CVS commit: pkgsrc/www/curl

["Leonardo Taccari" <leot%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   leot
Date:           Tue Aug 26 15:08:11 UTC 2025

Modified Files:
        pkgsrc/www/curl: Makefile.common distinfo

Log Message:
curl: Update to 8.15.0

Changes:
8.15.0
This release includes the following changes:

 o TLS: remove support for Secure Transport and BearSSL

This release includes the following bugfixes:

 o altsvc: accept 'clear' without semicolon as well
 o asyn-ares: remove redundant NULL check
 o asyn-thrdd: free the previous name before strdup'ing the new
 o autotools: detect and link `brotlicommon` library for brotli
 o autotools: drop `$top_builddir/src` from src header path
 o autotools: drop headers from src mk-unity rules (fixup)
 o autotools: drop no longer necessary `--srcdir` unity options
 o autotools: drop redundant `Makefile.inc` from `EXTRA_DIST` in src
 o autotools: simplify configuration in tests, examples
 o bufq: change read/write signatures
 o bufq: remove the unused Curl_bufq_unwrite function
 o build: assume `sys/socket.h`, `sys/time.h` on non-Windows (as in `curl/curl.h`)
 o build: drop `HAVE_SYS_SOCKET_H` and `HAVE_SYS_TIME_H` macros
 o build: drop explicit curlx from hdr paths, refer headers with `curlx/` prefix
 o build: drop unused variables in tests
 o build: fix libcurltool with cmake and tunits, related tidy-ups
 o build: split `.c` and `.h` file lists in tests
 o build: stop checking for `sys/stat.h`
 o build: stubgss tidy-ups (in tests)
 o build: sync build scripts between client/libtest
 o build: tidy up `Makefile.inc` use in lib and src
 o build: tidy up header paths, use srcdir where possible
 o cf-socket: make socket data_pending a nop
 o checksrc-all: rewrite in Perl, remove `checksrc.bat`
 o checksrc: reduce exceptions, apply again to curlx
 o cmake/FindGSS: fix processing C header path options
 o cmake/FindGSS: initialize result variables
 o cmake: `curl_add_clang_tidy_test_target` tidy-ups
 o cmake: build `stubgss` library for libtests to match autotools
 o cmake: check USE_WINDOWS_SSPI when adding secur32 to CURL_LIBS
 o cmake: configure c-ares header directory in project root (was: lib)
 o cmake: document OpenSSL and ngtcp2 crypto lib custom variables
 o cmake: drop never propagated C macros
 o cmake: drop passing redundant `CURL_STATICLIB` in examples and clients
 o cmake: drop redundant macro from test clients
 o cmake: drop reference to future variable
 o cmake: enable soversion by default for OpenHarmony OS
 o cmake: fix `curl_add_clang_tidy_test_target` when no `-D` option
 o cmake: fix generator expression in docs/examples
 o cmake: gather options recursively in `curl_add_clang_tidy_test_target`
 o cmake: make docs depend on support files
 o cmake: move `OUTPUT` argument in the `add_custom_command()` line
 o cmake: omit clang-tidy on internal libs curlu and curltool
 o cmake: replace `cmakelint` with `cmake-lint` from `cmakelang`, fix issues
 o cmake: replace the way clang-tidy verifies tests, fix issues found
 o cmake: simplify handling generated `lib1521.c` in libtests
 o cmake: sync `target_link_libraries()` order in tests more
 o cmake: sync tests scripts by using the variable `BUNDLE`
 o cmake: sync tests scripts with each other and autotools (more)
 o cmake: use `target_link_options()` when available
 o config-win32: fix default targets, shorten macro logic
 o configure: order LDAP after the SSL libraries
 o connect: drop unused struct member
 o connection: clarify `transport`
 o connection: eliminate member `remote_addr`
 o curl-config: fix whitespace in usage text
 o curl.h: make CURL_IPRESOLVE_* symbols defined as longs
 o curl.h: make CURLSSLOPT_* symbols defined as longs
 o curl.h: remove the "RESERVED" error codes
 o curl: implement non-blocking STDIN read on Windows
 o curl: improve non-blocking STDIN performance
 o curl: remove the global argument from many functions
 o curl: unify pointer names to global config
 o curl_get_line: make sure lines end with newline
 o curl_memory.h: fix to undefine `accept4`
 o curl_path: make SFTP handle a path like /~ properly.
