CVS commit: pkgsrc/www/curl

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Wed Feb 15 08:11:33 UTC 2023

Modified Files:
        pkgsrc/www/curl: Makefile distinfo

Log Message:
curl: update to 7.88.0.

curl and libcurl 7.87.1

This release includes the following changes:

 o curl.h: add CURL_HTTP_VERSION_3ONLY [82]
 o share: add sharing of HSTS cache among handles [7]
 o src: add --http3-only [81]
 o tool_operate: share HSTS between handles
 o urlapi: add CURLU_PUNYCODE [25]
 o writeout: add %{certs} and %{num_certs} [33]

This release includes the following bugfixes:

 o cf-socket: fix build when not HAVE_GETPEERNAME [89]
 o cf-socket: keep sockaddr local in the socket filters [69]
 o cfilters:Curl_conn_get_select_socks: use the first non-connected filter [24]
 o CI: add a workflow to automatically label pull requests [102]
 o CI: add pytest GHA to CI test/tests-httpd on a HTTP/3 setup [109]
 o CI: Retry failed downloads to reduce spurious failures
 o CI: update wolfssl / wolfssh to 5.5.4 / 1.4.12 [167]
 o cmake: bump requirement to 3.7 [23]
 o cmake: check for sendmsg [39]
 o cmake: delete redundant macro definition `SECURITY_WIN32` [91]
 o cmake: fix dev warning due to mismatched arg [160]
 o cmake: fix the snprintf detection [5]
 o cmake: remove deprecated symbols check [96]
 o cmake: set SOVERSION also for macOS [68]
 o cmake: use list APPEND syntax for CMAKE_REQUIRED_DEFINITIONS [94]
 o cmdline-opts/Makefile: on error, do not leave a partial [163]
 o CODEOWNERS: remove the peeps mentioned as CI owners [128]
 o connect: fix access of pointer before NULL check [83]
 o connect: fix build when not ENABLE_IPV6 [88]
 o connect: fix strategy testing for attempts, timeouts and happy-eyeball [110]
 o connections: introduce http/3 happy eyeballs [127]
 o content_encoding: do not reset stage counter for each header [170]
 o CONTRIBUTE: More formally specify the commit description [158]
 o cookies: fp is always not NULL [104]
 o copyright.pl: cease doing year verifications [74]
 o copyright: update all copyright lines and remove year ranges [35]
 o curl.1: make help, version and manual sections "custom" [165]
 o curl.h: allow up to 10M buffer size [76]
 o curl.h: mark CURLSSLBACKEND_MESALINK as deprecated [52]
 o curl/websockets.h: extend the websocket frame struct
 o curl: output warning at --verbose output for debug-enabled version [80]
 o curl_free.3: fix return type of `curl_free` [113]
 o curl_global_sslset.3: clarify the openssl situation [53]
 o curl_log: for failf/infof and debug logging implementations [87]
 o curl_setup: Disable by default recv-before-send in Windows [154]
 o curl_version_info.3: fix typo [100]
 o curl_ws_send.3: clarify how to send multi-frame messages
 o CURLOPT_HEADERDATA.3: warn DLL users must set write function [45]
 o CURLOPT_READFUNCTION.3: the callback 'size' arg is always 1 [73]
 o CURLOPT_WRITEFUNCTION.3: fix memory leak in example [122]
 o dict: URL decode the entire path always [120]
 o docs/DEPRECATE.md: deprecate gskit [36]
 o docs: add link to GitHub Discussions [49]
 o docs: mention indirect effects of --insecure [19]
 o docs: POSTFIELDSIZE must be set to -1 with read function [97]
 o doh: ifdef IPv6 code [123]
 o easyoptions: fix header printing in generation script [84]
 o escape: hex decode with a lookup-table [107]
 o escape: use table lookup when adding %-codes to output [105]
 o examples: remove the curlgtk.c example [48]
 o fopen: remove unnecessary assignment [111]
 o ftpserver: lower the DATA connect timeout to speed up torture tests [27]
 o GHA/macos.yml: bump to gcc-12 [106]
 o GHA/macos: use Xcode_14.0.1 for cmake builds [132]
 o GHA: add job on Slackware 15.0 [58]
 o GHA: bump ngtcp2 workflow dependencies [169]
 o GHA: enable websockets in the torture job [148]
 o GHA: move the quiche job here from zuul [75]
 o GHA: use designated ngtcp2 and its dependencies versions [77]
 o haxproxy: send before TLS handhshake [34]
 o header.d: add a header file example [149]
 o hsts.d: explain hsts more [78]
 o hsts: handle adding the same host name again
 o HTTP/[23]: continue upload when state.drain is set [150]
 o http2: aggregate small SETTINGS/PRIO/WIN_UPDATE frames [155]
 o http2: fix compiler warning due to uninitialized variable
 o http2: minor buffer and error path fixes [151]
 o http2: when using printf %.*s, the length arg must be 'int' [41]
 o HTTP3: mention what needs to be in place to remove EXPERIMENTAL label [31]
 o http: add additional condition for including stdint.h [54]
 o http: decode transfer encoding first [51]
 o http: fix "part of conditional expression is always false" [125]
 o http: remove the trace message "Mark bundle... multiuse" [6]
 o http_aws_sigv4: remove typecasts from HMAC_SHA256 macro [121]
 o http_proxy: do not assign data->req.p.http use local copy [59]
 o INSTALL: document how to use multiple TLS backends [103]
 o lib670: make test.h the first include [56]
 o lib: connect/h2/h3 refactor [57]
 o lib: fix typos [99]
 o lib: fix typos in comments which repeat a word [67]
 o libssh2: try sha2 algos for hostkey methods [2]
 o libtest: add a sleep macro for Windows [115]
