curl/RELEASE-NOTES

curl and libcurl 7.74.0

 Public curl releases:         196
 Command line options:         235
 curl_easy_setopt() options:   284
 Public functions in libcurl:  85
 Contributors:                 2282

This release includes the following changes:

 o hsts: add experimental support for Strict-Transport-Security [37]

This release includes the following bugfixes:

 o acinclude: detect manually set minimum macos/ipod version [46]
 o alt-svc: enable (in the build) by default [20]
 o alt-svc: minimize variable scope and avoid "DEAD_STORE" [51]
 o checksrc: warn on empty line before open brace [13]
 o CI/appveyor: disable test 571 in two cmake builds [22]
 o CI/azure: improve on flakiness by avoiding libtool wrappers [7]
 o CI/tests: enable test target on TravisCI for CMake builds [38]
 o CI/travis: add brotli and zstd to the libssh2 build [27]
 o cmake: call the feature unixsockets without dash [26]
 o cmake: correctly handle linker flags for static libs [52]
 o cmake: don't pass -fvisibility=hidden to clang-cl on Windows [53]
 o cmake: make BUILD_TESTING dependent option [30]
 o cmake: set the unicode feature in curl-config on Windows [23]
 o cmake: store IDN2 information in curl_config.h [25]
 o configure: pass -pthread to Libs.private for pkg-config [50]
 o configure: use pkgconfig to find openSSL when cross-compiling [28]
 o connect: repair build without ipv6 availability [19]
 o curl.1: add an "OUTPUT" section at the top of the manpage [32]
 o curl.se: new home [59]
 o curl: only warn not fail, if not finding the home dir [15]
 o curl_easy_escape: limit output string length to 3 * max input [55]
 o Curl_pgrsStartNow: init speed limit time stamps at start [48]
 o curl_url_set.3: fix typo in the RETURN VALUE section [3]
 o CURLOPT_DNS_USE_GLOBAL_CACHE.3: fix typo [34]
 o CURLOPT_NOBODY.3: fix typo [6]
 o CURLOPT_TCP_NODELAY.3: fix comment in example code [8]
 o CURLOPT_URL.3: clarify SCP/SFTP URLs are for uploads as well
 o docs: document the 8MB input string limit [57]
 o docs: Fix various typos in documentation [58]
 o examples/httpput: remove use of CURLOPT_PUT [39]
 o FAQ: refreshed [56]
 o gnutls: fix memory leaks (certfields memory wasn't released) [41]
 o header.d: mention the "Transfer-Encoding: chunked" handling [45]
 o HISTORY: the new domain
 o http3: fix two build errors, silence warnings [10]
 o http: pass correct header size to debug callback for chunked post [44]
 o http_proxy: use enum with state names for 'keepon' [54]
 o httpput-postfields.c: new example doing PUT with POSTFIELDS [35]
 o libssh2: fix build with disabled proxy support [17]
 o libssh2: fix transport over HTTPS proxy [31]
 o libssh2: require version 1.0 or later [24]
 o Makefile.m32: add support for HTTP/3 via ngtcp2+nghttp3 [11]
 o mqttd: fclose test file when done [60]
 o ngtcp2: adapt to recent nghttp3 updates [49]
 o openssl: acknowledge SRP disabling in configure properly [9]
 o os400: Sync libcurl API options [5]
 o packages/OS400: make the source code-style compliant [4]
 o range.d: clarify that curl will not parse multipart responses [36]
 o range.d: fix typo
 o rtsp: error out on empty Session ID, unified the code
 o rtsp: fixed Session ID comparison to refuse prefix [65]
 o rtsp: fixed the RTST Session ID mismatch in test 570 [64]
 o runtests: return error if no tests ran [16]
 o runtests: revert the mistaken edit of $CURL
 o runtests: show keywords when no tests ran [33]
 o src/tool_filetime: disable -Wformat on mingw for this file [2]
 o strerror: use 'const' as the string should never be modified [18]
 o test122[12]: remove these two tests [1]
 o tests: add missing global_init/cleanup calls [42]
 o tests: fix some http/2 tests for older versions of nghttpx [47]
 o tool_debug_cb: do not assume zero-terminated data
 o tool_help: make "output" description less confusing [21]
 o tool_operate: --retry for HTTP 408 responses too [43]
 o tool_operate: bail out proper on errors during parallel transfers [29]
 o tool_operate: fix compiler warning when --libcurl is disabled [12]
 o travis: use ninja-build for CMake builds [63]
 o travis: use valgrind when running tests for debug builds [40]
 o urlapi: URL encode a '+' in the query part [14]