 o curlinfo: provide the 'digest' feature
 o CURLSHOPT_SHARE.md: mention multi-threading requires callbacks
 o DEPRECATE.md: add VS2005 removal to the list
 o digest: fix build with disabled digest auth
 o DISTROS: update NixOS link
 o docs,tests: fix english grammar "allow to" -> "allow <something> to"
 o docs/CONTRIBUTE: fix broken link
 o docs/examples: add ftp-delete.c
 o docs: beef up examples/websocket.c
 o docs: fix broken link in CODE_REVIEW.md
 o docs: fix broken link in INSTALL.md
 o docs: fix docs for CURLOPT_PREQUOTE after #17616
 o docs: fix documentation of connect_only 2
 o docs: fix two typos
 o docs: mention that the netrc file works without port numbers
 o docs: mention the as-is concept generically
 o docs: note SSLS-EXPORT feature in -ssl-sessions doc
 o docs: reflect that delimiter-separated capath is only OpenSSL
 o docs: sync -tls-earlydata support w/ CURLOPT_SSL_OPTIONS
 o docs: warn about lifetime in CURLOPT_CLOSESOCKET*
 o easy: fix comment-documentation
 o easygetopt: fix curl logo in header comment
 o firefox-db2pem: avoid use of eval in script
 o ftp: fix prequotes for a directory in URL
 o ftplistparser: split parse_unix into sub functions
 o h2_serverpush: fix file handle leaks reported by clang-tidy
 o h3: fix query of concurrent streams
 o http/3: report handshake with version and cipher as for TCP connections
 o http2: do not delay RST send on aborted transfer
 o http2: fix var types in is_alive() implementations
 o http: explicitly ignore parsing errors for Retry-After
 o http: fix build with cookies and HSTS disabled
 o http_ntlm: protect against null deref
 o http_ntlm: remove unreachable code
 o INSTALL.md: cygwin details and add source code link
 o ldap: avoid automake caching issues with LDAP library names
 o ldap: if ldap-lib is sufficient, add it to LIBS.
 o ldap: initial support for --with-ldap option
 o lib2082: drop `typedef struct`
 o lib: address singleuse issues
 o lib: avoid reusing unclean connection
 o lib: drop two interim macros in favor of native libcurl API calls
 o lib: fix unused parameter/function compiler warnings
 o lib: make `CURLX_SET_BINMODE()` and use it
 o lib: make `curlx_wait_ms()` and use it
 o lib: replace scache no-op macros with `#ifdef`
 o lib: stop `time()` debug overrides at the end of source in altsvc, hsts
 o lib: unify recv/send function signatures
 o libcurl-env.md: drop LOGNAME, USER and NTLMUSER
 o libcurl.m4: fix indentation
 o libssh2: remove use of 'initialised' for cleanup
 o libssh: de-complex myssh_statemach_act()
 o libssh: fix readdir issues
 o libtests: make test 1503,1504,1505 use the 1502 binary
 o libtests: more header tidy-ups
 o libtests: stop building the sames source multiple times
 o memdebug.h: #undef `fclose` before defining it
 o memdebug.h: eliminate global macro `CURL_MT_LOGFNAME_BUFSIZE`
 o memdebug: include in unity batch
 o memory: stop overriding unused `wcsdup()`/`_wcsdup()` system functions
 o memory: tidy up `_tcsdup()` override
 o misc: fix typos
 o mk-lib1521: replace `printf` with `curl_mprintf`
 o multi: add dirty bitset
 o multi: do no expire a blocked transfer
 o multi: fix polling with pending input
 o multi: remove careful bounds check as coverity says it is not needed
 o multi: xfer table/bitset, handle limits
 o ngtcp2: fix coverity warning about result handling
 o openssl: enable readahead
 o openssl: error on SSL_ERROR_SYSCALL
 o openssl: fix handling of buffered data
 o openssl: fix openssl engine use
 o openssl: fix pkcs11 provider available check
 o os400: upgrade ILE/RPG bindings with latest definitions.
 o pingpong: on disconnect, check for unflushed pingpong state
 o projects/build-openssl.bat: remove
 o pytest test_07_70, weaken early data check
 o pytest: adapt for runs with openssl-1.1.1
 o pytest: disable test_07_37 and test_07_36 with openssl's quic
 o quic: implement CURLINFO_TLS_SSL_PTR
 o RELEASE-PROCEDURE.md: update docs/VERSIONS
 o runtests.pl: fix sprintf() using one too many %s
 o runtests: fix `LD_PRELOAD` detection for cmake-built curl binaries
 o runtests: support memory-limits per test