 o Linux CI: update some dependecies to latest tag [44]
 o Makefile.mk: fix wolfssl and mbedtls default paths [21]
 o man pages: call the custom user pointer 'clientp' consistently [135]
 o md4: fix build with GnuTLS + OpenSSL v1 [12]
 o misc: fix grammar and spelling [14]
 o misc: fix spelling [134]
 o misc: reduce struct and struct field sizes [65]
 o msh3: add support for request payload [28]
 o msh3: update to v0.5 Release [17]
 o msh3: update to v0.6 [60]
 o multi: stop sending empty HTTP/3 UDP datagrams on Windows [136]
 o multihandle: turn bool struct fields into bits [26]
 o ngtcp2: add CURLOPT_SSL_CTX_FUNCTION support for openssl+wolfssl [62]
 o ngtcp2: fix the build without 'sendmsg' [38]
 o ngtcp2: replace removed define and stop using removed function [164]
 o no-clobber.d: only use long form options in man page text [145]
 o noproxy: support for space-separated names is deprecated [66]
 o nss: implement data_pending method [43]
 o openldap: fix missing sasl symbols at build in specific configs [152]
 o openssl: adapt to boringssl's error code type [118]
 o openssl: don't ignore CA paths when using Windows CA store (redux) [101]
 o openssl: don't log raw record headers [93]
 o openssl: make the BIO_METHOD a local variable in the connection filter [79]
 o openssl: only use CA_BLOB if verifying peer [112]
 o openssl: remove attached easy handles from SSL instances [29]
 o openssl: store the CA after first send (ClientHello) [156]
 o os400: fixes to make-lib.sh and initscript.sh [71]
 o packages: remove Android, update README [108]
 o release-notes.pl: check fixes/closes lines better
 o Revert "x509asn1: avoid freeing unallocated pointers" [37]
 o runtest.pl: add expected fourth return value [40]
 o runtests: tear down http2/http3 servers when https server is stopped [8]
 o runtests: consider warnings fatal and error on them [32]
 o runtests: fix detection of TLS backends [50]
 o runtests: make 'mbedtls' a testable feature
 o rustls: improve error messages [162]
 o scripts/delta: show percent of number of files changed since last tag
 o scripts: fix Appveyor job detection in cijobs.pl
 o scripts: set file mode +x on all perl and shell scripts [63]
 o sectransp: fix for incomplete read/writes [61]
 o SECURITY-PROCESS.md: document severity levels [20]
 o setopt: Address undefined behaviour by checking for null [161]
 o setopt: move the SHA256 opt within #ifdef libssh2 [42]
 o setopt: use >, not >=, when checking if uarg is larger than uint-max [140]
 o smb: return error on upload without size [142]
 o socketpair: allow localhost MITM sniffers [30]
 o strdup: name it Curl_strdup [16]
 o system.h: assume OS400 is always built with ILEC compiler [95]
 o test1560: use a UTF8-using locale when run [46]
 o test2304: remove stdout verification
 o tests-httpd: basic infra to run curl against an apache httpd [72]
 o tests: add 3 new HTTP/2 test cases, plus https: support for nghttpx [9]
 o tests: add tests for HTTP/2 and HTTP/3 to verify the header API [166]
 o tests: avoid use of sha1 in certificates [4]
 o tls: fixes for wolfssl + openssl combo builds [133]
 o tool_getparam: fix hiding of command line secrets [85]
 o tool_operate: fix `CURLOPT_SOCKS5_GSSAPI_NEC` type [1]
 o tool_operate: fix error codes during DOS filename sanitize [138]
 o tool_operate: fix error codes on bad URL & OOM [139]
 o tool_operate: fix headerfile writing [64]
 o tool_operate: repair --rate [119]
 o transfer: break the read loop when RECV is cleared [22]
 o typecheck: accept expressions for option/info parameters [3]
 o url: fix part of conditional expression is always true [147]
 o urlapi: avoid Curl_dyn_addf() for hex outputs [130]
 o urlapi: fix part of conditional expression is always true: qlen [146]
 o urlapi: skip path checks if path is just "/" [131]
 o urlapi: skip the extra dedotdot alloc if no dot in path [126]
 o urldata: cease storing TLS auth type [55]
 o urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP [13]
 o urldata: make set.http200aliases conditional on HTTP being present [11]
 o urldata: move the cookefilelist to the 'set' struct [15]
 o urldata: remove unused struct fields, made more conditional [10]
 o vquic: stabilization and improvements [141]
 o vtls: fix hostname handling in filters [98]
 o vtls: manage current easy handle in nested cfilter calls [90]
 o vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
 o winbuild: document that arm64 is supported [92]
 o windows: always use curl's basename() implementation [157]
 o wolfssl: remove deprecated post-quantum algorithms [124]
 o workflows/linux.yml: merge 3 common packages [18]
 o write-out.d: add 'since version' to %{header_json} documentation [129]
 o write-out.d: clarify Windows % symbol escaping [86]
 o ws: fix autoping handling [70]
 o ws: fix multiframe send handling [143]
 o ws: fix recv of larger frames [144]
 o ws: remove bad assert [117]
 o ws: unstick connect-only shutdown [116]
 o ws: use %Ou for outputting curl_off_t with info() [153]
 o x509asn1: fix compile errors and warnings [47]
 o zuul: stop using this CI service [114]


