT_MAX (~2GB) overflowed the accumulator causing xmlMalloc
    to under-allocate and the subsequent memcpy to write past the buffer
    (GH#135, GH#142)
  - Proper lifecycle management for externalEntityLoader: the global loader can
    now be cleared or replaced safely, the previous handler SV is no longer
    leaked, the returned value is a safe copy rather than the internal global
    SV, and per-parser ext_ent_handler state is separated from the global slot
    (GH#138)
  - Add NULL checks after xmlMalloc returns in SAX CBuffer operations,
    converting OOM segfaults into catchable Perl exceptions (GH#136, GH#140)
  - Add NULL check after xmlCopyNamespace in _domReconcileNs, matching the
    existing guard in _domReconcileNsAttr (GH#137, GH#139)
  - Plug 11 memory leaks across XS/C code, including setBaseURI,
    URI/documentURI accessors, load_catalog, PSaxCharactersFlush,
    createAttributeNS, XPathContext::_find, _newForIO, _toStringC14N,
    lookupNamespacePrefix, _setNamespace, and the generic XPath extension
    function dispatcher (GH#131, GH#132)
  - Handle Apple's local libxml2 patch where xmlSAX2ResolveEntity throws on a
    NULL URI, so t/13dtd.t no longer dies on macOS (GH#94)
  - Skip t/50devel.t when mem_used() reports 0 bytes, which happens on Apple's
    libxml2 (system malloc bypasses the tracking wrappers)
    (CPAN RT#165193, GH#94)
  - Ship POD files in the CPAN tarball
    - The per-class .pod files generated from docs/libxml.dbk were gitignored,
      and nothing in the dist chain was producing them, so recent tarballs
      shipped without POD
    - The .pod files are now tracked in git (bison-style), so 'make dist'
      includes them via MANIFEST and the documentation reaches CPAN consumers
      again
    - Also eliminates the bootstrap problem of needing XML::LibXML installed to
      build XML::LibXML's docs, and silences the "kit incomplete" warning from
      'perl Makefile.PL' on a fresh checkout
  Improvements:
  - Resolve Windows CI test failures and compiler warnings: use the file size
    (-s) for the byteConsumed test instead of a hardcoded 488 (CRLF inflates
    the file to 507 bytes), use Perl UV/PTR2UV in PmmRegistryName to avoid
    pointer truncation under Win64 LLP64, and use const xmlError* for
    xmlCtxtGetLastError to match the libxml2 2.12+ API (GH#122)
  - Silence macOS build warnings cleanly by gating the libxml2 memory tracking
    API behind a HAVE_LIBXML_MEMORY_DEBUG feature macro
    - The deprecated calls are no longer compiled on systems where the API is
      gone (Apple SDK, libxml2 &gt;= 2.14), mem_used is only exported when
      actually defined, and t/50devel.t skips with a clear reason
    - Also strip the bogus "-L/lib" entries Alien::Base::Wrapper injects into
      LDFLAGS on macOS (GH#127)
  - Add a minimal hello-world HTML example (example/hello-world.pl) and add
    createInternalSubset("html", ...) to both HTML examples so they emit a
    proper &lt;!DOCTYPE html&gt; declaration (GH#66, GH#121)
  - Standardize XPath parameter naming to $xpath_expression throughout the
    DocBook source, matching the XML::LibXML::XPathExpression class name
    (GH#64, GH#125)
  - Update outdated and dead references in README.md: point repository URLs at
    the canonical cpan-authors/XML-LibXML home, drop the defunct ActiveState
    mailing list, replace the long Windows nmake recipe with a Strawberry Perl
    note, refresh the macOS section, and bring the Package History up to date
  - Remove the stale "Known Issues" note about push-parser leaks; the leaks it
    referenced were fixed by Nick Wellnhofer in 2014
  - Point distribution metadata at the cpan-authors GitHub repo and add an
    explicit bugtracker entry so MetaCPAN's "Issues" link goes to GitHub Issues
    instead of falling back to rt.cpan.org
  - Add NamedNodeMap.pod to MANIFEST so the generated POD ships in the CPAN
    tarball; the L&lt;XML::LibXML::NamedNodeMap&gt; link in Node.pod now resolves on
    MetaCPAN (GH#115, GH#118)
  - Update ppport.h and adopt its suggestions to reduce build issues
  - Fix test suite with libxml2 2.13.0 and 2.14.0
  - Remove tests that disable line numbers (always enabled since libxml2 2.15.0)
  - Use 'our $VERSION' instead of 'use vars'
  - Fix formatting in docs/libxml.dbk (GH#85)
  Maintenance:
  - Modernize the CI workflow with a dynamic Perl version matrix, centralized
    cpanfile, and updated action versions (GH#108)
  - Use cpanm instead of cpm for the Linux CI matrix so jobs on Perl &lt; 5.24
    (down through 5.8) no longer fail to install dependencies (GH#117, GH#119)
  - Expand CI platform coverage: FreeBSD 14.2, OpenBSD 7.6, NetBSD 10.1,
    Strawberry Perl on Windows, Fedora 43 container, AddressSanitizer,
    Devel::Cover + Codecov coverage upload, and a downstream XML::LibXSLT
    compatibility job (GH#120)
  - Fix BSD CI: use the correct OpenBSD package name ('libxml', not 'libxml2')
    and install Perl dependencies explicitly instead of relying on META.json
    autodiscovery (GH#124)
  - Parallelize 'make' compilation across CI jobs with platform-appropriate CPU
    detection (GH#128)
  - Temporarily disable OpenBSD 7.6 CI due to unreliable runners (GH#130)
  - Re-enable OpenBSD CI on version 7.8 once the runner situation stabilized
    (GH#144)
  - Add a CLAUDE.md describing project layout, build/test commands, libxml2
    version landscape, and coding conventions (GH#116)
  - Add contributing guidelines covering CI, scope, MANIFEST, and
    version/release handling (GH#126)
  - Add AI_POLICY.md documenting how AI tools are used (and not used) in this
    project
  - Add MANIFEST.SKIP so local files (.hgignore, .tidyallrc, CLAUDE.md, etc.)