 o rustls: apply memory function overrides, fixing an ECH buffer free
 o rustls: don't try printing the not provided file
 o schannel: allow partial chains for manual peer verification
 o schannel: drop Windows 2000 compatibility logic
 o scorecard: flame graphs and documentation
 o SCP/SFTP: avoid busy loop after EAGAIN
 o scripts: fix to quote the copyright email address
 o socks: fix query when filter context is null
 o system.h: remove some macros
 o test1117: reduce write delays
 o test1175: fix to run, and fix documentation issues detected
 o test1222: fix for out-of-tree and no-libcurl-manual builds
 o test1499, 1599: use `%LOGDIR`
 o test1499: verify two chunked responses on reused connection
 o test1596: let test pass after year 2036
 o test1706: pass include directory to `managen` for out-of-tree builds
 o tests/client: drop autotools logic no longer necessary
 o tests/client: use `curl_mfprintf()`
 o tests/dnsd: read config from file
 o tests/http/clients: drop hack and use `curl_setup.h` again
 o tests/http/clients: move to tests/client
 o tests/http/requirements: remove multipart
 o tests/libtest: call `curlx_now_init()` for unit 1399, 2600 (Windows)
 o tests/libtest: drop `TEST_HANG_TIMEOUT` redefinition hack
 o tests/libtest: drop a checksrc exception
 o tests/libtest: use `curltime` from curlx
 o tests/server/util.c: include netinet/in6.h
 o tests/server: de-dupe/merge three `sockdaemon()` clones into one
 o tests/server: drop `memdebug.h`
 o tests/server: make all global vars/funcs static
 o tests/server: move memory init to `memptr.c`
 o tests/servers.pm: add more ways to figure out current user
 o tests: always make bundles, adapt build and tests
 o tests: bundle http clients, de-dupe, enable for MSVC
 o tests: constify, make consts static
 o tests: drop `BUNDLE_SRC` variable
 o tests: drop mk-bundle exceptions
 o tests: drop unused or redundant includes
 o tests: drop useless "nodist_SOURCES" assignments
 o tests: fail torture if !valgrind&threaded resolver
 o tests: fix 1301, 1308 to fail on error
 o tests: fix `BUNDLE` variable references in `Makefile.am`
 o tests: make all names < 75 characters long
 o tests: make individual test sources compile cleanly
 o tests: make sshserver less verbose
 o tests: move `curlcheck.h` to libtest as `unitcheck.h`
 o tests: move GSS-API dynamic stub into debug-mode libcurl
 o tests: torture: don't duplicate valgrind command
 o tests: use %b64[] to base64 data
 o tests: use %b64[] to base64 data in 2056, 2057
 o tftpd: use `CURLMIN()` macro
 o tidy-up: replace `<memdebug.h>` with `"memdebug.h"` (src, units)
 o tls: remove Curl_ssl false_start
 o tool1621: drop unused internal libcurl headers
 o tool_getparam: fix --ftp-pasv
 o tool_operate: fix return code when --retry is used but not triggered
 o tool_paramhelp: fix language in comments
 o top-complexity: lower max allowed complexity threshold to 90
 o unit tests: extract "private" prototypes at build time
 o unit1302: expand the base64 encode/decode tests
 o url: fix connection lifetime checks
 o url: fix NULL deref with bad password when no user is provided
 o urlapi: simplify and split into sub functions
 o urlapi: use uppercase hex encoding
 o vauth: move auth structs to conn meta data
 o vtls: change send/recv signatures of tls backends
 o vtls: fix a copy-pasted early data comment typo
 o vtls: log rustls negotiated KEX group name
 o vtls: prefer ciphersuite to cipher in msgs
 o vtls: prefer rustls-ffi ciphersuite name API
 o VULN-DISCLOSURE-POLICY.md: fix typos
 o VULN-DISCLOSURE-POLICY: all reports should be disclosed
 o VULN-DISCLOSURE-POLICY: exclude not installed software
 o VULN-DISCLOSURE-POLICY: minor language polish
 o warnless: drop parts of the `read`/`write` preprocessor hack (Windows)
 o warnless: replace `read()`/`write()` wrapper functions with macros (Windows)
 o windows: drop redundant `curl_wcsdup_callback` callback
 o windows: fixup `fopen()` in `CURLDEBUG` builds
 o windows: reduce/stop loading DLLs at runtime
 o wolfssl: add support for ML_KEM hybrids
 o ws: drop redundant `CURL_EXTERN` from function definitions
 o xfer: manage pause bits