To generate a diff of this commit:
cvs rdiff -u -r1.264 -r1.265 pkgsrc/www/curl/Makefile
cvs rdiff -u -r1.187 -r1.188 pkgsrc/www/curl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/curl/Makefile
diff -u pkgsrc/www/curl/Makefile:1.264 pkgsrc/www/curl/Makefile:1.265
--- pkgsrc/www/curl/Makefile:1.264      Wed Dec 21 07:52:06 2022
+++ pkgsrc/www/curl/Makefile    Wed Feb 15 08:11:33 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.264 2022/12/21 07:52:06 wiz Exp $
+# $NetBSD: Makefile,v 1.265 2023/02/15 08:11:33 wiz Exp $
 
-DISTNAME=      curl-7.87.0
+DISTNAME=      curl-7.88.0
 CATEGORIES=    www
 MASTER_SITES=  https://curl.se/download/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/www/curl/distinfo
diff -u pkgsrc/www/curl/distinfo:1.187 pkgsrc/www/curl/distinfo:1.188
--- pkgsrc/www/curl/distinfo:1.187      Wed Dec 21 07:52:06 2022
+++ pkgsrc/www/curl/distinfo    Wed Feb 15 08:11:33 2023
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.187 2022/12/21 07:52:06 wiz Exp $
+$NetBSD: distinfo,v 1.188 2023/02/15 08:11:33 wiz Exp $
 
-BLAKE2s (curl-7.87.0.tar.xz) = 183a12e737093673450f3fc8bb8afb100f366c207cc5b89339a6f27191b8e340
-SHA512 (curl-7.87.0.tar.xz) = aa125991592667280dce3788aabe81487cf8c55b0afc59d675cc30b76055bb7114f5380b4a0e3b6461a8f81bf9812fa26d493a85f7e01d84263d484a0d699ee7
-Size (curl-7.87.0.tar.xz) = 2547932 bytes
+BLAKE2s (curl-7.88.0.tar.xz) = fb25cc394b00d85a0c8566dad131750660b6d7914873666eeaf103a563522eb7
+SHA512 (curl-7.88.0.tar.xz) = 2008cbc67694f746b7449f087a19b2a9a4950333d6bac1cdc7d80351aa38d8d9b442087dedbc7b0909a419d3b10f510521c942aac012d04a53c32bdb15dce5f0
+Size (curl-7.88.0.tar.xz) = 2571564 bytes
 SHA1 (patch-configure) = ae123a94fa84ef99dfc1dadd596ac86ef0d143fe
 SHA1 (patch-curl-config.in) = a58c777fc1a0a087776e62ed2e2a1e0a339716df