    are kept out of 'make manifest' output
  - Drop unused dev helper ('tester.sh') and the stale TODO file
  - Rename README to README.md and remove the obsolete Travis CI references
  - Add a 'pod-drift' CI job that runs 'make pod_docs' and fails on any diff,
    catching forgotten POD regenerations after edits to docs/libxml.dbk
  - Move xmllibxmldocs.pl from example/ to scripts/; it is a maintenance tool
    that emits source files (POD), not a usage example of XML::LibXML; scripts/
    already houses similar build/dev tooling
  - Skip t/release-kwalitee.t outside a dist tarball
    - The Test::Kwalitee 'has_meta_yml' check was failing under 'make test' in
      author mode because META.yml is only generated by 'make dist'
    - The test now skips cleanly when META.yml is absent and still runs the
      full 18-check suite under 'make disttest' against the unpacked tarball
- Re-enable threads tests</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:2.0213-1.0" date="1779364800">- Update to 2.0213
  Security/Bug Fixes:
  - Revert GH#143 per the libxml2 author's request (GH#168)
    - GH#143 added a URL-scheme filter inside LibXML_load_external_entity and
      removed the EXTERNAL_ENTITY_LOADER_FUNC == NULL guards on the five
      Schema/RelaxNG NONET swap sites, on the premise that no_network on one
      parser should override a user-installed global externalEntityLoader
    - Nick Wellnhofer clarified that this contradicts upstream intent:
      XML_PARSE_NONET only polices libxml2's default loader; a user who
      installs a global loader is explicitly opting out of that policy, and the
      http/https/ftp allowlist was never a real security boundary
    - Reverted in full; GH#138's lifecycle/memory-safety fixes are kept
  Bug Fixes:
  - Fix latent SEGV in _externalEntityLoader
    - The XS code returned &amp;PL_sv_undef as RETVAL when no previous global
      loader existed
    - Since xsubpp auto-mortalizes SV* RETVAL, each call mortalized the
      PL_sv_undef singleton, eventually driving its refcount negative and
      producing "Attempt to free unreferenced scalar" followed by SEGV under
      repeated invocation
    - Now returns newSV(0) so RETVAL is always a fresh refcount-1 SV safe to
      mortalize
    - The bug shipped in 2.0212 with GH#138's lifecycle fixes; this is a
      single-line correction to that code path
  Maintenance:
  - Add t/49global_extent_with_no_network.t, 17 subtests locking in the
    entity-loader contract restored by the GH#168 revert: a user-installed
    global loader takes precedence over no_network across plain XML parse,
    RelaxNG, and XML Schema, while no_network without any loader still blocks
    via libxml2's default loader
  - Document the entity-loader contract in CLAUDE.md ("Entity loaders,
    no_network, and XML_PARSE_NONET") plus a "Verifying audit-flagged
    security findings" checklist to keep pattern-matched "security fixes"
    like GH#143 from shipping again</changelog>
</package>
<package pkgid="02ece9c259e1db3a6c98834936dbeaf7ca640a6150fdb672334fec9ed9f81be8" name="perl-XML-LibXSLT" arch="x86_64">
  <version epoch="0" ver="2.003000" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-1" date="1676030400">- Update to 2.002001
  - Corrections and refactorings in Makefile.PL
- Use author-independent source URL
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.002001-6" date="1718366400">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.003000-1" date="1718452800">- Update to 2.003000
  - lib/XML/LibXSLT/Quick.pm:
    - Add an 'implicit' type to $dest
    - Correct a type spelling ('file' instead of 'path')</changelog>
</package>
<package pkgid="ab755ebb254392b4297d94b47ff81c31e038356f4608a34d26a7e87bb0803d65" name="perl-XML-NamespaceSupport" arch="noarch">
  <version epoch="0" ver="1.12" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-19" date="1687435200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="e9fe3a3769bd4437e9777d18c82a4574a8aba2f6768d27ae9af7f922be64301c" name="perl-XML-Rules" arch="noarch">
  <version epoch="0" ver="1.16" rel="30.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-30" date="1687435200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="73404831a55f24fa4e5779bcad57a0efcfb4d287ece211dcfd95bdf55beccc76" name="perl-XML-SAX" arch="noarch">
  <version epoch="0" ver="1.02" rel="12.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.02-12" date="1687435200">- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9
- Avoid use of deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="02bbf8905f9e4ad11655acc723e51f4a59beb1fddc27d32ad33b902f51bfde82" name="perl-XML-SAX-Base" arch="noarch">
  <version epoch="0" ver="1.09" rel="19.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.09-19" date="1687435200">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="244a2cfde60b4a330a5ef54563e56c4aeacfcfa4c44df6c5586ae0d92044ca43" name="perl-XML-SAX-Expat" arch="noarch">
  <version epoch="0" ver="0.51" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.51-5" date="1680091200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="bb88173735018affde06305e3c07c70b30e3436113ed051d64ffaf81a745156f" name="perl-XML-Simple" arch="noarch">
  <version epoch="0" ver="2.25" rel="17.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.25-17" date="1680091200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="ccf675579422eaee9412846123e4799ca96e8871a2f82d8d4ee5079aa2aaced0" name="perl-XString" arch="x86_64">
  <version epoch="0" ver="0.005" rel="13.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-8" date="1684411200">- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-9" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.005-13" date="1718193600">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="be146abd85aa51ee8de02972f5124dd73f101874fe80e9f5527ec65229a36ea0" name="perl-YAML" arch="noarch">
  <version epoch="0" ver="1.321" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.32-1" date="1784548800">- Update to v1.320.0
  - Security: Avoid backtracking leading to exponential load time
    (CVE-2026-63676)
- Use %{make_build} and %{make_install}
- Stick with existing version numbering scheme for now</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.321-1" date="1785153600">- Update to 1.321 (rhbz#2506297)
  - Going back to decimal version numbering to make existing comparisons like
    'if $YAML::VERSION &gt;= 1.15' work (GH#233)</changelog>
</package>
<package pkgid="9095f7f0654c6744d43bfabdb96e393c453251508a81c3745a5e28b7665a9e02" name="perl-YAML-LibYAML" arch="x86_64">
  <version epoch="1" ver="0.910.0" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.902.0-1" date="1727092800">- Update to 0.902.0 (rhbz#2313873)
  - Loaded builtin booleans are no longer readonly for perl ≥ v5.36</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.903.0-1" date="1738584000">- Update to 0.903.0 (rhbz#2343445)
  - Security fix: use 3-arg form of open in LoadFile (GH#120. GH#121)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.904.0-1" date="1746705600">- Update to 0.904.0 (rhbz#2365093)
  - Add experimental OOP interface, YAML 1.2
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.904.0-2" date="1751976000">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.906.0-1" date="1777291200">- Update to 0.906.0
  - Fix memory leak for trailing UTF8 octets (GH#123)
  - Fix detecting floats in YAML 1.2 Core Schema (GH#125)
- Package new document SECURITY.md</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.907.0-1" date="1778500800">- Update to 0.907.0