This release includes the following known bugs:

 o see docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

This release would not have looked like this without help, code, reports and
advice from friends like these:

  Andreas Fischer, asavah on github, b9a1 on github, Baruch Siach,
  Basuke Suzuki, bobmitchell1956 on github, BrumBrum on hackerone,
  Cristian Morales Vega, Daniel Gustafsson, Daniel Stenberg, Dietmar Hauser,
  Dirk Wetter, Emil Engler, hamstergene on github, Harry Sintonen,
  Jakub Zakrzewski, Jeroen Ooms, Jon Rumsey, José Joaquín Atria,
  Kael1117 on github, Marcel Raad, Marc Hörsken, Marc Schlatter,
  Niranjan Hasabnis, nosajsnikta on github, Philipp Klaus Krause, Ray Satiro,
  Rui LIU, Sergei Nikulov, Tobias Hieta, Tom G. Christensen, Viktor Szakats,
  (32 contributors)

        Thanks! (and sorry if I forgot to mention someone)

References to bug reports and discussions on issues:

 [1] = https://curl.se/bug/?i=6080
 [2] = https://curl.se/bug/?i=6079
 [3] = https://curl.se/bug/?i=6102
 [4] = https://curl.se/bug/?i=6085
 [5] = https://curl.se/bug/?i=6083
 [6] = https://curl.se/bug/?i=6097
 [7] = https://curl.se/bug/?i=6049
 [8] = https://curl.se/bug/?i=6096
 [9] = https://curl.se/mail/lib-2020-10/0037.html
 [10] = https://curl.se/bug/?i=6093
 [11] = https://curl.se/bug/?i=6092
 [12] = https://curl.se/bug/?i=6095
 [13] = https://curl.se/bug/?i=6088
 [14] = https://curl.se/bug/?i=6086
 [15] = https://curl.se/bug/?i=6200
 [16] = https://curl.se/bug/?i=6053
 [17] = https://curl.se/bug/?i=6125
 [18] = https://curl.se/bug/?i=6068
 [19] = https://curl.se/bug/?i=6069
 [20] = https://curl.se/bug/?i=5868
 [21] = https://curl.se/bug/?i=6118
 [22] = https://curl.se/bug/?i=6119
 [23] = https://curl.se/bug/?i=6117
 [24] = https://curl.se/bug/?i=6116
 [25] = https://curl.se/bug/?i=6108
 [26] = https://curl.se/bug/?i=6108
 [27] = https://curl.se/bug/?i=6105
 [28] = https://curl.se/bug/?i=6145
 [29] = https://curl.se/bug/?i=6141
 [30] = https://curl.se/bug/?i=6072
 [31] = https://curl.se/bug/?i=6113
 [32] = https://curl.se/bug/?i=6134
 [33] = https://curl.se/bug/?i=6126
 [34] = https://curl.se/bug/?i=6131
 [35] = https://curl.se/bug/?i=6188
 [36] = https://curl.se/bug/?i=6124
 [37] = https://curl.se/bug/?i=5896
 [38] = https://curl.se/bug/?i=6074
 [39] = https://curl.se/bug/?i=6186
 [40] = https://curl.se/bug/?i=6154
 [41] = https://curl.se/bug/?i=6153
 [42] = https://curl.se/bug/?i=6156
 [43] = https://curl.se/bug/?i=6155
 [44] = https://curl.se/bug/?i=6147
 [45] = https://curl.se/bug/?i=6148
 [46] = https://curl.se/bug/?i=6138
 [47] = https://curl.se/bug/?i=6139
 [48] = https://curl.se/bug/?i=6162
 [49] = https://curl.se/bug/?i=6185
 [50] = https://curl.se/bug/?i=6168
 [51] = https://curl.se/bug/?i=6182
 [52] = https://curl.se/bug/?i=6195
 [53] = https://curl.se/bug/?i=6194
 [54] = https://curl.se/mail/lib-2020-11/0026.html
 [55] = https://curl.se/bug/?i=6192
 [56] = https://curl.se/bug/?i=6177
 [57] = https://curl.se/bug/?i=6190
 [58] = https://curl.se/bug/?i=6171
 [59] = https://curl.se/bug/?i=6172
 [60] = https://curl.se/bug/?i=6058
 [63] = https://curl.se/bug/?i=6077
 [64] = https://curl.se/bug/?i=6161
 [65] = https://curl.se/bug/?i=6161