To generate a diff of this commit:
cvs rdiff -u -r1.25 -r1.26 pkgsrc/www/curl/Makefile.common
cvs rdiff -u -r1.217 -r1.218 pkgsrc/www/curl/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/curl/Makefile.common
diff -u pkgsrc/www/curl/Makefile.common:1.25 pkgsrc/www/curl/Makefile.common:1.26
--- pkgsrc/www/curl/Makefile.common:1.25        Thu Jun  5 04:43:21 2025
+++ pkgsrc/www/curl/Makefile.common     Tue Aug 26 15:08:11 2025
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile.common,v 1.25 2025/06/05 04:43:21 adam Exp $
+# $NetBSD: Makefile.common,v 1.26 2025/08/26 15:08:11 leot Exp $
 # used by www/libcurl-gnutls/Makefile
 
-DISTNAME=      curl-8.14.1
+DISTNAME=      curl-8.15.0
 CATEGORIES=    www
 MASTER_SITES=  https://curl.se/download/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/www/curl/distinfo
diff -u pkgsrc/www/curl/distinfo:1.217 pkgsrc/www/curl/distinfo:1.218
--- pkgsrc/www/curl/distinfo:1.217      Thu Jun  5 04:43:21 2025
+++ pkgsrc/www/curl/distinfo    Tue Aug 26 15:08:11 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.217 2025/06/05 04:43:21 adam Exp $
+$NetBSD: distinfo,v 1.218 2025/08/26 15:08:11 leot Exp $
 
-BLAKE2s (curl-8.14.1.tar.xz) = 7e6c55a28e6547b7f0498bbbe6e118437f90d6b543b96e053e84628f882347aa
-SHA512 (curl-8.14.1.tar.xz) = 7f6eae04cc23c50fc41d448aa28dfa59141018009e42c5b1e3f4e0d40c0633460b4e6eec05dfc290f7953671096abfa70a8b5443fccdd3f1be6be32ac10b31d9
-Size (curl-8.14.1.tar.xz) = 2817248 bytes
+BLAKE2s (curl-8.15.0.tar.xz) = a2123041e75ff4326a558bfb7202476bb8bc80e650dabed8fc7b295f1e9615b0
+SHA512 (curl-8.15.0.tar.xz) = d27e316d70973906ac4b8d2c280f7e99b7528966aa1220c13a38ed45fca2ed6bbde54b8a9d7bed9e283171b92edb621f7b95162ef7d392e6383b0ee469de3191
+Size (curl-8.15.0.tar.xz) = 2773156 bytes