  - Turn off cyclic references by default</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.907.0-2" date="1779364800">- Safely check for JSON::PP in 13-utf8.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.908.0-1" date="1782043200">- Update to 0.908.0 (rhbz#2491093)
  - Fix for OOP interface: improve handling of mapping keys, for example
    numbers</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.909.0-1" date="1782993600">- Update to 0.909.0 (rhbz#2496586)
  - OOP interface test: Do not crash on missing JSON::PP dependency
  - OOP interface: Fix for quadmath builds of perl
  - Add YAML::XS::LibYAML back to list of provided modules
  - OOP interface: Add boolean option</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.910.0-1" date="1783080000">- Update to 0.910.0
  - OOP interface: Fix default boolean option (missing default lead to random
    default on some architectures) (GH#133)</changelog>
</package>
<package pkgid="09d7edc591a3ecbb8d2ea77dc6442d675351b307200fa8c87a87884cea173185" name="perl-YAML-Old" arch="noarch">
  <version epoch="0" ver="1.23" rel="4.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-4" date="1687435200">- Use SPDX-format license tag
- Switch upstream from search.cpan.org to metacpan.org
- Drop support for building with rpm &lt; 4.9
- Use %license unconditionally</changelog>
</package>
<package pkgid="45f49cc8796bbe8150e3edc6a5d6a8dfd860313a5d5c5fff0d7551de13783482" name="perl-YAML-Syck" arch="x86_64">
  <version epoch="0" ver="1.47" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.36-1" date="1760184000">- Update to 1.36
  - Address memory corruption leading to 'str' value being set on empty keys</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.37-1" date="1773921600">- Update to 1.37
  Features:
  - Add LoadBytes, LoadUTF8, DumpBytes, DumpUTF8 functions (GH#51)
  Fixes:
  - Fix heap buffer overflow in the YAML emitter - CVE-2026-4177 (GH#67)
  - Fix DumpFile with tied filehandles (IO::String, IO::Scalar) (GH#22)
  - Fix _is_glob to recognize IO::Handle subclasses (GH#23)
  - Fix memory leak when dumping filehandles (CPAN RT#41199, GH#42)
  - Fix dumping of tied hashes (GH#31)
  - Fix dumping strings starting with '...' as unquoted plain scalars (GH#34)
  - Fix dumping strings with tabs and carriage returns as plain scalars (GH#59)
  - Fix double-dash YAML parsing (RT#34073, GH#35)
  - Fix extra newline after empty arrays/hashes in YAML output (GH#36)
  - Remove trailing whitespace from YAML output lines (GH#37, GH#38, GH#39)
  - Fix quoting of \r and \t in YAML output instead of emitting raw bytes
    (GH#40)
  - Fix growing !!perl/regexp objects in round-trips (GH#43)
  - Fix quoted '=' being transformed into 'str' (GH#45)
  - Fix backslash-space escape in double-quoted YAML strings (GH#61)
  - Fix flow sequence comma separator not recognized without trailing space
    (GH#60)
  - Fix wide character warning in DumpFile (GH#28)
  - Fix inline arrays without space after comma (GH#25)
  - Fix: quote strings matching YAML implicit types to prevent round-trip
    failures (GH#26)
  - Fix JSON::Syck::Dump to use JSON-valid \uXXXX escapes in output (GH#21)
  - Fix JSON::Syck::Load decoding of \/ and \uXXXX escape sequences (GH#30)
  - Fix: apply JSON postprocessing to JSON::Syck::DumpFile output (GH#104)
  - Fix: add tied-filehandle fallback to JSON::Syck::DumpFile (GH#98)
  - Fix: handle JSON escape sequences in SingleQuote mode Load (GH#99)
  - Fix: restore Perl 5.8 compatibility in test suite (GH#121)
  - Fix: correct copy-paste error in Makefile.PL clean target (GH#101)
  - Fix: correct $SortKeys POD default from false to true (GH#100)
  - Fix: correct POD documentation errors (GH#103)
  Maintenance:
  - Add C23-compatible function prototypes for GCC 15 compatibility (GH#112)
  - Silence macOS compiler warnings (GH#92)
  - Guard stdint.h include for portability (HP-UX 11.11) (GH#33)
  - Guard stdint.h include in syck_st.h for portability (GH#24)
  - Update ppport.h to 3.68
  - Add regression tests for magical variable dumping (GH#32)
  - CI: modernize GitHub Actions workflow (GH#123, GH#124)
  - CI: add disttest job to validate MANIFEST completeness
- Use %{make_build} and %{make_install}
- Drop workaround for C23 incompatibility</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.39-1" date="1774180800">- Update to 1.39
  Bug Fixes:
  - Fix: escape solidus (/) as \/ in JSON::Syck::Dump for XSS safety
    (GH#125, GH#130)
  - Fix: anchor tracking for blessed scalar refs in Dump (GH#126, GH#131)
  - Fix: prevent buffer underflow in base60 (sexagesimal) parsing (GH#133)
  - Fix: guard against NULL type from strtok in tag parsing (GH#135)
  - Fix: correct copy-paste bug in syck_seq_assign() ASSERT macros (GH#137)
  - Fix t/yaml-implicit-typing.t failure with -Duselongdouble perls
    (GH#138, GH#139)
  Improvements:
  - Resolve TODO tests for empty/invalid YAML to match actual behaviour
    (GH#127, GH#129)
  Maintenance:
  - Remove dead Perl 5.6 TODOs and convert 5.8 TODO to SKIP (GH#129)
  - Add comprehensive implicit type resolution test suite (GH#137)
  - Update MANIFEST to include all unit tests
  - Clean up test names to remove unnecessary numbering</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.41-1" date="1774267200">- Update to 1.41
  Bug Fixes:
  - Fix float parsing on -Dusequadmath perls: use Perl's Atof() instead of
    strtod() so that floats like -3.14 are not corrupted by double-precision
    rounding artifacts (GH#140, GH#141)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.42-1" date="1774612800">- Update to 1.42
  Bug Fixes:
  - Fix: Replace strtok() with strpbrk() and fix sign-compare warnings in
    perl_syck.h (GH#145)
  - Fix: Terminate plain scalars at document boundaries --- and ... (GH#150)
  - Fix: Skip %TAG and %YAML directives in document header (GH#151)
  - Fix: Plug SV leak when eval_pv croaks on bad perl/code blocks (GH#153)
  - Fix: Allow non-specific tag '!' before block scalars (GH#27, GH#102)
  - Fix: Remove spurious %type &lt;nodeId&gt; for indent_open in gram.y
    (GH#157, GH#158)
  - Fix: Use modern bison %define api.prefix directive (GH#159, GH#160)
  Improvements:
  - Implement YAML merge key (&lt;&lt;) support (GH#149)
  Maintenance:
  - Remove dead Perl 5.6/5.8 version guards from test files (GH#146)
  - Add YAML 1.0 spec compliance audit and coverage tests (GH#148)
  - Add comprehensive round-trip tests for YAML 1.0 spec features (GH#152)
  - Remove unneeded TODO in t/json-basic.t (GH#154)
  - Add regex Dump/Load/round-trip tests to perl tag scheme (GH#155)
  - Do not require a .y file to build YAML::Syck; add brew support for bison
  - Don't ship docs/ directory in tarball</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.43-1" date="1775131200">- Update to 1.43
  Bug Fixes:
  - Fix: Prevent resource leaks on croak/early-return paths in Dump (GH#161)
  - Fix: Prevent output SV leaks on croak in Dump/DumpFile callers (GH#163)
  - Fix: Load() in list context returns empty list for empty/undef input; also
    applies to LoadBytes and LoadUTF8 (GH#164, GH#165)
  - Fix: DumpCode serializes prototype string instead of code body (GH#168)
  - Fix: Memory leak in !perl/scalar Load - newRV_inc should be newRV_noinc
    (GH#170)
  - Fix: Add pTHX_ to SAVEDESTRUCTOR_X callback for threaded Perl
    (GH#175, GH#176)
  - Fix: Add TODO guard for eval_pv leak on Perl &lt; 5.14 (GH#179, GH#180)
  - Fix: Negative hex and octal values parsed as 0 with ImplicitTyping (GH#183)
  - Fix: Negative int#base60 values produce unsigned wraparound (GH#185)
  Improvements:
  - Modernize META_MERGE for CPANTS compliance (GH#162)
  - Fix hash table size handling and remove compile warnings in syck_st (GH#174)
  Maintenance:
  - Restore TODO guard for Dump code leak test on Perl &lt; 5.26 (GH#167)
  - Resolve 2010 TODO in perl_json_postprocess with test coverage (GH#166)
  - CI: Upgrade actions to resolve Node.js 20 deprecation warnings (GH#177)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.44-1" date="1775217600">- Update to 1.44
  Bug Fixes:
  - Fix: Positive hex and octal values parsed as 0 with ImplicitTyping (GH#187)
  - Fix: Resolve uintptr_t redefinition error on Win64 MinGW (GH#186)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.45-1" date="1777291200">- Update to 1.45
  Bug Fixes:
  - Fix: Use syck_base64_free() to fix Windows "Free to wrong pool" crash in
    base64 encode/decode buffers; also plugs a memory leak (GH#189)
  - Fix: Clear type tag on blessed scalar alias early-return so the stale tag
    no longer leaks onto the next emitted item (GH#193, GH#194, rhbz#2459200)
  - Fix: Negative float#base60 values produce wrong results; strip sign before
    accumulating and avoid negative zero for portable stringification (GH#191)
  - Fix: Prevent memory leaks when Load/LoadJSON croak on parse errors (GH#192)
  Maintenance:
  - Test: Add coverage for SortKeys and JSON MaxDepth (GH#188)
  - Test: Add error handling coverage for LoadFile/DumpFile (GH#190)
  - Update README</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.46-1" date="1779710400">- Update to 1.46
  Bug Fixes:
  - Preserve string nature of numeric-looking values in Dump; pure strings (POK
    only, no IOK/NOK) are now quoted to maintain roundtrip fidelity
    (GH#199, GH#200)
  - Accept trailing commas in flow sequences and mappings ([a, b,] and
    {a: 1,}), valid per YAML 1.0/1.1/1.2 spec (GH#195, GH#196)
  Maintenance:
  - CI: upgrade install-with-cpm to v2 for compatibility with Perl versions
    prior to 5.24 in perldocker containers (GH#197, GH#198)
  - Clean up MANIFEST.SKIP: add #!include_default, remove redundant entries,
    exclude .claude/ from distribution</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.47-1" date="1784030400">- Update to 1.47
  Security:
  - Fix four libsyck memory-safety CVEs reachable from the default
    YAML::Syck::Load() path on untrusted input with no special flags (GH#213)
    - CVE-2026-57075 (CWE-125): Out-of-bounds read in the base64 decoder
      caused by signed-char indexing of the decode table on !!binary input
    - CVE-2026-57076 (CWE-416): Use-after-free of an anchor key string shared
      between the node and the anchors table
    - CVE-2026-57077 (CWE-125): One-byte out-of-bounds read in the lexer
      newline scan during block-scalar parsing (incomplete-fix follow-on
      to CVE-2025-11683)
    - CVE-2026-13713 (CWE-416/CWE-415): Use-after-free / double-free of an
      anchor node on anchor redefinition, a remote-crash DoS from a 7-byte input
  - Harden syck_base64dec() to bounds-check each read so it cannot run past a
    non-NUL-terminated input buffer (defense-in-depth for callers passing raw
    buffers; GH#213)
  Bug Fixes:
  - Fix: Enforce $MaxDepth on Load to prevent C-stack exhaustion from deeply
    nested YAML/JSON input; YAML::Syck and JSON::Syck Load now default to 512,
    matching Dump (GH#204)
  - Fix: Emit YAML canonical forms (.nan, .inf, -.inf) for NaN/Inf values in
    Dump so they roundtrip with ImplicitTyping instead of reloading as plain
    strings (GH#201)
  Maintenance:
  - CI: add an AddressSanitizer job that builds the XS with
    -fsanitize=address and runs the suite plus the CVE trigger inputs to catch
    libsyck memory-safety defects; de-pin the libasan version so it tracks the
    runner's GCC (GH#213)</changelog>
</package>
<package pkgid="79fa9017fb7d9e11fc285c9b78490391d404e73e8a7663af585f26b4907205cf" name="perl-YAML-Tiny" arch="noarch">
  <version epoch="0" ver="1.76" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.74-1" date="1679572800">- Update to 1.74
  - A few documentation tweaks
- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.75-1" date="1734350400">- Update to 1.75 (rhbz#2332503)
  - Fixed regression in %QUOTE (GH#60)
  - Fix version comparison logic for forward compatibility (GH#63)
- Switch source URL from cpan.metacpan.org to www.cpan.org</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.76-1" date="1734350401">- Update to 1.76
  - Revert change from GH#60: "yes", "y", etc. are not actually booleans (GH#66)</changelog>
</package>
<package pkgid="f90f37f0ebbaeb2c10489ba2d214435763204c50ee498f97fcb0829c64e61dcc" name="perl-aliased" arch="noarch">
  <version epoch="0" ver="0.34" rel="25.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.34-25" date="1683633600">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="4a114c92465784bbabfd23fef1fffc1abcec7b1b583be23ae1ec2187689528cc" name="perl-autodie" arch="noarch">
  <version epoch="0" ver="2.37" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.35-1" date="1674907200">- Update to 2.35
  - Prepare for 5.38 changes to deprecate smartmatch
  - Remove +x bit from pm and t files
  - CI - Turn off Pod coverage and critic tests below 5.12
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.36-1" date="1675166400">- Update to 2.36
  - Remove the use of ' as a package separator
  - Fix spelling errors in POD</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.37-1" date="1703851200">- Update to 2.37
  - Deprecate smartmatch handling (GH#117)
  - Remove mention of cpanratings.perl.org (GH#118)
  - Fix typo in changelog (GH#119)</changelog>
</package>
<package pkgid="471f21c529821ef3bf99d3b20fee8350ba61d9ad45583d525be2dcc9aa5948ab" name="perl-common-sense" arch="x86_64">
  <version epoch="0" ver="3.7.5" rel="14.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-9" date="1653998400">- Perl 5.36 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-12" date="1683201600">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-13" date="1689076800">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.7.5-14" date="1691582400">- Fix FTBFS due to %rpmversion macro being built-in in rpm-4.18.92</changelog>
</package>
<package pkgid="63c334e639dac998bab893998a04ff0819d75f95961d9e09fe1e75d581763601" name="perl-constant-boolean" arch="noarch">
  <version epoch="0" ver="0.02" rel="37.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.02-37" date="1685707200">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="01fc1d2cb019c17e19828c2c36e7f4ad1dadfa7c29b5ffb15986ec699adfa1fd" name="perl-namespace-autoclean" arch="noarch">
  <version epoch="0" ver="0.31" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.29-15" date="1683115200">- Use SPDX-format license tag
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.31-1" date="1728820800">- Update to 0.31
  - Switch from Sub::Identify to Sub::Util (core in modern perls), falling back
    to B.pm as needed</changelog>
</package>
<package pkgid="bd33bc81ddf9e4838806ef2373dad7f4817ff30a23a3cddedfbf03a556c44029" name="perl-namespace-clean" arch="noarch">
  <version epoch="0" ver="0.27" rel="23.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.27-23" date="1683115200">- Use SPDX-format license tag
- Drop support for building with perl &lt; 5.14
- Drop support for building with rpm &lt; 4.9</changelog>
</package>
<package pkgid="fb6a788c1fa88f80235bd74be4d73e082600064f3e2222d98f054573072629a2" name="perl-parent" arch="noarch">
  <version epoch="1" ver="0.244" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.240-1" date="1676376000">- Update to 0.240
  - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
    deprecated, as ' isn't allowed as package separator in an upcoming version
    of Perl (GH#13)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.241-1" date="1676462400">- Update to 0.241
  - Actually include the changes documented for version 0.240</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.242-1" date="1723636800">- Update to 0.242
  - Don't test for apostrophe as package separator on Perl versions after 5.41
  - Protect against modules changing @_</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.243-1" date="1732881600">- Update to 0.243
  - Reinstate test for apostrophe as package separator, as that package
    separator is allowed again (no code change, only tests have been amended)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1:0.244-1" date="1734091200">- Update to 0.244
  - Update (commented) comparison with $] to use quotes</changelog>
</package>
<package pkgid="a1f31b55a05c44bdd39ccd1fe6bbcf90ffad39e2aa9a8ec7ebeb9655bbf97192" name="perl-strictures" arch="noarch">
  <version epoch="0" ver="2.000006" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.000006-16" date="1688558400">- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="c2c10b31b03296e29239c8a36eabd83c4eec827562217866ebb8ffa2e8c582f9" name="perl-superclass" arch="noarch">
  <version epoch="0" ver="0.003" rel="4.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-4" date="1688299200">- Switch upstream from search.cpan.org to metacpan.org
- Use SPDX-format license tag
- Use %license unconditionally</changelog>
</package>
<package pkgid="88dc8c9d42a9fd283184f9242233fb059649a088b02d124f1f4ddd42619738ab" name="perl-true" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="13.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-8" date="1685966400">- Use SPDX-format license tag
- Drop support for building with EOL distributions prior to EL-7</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-9" date="1689422400">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0.2-13" date="1718366400">- Perl 5.40 rebuild</changelog>
</package>
<package pkgid="29e5dbe642aa50dd2c092cdc62a0c4c8b140b5c6841c899e94c9de1542232e81" name="perl-version" arch="x86_64">
  <version epoch="8" ver="0.99.34" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.32-1" date="1714305600">- Update to 0.9932
  - Add to_decimal and to_dotted_decimal methods
  - Add tuple and from_tuple methods</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.32-3" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.33-1" date="1724760000">- Update to 0.9933
  - Fix two warnings in recent code</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.33-519" date="1752062400">- Perl 5.42 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8:0.99.34-1" date="1776081600">- Update to 0.9934
  - Reorder "v" check to avoid forward goto
  - Fix string comparisons with $] to use numeric comparison instead
  - Remove unnecessary shebang in version.pm</changelog>
</package>
<package pkgid="a59394d154d76420bff3c5f3108d014b3bc9360856c04ca5e24dca7c2bf049a7" name="php-Smarty" arch="noarch">
  <version epoch="0" ver="3.1.48" rel="1.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.40-1" date="1642507200">- Update to 3.1.40 (see CHANGELOG.md for details)
- Use %license unconditionally</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.44-1" date="1642507201">- Update to 3.1.44 (see CHANGELOG.md for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.1.48-1" date="1680177600">- Update to 3.1.48 (see CHANGELOG.md for details)
- License corrected to LGPL-3.0-or-later</changelog>
</package>
<package pkgid="27fde825de8c326ac9df2f7f3d0a423ad430c862eaab4e019f0158b00fa6a04c" name="php-kolab-net-ldap3" arch="noarch">
  <version epoch="0" ver="1.1.4" rel="6.fc42"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-3" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-4" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-5" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.4-6" date="1714478400">- Import from Fedora</changelog>
</package>
<package pkgid="2af6f6825731b1d86571613ceef695630b3ba1fb24f6d60e64481b72a4204173" name="php-pear-Net-LDAP2" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="17.fc42"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.0-14" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.0-15" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.0-16" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.2.0-17" date="1714564800">- Import from Fedora</changelog>
</package>
<package pkgid="fb10a968d2f15767a055d7cae70a947b224b813cee4055d3c5f1e98ec75b4db4" name="plusnet-fttc" arch="noarch">
  <version epoch="0" ver="0.10" rel="3.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-2" date="1651060800">- Add dist tags</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.10-3" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f7564e79389fb4a58c0f8a36e3a66a266438b0905c47c54677f8703571b6b11b" name="pptp" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="22.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-16.0.cf" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-17.0.cf" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-18.0.cf" date="1702468800">- Rebuild to sync with Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-20.0.cf" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-22.0.cf" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="456c0e7fb09c35174aa3a60c7a7c1f55703e05ae6ebf6f0de9d8cc6322150970" name="pptp-setup" arch="x86_64">
  <version epoch="0" ver="1.10.0" rel="22.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-16.0.cf" date="1674561600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-17.0.cf" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-18.0.cf" date="1702468800">- Rebuild to sync with Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-20.0.cf" date="1706616000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-21.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.10.0-22.0.cf" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="6bac71761bbfb5e371f9065034772e32cdc732d9246c596cb8bd01a585b03a26" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-2.0.cf" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3.0.cf" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="caaec68b999fc939e5e959225e34e332fe2c53e65706875faa3e6159b5aa61c2" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-2.0.cf" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3.0.cf" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="ba9b8ca8375efbae7b40c972bfddd566f216abc0a8fbb540d2765ad9ec44790c" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-2.0.cf" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3.0.cf" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="0df6c898d5cb37973976d6b2957868d3ae2351ea1ab9938c25cb5e6e2c3e3479" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-2.0.cf" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3.0.cf" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="f29be08fc61d62e9d5e65ad0bcbc96a7c6113020754dcbea968873879bf2e820" name="proftpd-postgresql" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-2.0.cf" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3.0.cf" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="6f86a08bff9127bbbb602ca958497d34dc9d495c7c6d061cf9a4194e023d825a" name="proftpd-proxy" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-2.0.cf" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3.0.cf" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="fd6f67189fc46148818008af6ebab34d4b21a0248f3f3b624d81d371160eab36" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-2.0.cf" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3.0.cf" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="3f20bd75a2423021be0ee3311ba3e20070e80fc96f87adf8aeb4544fd390ad8a" name="proftpd-utils" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-2.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-3.0.cf" date="1768737600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1.0.cf" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)
- BR: libxcrypt-devel unconditionally
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2.0.cf" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-3.0.cf" date="1779192000">- Address another avenue for SQL injection, via custom SQLUserInfo queries</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1.0.cf" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-2.0.cf" date="1782043200">- Rebuilt for OpenSSL 4.0 in Rawhide</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1.0.cf" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-2.0.cf" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3.0.cf" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="371e593eb53ed793661517c7a0b47b0b1d88d1e6438c67956ff8ca4b3d222df6" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.13.9" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.8-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-1.0.cf" date="1735300800">- Update to 2.12.9
  Security:
  - Fix XXE protection in downstream code (CVE-2024-40896)
  Improvements:
  - Undeprecate xmlKeepBlanksDefault</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.9-2.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-1.0.cf" date="1742212800">- Update to 2.12.10
  Security:
  - Fix stack-buffer-overflow in xmlSnprintfElements (CVE-2025-24928)
  - Fix use-after-free after xmlSchemaItemListAdd (CVE-2024-56171)
  - pattern: Fix compilation of explicit child axis
  Regressions:
  - parser: Fix detection of duplicate attributes
  Bug fixes:
  - xpath: Fix parsing of non-ASCII names
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - tests: Fix sanitizer version check on old Apple clang
  Build:
  - autotools: Set AC_CONFIG_AUX_DIR
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-2.0.cf" date="1749643200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-3.0.cf" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-4.0.cf" date="1755432000">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-5.0.cf" date="1758542400">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.12.10-6.0.cf" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.13.9-1.0.cf" date="1779710400">- Update to 2.13.9 (see NEWS for details)</changelog>
</package>
<package pkgid="d5cae3c11ac6eb23615c5e758afcfbea863b0d6518f122d5bcbd436ae51647b6" name="python3-libxslt" arch="x86_64">
  <version epoch="0" ver="1.1.43" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-1.0.cf" date="1700481600">- Update to 1.1.39 (see NEWS for details)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-2.0.cf" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.39-3.0.cf" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.40-1.0.cf" date="1718280000">- Update to 1.1.40
  Removals:
  - xsltproc: Remove maxparserdepth option
  Improvements:
  - functions: xmlXPtrNewContext is deprecated
  - xsltproc: Stop calling xmlMemoryDump
  - xsltproc: Prefer XML_PARSE_NONET over xmlNoNetEntityLoader
  - functions: Fix build if libxml2 modules are disabled
  - extensions: Don't call deprecated xmlCheckFilename
  - documents: Don't set ctxt-&gt;directory
  - exslt: Fix EXSLT functions without parameters
  Build Systems:
  - build: Remove mem-debug option
- Hardlink identical packaged files together to save space</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-1.0.cf" date="1718884800">- Update to 1.1.41
  Removals:
  - autotools: Stop installing libxslt.m4
  - autotools: Remove RPM build
  Improvements:
  - libxslt: Set _FILE_OFFSET_BITS to 64
  - xsltproc: Remove unneeded includes
  - include: Don't define ATTRIBUTE_UNUSED in public header
  - xsltproc: Make "-" read from stdin
  Build Systems:
  - cmake: Adjust paths for UNIX or UNIX-like target systems
  Tests:
  - cmake: Link testplugin with libxml2
  - tests: Link testplugin with libxml2
  - tests: Fix expected error after libxml2 change
  - runtest: Switch to xmlFormatError
  - fuzz: Avoid accessing internal struct members</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.41-2.0.cf" date="1719403200">- extensions: re-add call to xmlCheckFilename with older libxml2 (GL#113)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-1.0.cf" date="1720353600">- Update to 1.1.42
  Regressions:
  - extensions: Re-add call to xmlCheckFilename with older libxml2
  Improvements:
  - utils: Don't use deprecated xmlCharEncodingHandler member
  - transform: Handle filesystem paths after libxml2 changes
  - locale: Work around issue with FreeBSD's strxfrm_l
  Build Systems:
  - cmake: Add LIBXSLT_WITH_PROGRAMS option
  - cmake: Fix HAVE_GCRYPT check</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-2.0.cf" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.42-4.0.cf" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.1.43-1.0.cf" date="1741867200">- Update to 1.1.43
  Major changes:
  - The non-standard EXSLT crypto extensions and support for dynamically
    loaded plugins are now disabled by default, but can be enabled by passing
    --with-crypto or --with-plugins to configure; in a future release, these
    features will be removed
  - Debug output and the debugger are disabled by default and can be enabled
    by passing --with-debug or --with-debugger
  Security:
  - Fix use-after-free of XPath context node (CVE-2025-24855)
  - Fix use-after-free related to excluded namespaces (CVE-2024-55549)
  Bug fixes:
  - variables: Fix non-deterministic generated IDs
  libxml2 related clean-up:
  - python: Don't use removed libxml2 macro
  - tests: Skip test_bad.xsl with libxml2 before 2.13
  - python: Don't include nanoftp.h and nanohttp.h
  - tests: Avoid namespace warning on Windows
  - numbers: Stop using libxml2 XPath axis API
  - numbers: Use private copy of xmlCopyCharMultiByte
  - documents: Use xmlCtxtParseDocument if available
  - tests: Make runtest compile with older libxml2 versions
  - utils: Account for libxml2 change
  - tests: Make bug-219.xsl compatible with older libxml2
  - extensions: Always include stdlib.h
  - extensions: Don't use libxml2's "modules" feature
  Code clean-up:
  - numbers: Make static variables const
  - variables: Remove debug code
  Portability:
  - python: Declare init func with PyMODINIT_FUNC
  - exslt: Use C99 NAN macro
  Build:
  - cmake: Always build Python module as shared library
  - cmake: Fix compatibility in package version file
  - configure.ac: Find libgcrypt via pkg-config
- Build with --with-plugins</changelog>
</package>
<package pkgid="9031f8694d5170b1f758e57bc439f942d6984d7738a63dc0ebe89295863e8d37" name="rbldnsd" arch="x86_64">
  <version epoch="0" ver="0.998b" rel="20.fc42"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-13" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-14" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-15" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-16" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.998b-17" date="1739361600">- Add sysusers.d config file to allow rpm to create users/groups automatically
  from Fedora 43 onwards</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-18" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.998b-19" date="1758888000">- Fix base template replacement issue (GH#18, GH#19, GH#22, rhbz#2398024)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.998b-20" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="c70a7ce1c5b787326adbe5239e70c6c8c7734422fd68e9b10035d4af5e44f36e" name="sendmail" arch="x86_64">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="30cfeb6ddd8ce97ffc2b6ab4be65655ee63fde30175e4c95f3a619f087f47cb8" name="sendmail-cf" arch="noarch">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="4e534c534c76ed695c30fcacb9a9c9fadd4d8e7aa19ba94e4bfd7a7ce8728ddb" name="sendmail-doc" arch="noarch">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="e2f64ea490129281e84ccc27e06f37bc38330cd1057b0000629434be6b6f6aa2" name="sendmail-milter" arch="i686">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="817f22e23f5cb41ab246a03c105ed8c8d1d5b6baa78726f4f404494ec0152016" name="sendmail-milter" arch="x86_64">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="5c2490e330e355a5773eed74bce7462563ab5b852c3f03310be4a82b51fa7732" name="sendmail-milter-devel" arch="i686">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="e4f28479168adcb54154bea4455e2ec1e0c7cb6f70c9ac7a258f633940d6cc5d" name="sendmail-milter-devel" arch="x86_64">
  <version epoch="0" ver="8.18.2" rel="4.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-4.0.cf" date="1721736000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
- Pull in openssl-devel-engine to fix build in fedora 41 onwards
- Prepare for bin-sbin merge
  https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-5.0.cf" date="1736942400">- Rebuilt for the bin-sbin merge (2nd attempt)
- Add EL-10 support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-10.0.cf" date="1743422400">- Add sysusers.d config file to allow rpm to create users/groups automatically
- Built with gnu17 C standard (rhbz#2336394)
- "Move" files managed by alternatives back to /usr/sbin
- Drop support for old distributions prior to F-28, EL-8</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-12.0.cf" date="1747224000">- Fixed alternative scripts for /usr/(s)bin merge
- alternatives slaves are called followers since alternatives 1.21
- Added fix for gcc-15</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.1-13.0.cf" date="1753617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-1.0.cf" date="1768824000">- Update to 8.18.2 (rhbz#2425602)
  - See RELEASE_NOTES for details</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-2.0.cf" date="1768824001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 8.18.2-4.0.cf" date="1781265600">- Enable support for SMTPUTF8 (RFC 6531)
- Used self signed certificate instead of the CA bundle (rhbz#2476449)</changelog>
</package>
<package pkgid="7af5b8fcc3f061d108d57dc115f3aab7955cb15f36e695d46512b17095d4e06f" name="shorten" arch="x86_64">
  <version epoch="0" ver="3.6.1" rel="5.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 3.6.1-5" date="1680177600">- Avoid deprecated patch syntax
- Use %license unconditionally</changelog>
</package>
<package pkgid="8b9adeb69ee8ea339e10f44a587ab82e09fc79116e2071762fa40a80c520fe01" name="smbldap-tools" arch="noarch">
  <version epoch="0" ver="0.9.11" rel="28.fc42"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-24" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-27" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-28" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="3beafe6d455d51603e5e9e12321c6a0dedf0411efd62ef2efb35b4da352866dd" name="smf-sav" arch="x86_64">
  <version epoch="0" ver="2.1" rel="7.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1-6" date="1730289600">- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.1-7" date="1761739200">- Build with -DSM_CONF_STDBOOL_H=1 to avoid issues with libmilter API</changelog>
</package>
<package pkgid="44877d9f04d4a03d275c7198b709bf76edd9d112e3667d148b2636a5f25f8f2c" name="smf-spf" arch="x86_64">
  <version epoch="0" ver="2.5.1" rel="2.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.1-1" date="1690027200">- Switch upstream to https://github.com/jcbf/smf-spf/
- Update to 2.5.1 (see README.md for details)
- Don't package ChangeLog, which refers to original unmaintained version</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.5.1-2" date="1744632000">- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)
- Build with -std=gnu17 due to issues with milter API (#2336394)</changelog>
</package>
<package pkgid="16830c8c5280983d07c749a2d2328cd6b316e6d0519b81753f0047e295194c83" name="spamass-milter" arch="x86_64">
  <version epoch="0" ver="0.4.0" rel="30.fc42"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.4.0-27" date="1717848000">- Add quarantine option</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-28" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-29" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-30" date="1739534400">- Drop EL-7 support
- Drop homedir fix for upgrades from packages built in 2009 and earlier
- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)</changelog>
</package>
<package pkgid="24e4c977f185c263172850317bc377105d3a9e9eca185c605b83b474b1e2f856" name="spamass-milter-postfix" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="30.fc42"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-25" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-26" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.4.0-27" date="1717848000">- Add quarantine option</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-28" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.0-29" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.4.0-30" date="1739534400">- Drop EL-7 support
- Drop homedir fix for upgrades from packages built in 2009 and earlier
- Add sysusers.d config file to allow rpm to create users/groups automatically
  (from F-43 onwards)</changelog>
</package>
<package pkgid="a8938e7a1daffc434505c7f34e97162d2679f5f9dbd9a4ba21b222647de90f03" name="symlinks" arch="x86_64">
  <version epoch="0" ver="1.7" rel="2.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.7-2.0.cf" date="1744632000">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="368a883e74b021266beada5783f0d19ec63936c566b3ba1edb1150d31aac81d6" name="treescan" arch="noarch">
  <version epoch="0" ver="4.81" rel="4.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-1" date="1680436800">- Update to 4.8
  - Remove long-obsolete "paths must be absolute" text in aio_open/stat
    descriptions
  - Another workaround for the low-quality musl libc
  - Test for umount separately, as it is more portable
  - Some low-quality posix attempts (openbsd, osx) declare the availability of
    fexecve() but then don't even bother to implement a stub
- Avoid use of deprecated patch syntax</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-2" date="1689336000">- Perl 5.38 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-4" date="1702468800">- Fix use of incompatible pointer type in configure test for fexecve()</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.80-6" date="1706184000">- Re-rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  (see https://pagure.io/releng/issue/11888)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-1" date="1708516800">- Update to 4.81
  - Work around a bug in musl w.r.t. to O_SEARCH and use EIO_O_PATH instead,
    verifying the semantics against the subset of O_PATH and O_SEARCH
  - aio_copy now tries to preallocate the destination file
  - fexecve configure test used the wrong pointer type</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-2" date="1718280000">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-3" date="1721563200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 4.81-4" date="1737374400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
</package>
<package pkgid="57402208c46fc57c4a6dde1a66cf72c91772ca4062bf15fc3c387e18e179223a" name="tzip" arch="x86_64">
  <version epoch="0" ver="1.12" rel="14.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.12-14" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax
- Use distribution linker flags</changelog>
</package>
<package pkgid="d6db443279c80020516d4ce1c34fe28a5e9c6c5dc19eb2219070da45444b71fb" name="ud" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.7.1-10" date="1744632000">- Drop redundant initscript patch
- Always assume signal handlers are void functions (configure test gets this
  wrong)
- Use systemd scriptlet macros</changelog>
</package>
<package pkgid="e7e7f882a7e01f5ab74e13f8c9d29032f8f0b0ab224e19f34e6086cfdbe45d90" name="unrar" arch="x86_64">
  <version epoch="0" ver="7.23" rel="1.0.cf.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.12-1.0.cf" date="1751457600">- Update to 7.12
- Update debian files to 7.1.8-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-0.1.0.cf.beta1" date="1753704000">- Update to 7.13 beta 1
- Update debian files to 7.1.9-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.13-1.0.cf" date="1753963200">- Update to 7.13
- Update debian files to 7.1.10-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.1.0.cf.beta1" date="1762257600">- Update to 7.20 beta 1
- Update debian files to 7.2.1-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.2.0.cf.beta2" date="1763726400">- Update to 7.20 beta 2
- Update debian files to 7.2.2-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-0.3.0.cf.beta3" date="1766404800">- Update to 7.20 beta 3
- Update debian files to 7.2.3-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.20-1.0.cf" date="1770724800">- Update to 7.20
- Update debian files to 7.2.4-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-0.1.0.cf.beta1" date="1774526400">- Update to 7.21 beta 1
- Update debian files to 7.2.5-1</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.21-1.0.cf" date="1777550400">- Update to 7.21</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 7.23-1.0.cf" date="1782993600">- Update to 7.23
- Update debian files to 7.2.6-1</changelog>
</package>
<package pkgid="4bf761e049d577512b2ac4c8324630b388b248e643a0b7c959262f215634b2e8" name="weblint++" arch="noarch">
  <version epoch="0" ver="1.15" rel="10.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.15-10" date="1680177600">- Use SPDX-format license tag</changelog>
</package>
<package pkgid="f77b5115bde5ff4d25c2fca8c7adf7650ca00d54da828aff456e97e86df4f658" name="weblint" arch="noarch">
  <version epoch="0" ver="1.9.3" rel="16.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.9.3-16" date="1680177600">- Use SPDX-format license tag
- Avoid deprecated patch syntax</changelog>
</package>
<package pkgid="227ee5ce72a31df34118c6f0930cc48ff3e65e6d70a0c18b5ab5143772b79577" name="xv" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.0-1.0" date="1719403200">- Update to 5.2.0
  - Made some improvements to WEBP support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.0-1.0" date="1723550400">- Update to 6.0.0
  - Add basic HiDPI support
  - Improve the compatibility of the source code with more modern C standards
    (e.g., C23)
  - Fix the build with link-time optimization (GH#25)
  - Fix many other bugs
- Package NEWS.txt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.1-1.0" date="1727179200">- Update to 6.0.1
  - xvjpeg.c, xvpng.c: Fix gcc warnings on -Wclobbered
  - xvjpeg.c: Fix a bad memory access on jpegs with inverted data
  - Fix xvtext.c overwrite exposed by the link-time optimization fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.2-1.0" date="1728993600">- Update to 6.0.2
  - Added -isize option to control the icon size in the browser: the syntax is
    -isize &lt;width&gt; or -isize &lt;width&gt;x&lt;height&gt;
    If the height is omitted, it defaults to the width * 3/4
  - xv now checks the XV_OPTIONS environment variable before reading the
    command line; xv splits it into words and parses it like command line
    options
    Use XV_OPTIONS to set default options</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.4-1.0" date="1755864000">- Update to 6.0.4
  - Updated URLs for the xv website
  - Fix crash when freeing JPEG comments (GH#37)
- Drop redundant scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-1.0" date="1764590400">- Update to 6.1.0
  - Add support for EXIF orientation tags (GH#40)
  - Add support for depth 30, or 10bit/colour, for compatibility with modern
    graphics stack (GH#39)
  - Fix wasJpegUp → wasJp2kUp (GH#38)
- Build with EXIF (orientation) and XRANDR support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.2.0-1.0" date="1772452800">- Update to 6.2.0
  - Make EXIF orientation support generic rather than being tied to JPEG
  - Add orientation support to WebP images
  - Add sample WebP image with EXIF orientation flags set (not packaged)</changelog>
</package>
<package pkgid="e1348f92262c56385de3449700294740adec0e8c54f4d4c8a358e54b4881a4b9" name="xv-doc" arch="noarch">
  <version epoch="0" ver="6.2.0" rel="1.0.fc42"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.2.0-1.0" date="1719403200">- Update to 5.2.0
  - Made some improvements to WEBP support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.0-1.0" date="1723550400">- Update to 6.0.0
  - Add basic HiDPI support
  - Improve the compatibility of the source code with more modern C standards
    (e.g., C23)
  - Fix the build with link-time optimization (GH#25)
  - Fix many other bugs
- Package NEWS.txt</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.1-1.0" date="1727179200">- Update to 6.0.1
  - xvjpeg.c, xvpng.c: Fix gcc warnings on -Wclobbered
  - xvjpeg.c: Fix a bad memory access on jpegs with inverted data
  - Fix xvtext.c overwrite exposed by the link-time optimization fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.2-1.0" date="1728993600">- Update to 6.0.2
  - Added -isize option to control the icon size in the browser: the syntax is
    -isize &lt;width&gt; or -isize &lt;width&gt;x&lt;height&gt;
    If the height is omitted, it defaults to the width * 3/4
  - xv now checks the XV_OPTIONS environment variable before reading the
    command line; xv splits it into words and parses it like command line
    options
    Use XV_OPTIONS to set default options</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.0.4-1.0" date="1755864000">- Update to 6.0.4
  - Updated URLs for the xv website
  - Fix crash when freeing JPEG comments (GH#37)
- Drop redundant scriptlets</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.1.0-1.0" date="1764590400">- Update to 6.1.0
  - Add support for EXIF orientation tags (GH#40)
  - Add support for depth 30, or 10bit/colour, for compatibility with modern
    graphics stack (GH#39)
  - Fix wasJpegUp → wasJp2kUp (GH#38)
- Build with EXIF (orientation) and XRANDR support</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 6.2.0-1.0" date="1772452800">- Update to 6.2.0
  - Make EXIF orientation support generic rather than being tied to JPEG
  - Add orientation support to WebP images
  - Add sample WebP image with EXIF orientation flags set (not packaged)</changelog>
</package>
</otherdata>