cURL 8.0.0

What's new in this version:

Changed:
- Build: remove support for curl_off_t < 8 bytes

Fixed:
- .cirrus.yml: Bump to FreeBSD 13.2
- Aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
- BINDINGS: add Fortran binding
- Build: drop the use of XC_AMEND_DISTCLEAN
- Build: fix stdint/inttypes detection with non-autotools
- Cf-socket: fix handling of remote addr for accepted tcp sockets
- Cf-socket: if socket is already connected, return CURLE_OK
- Cf-socket: use port 80 when resolving name for local bind
- CI: don't run CI jobs if only another CI was changed
- CI: update ngtcp2 and nghttp2 for pytest
- Cmake: delete unused HAVE__STRTOI64
- Cmake: fix enabling LDAPS on Windows
- Cmake: skip CA-path/bundle auto-detection in cross-builds
- Connect: fix time_connect and time_appconnect timer statistics
- Cookie: don't load cookies again when flushing
- Cookie: parse without sscanf()
- Curl.h: require gcc 12.1 for the deprecation magic
- Curl: make -w's %{stderr} use the file set with --stderr
- Curl_path: create the new path with dynbuf
- CURLOPT_PIPEWAIT: allow waited reuse also for subsequent connections
- CURLOPT_PROXY.3: curl+NSS does not handle HTTPS over unix domain socket
- CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
- DEPRECATE: the original legacy mingw version 1
- Doc: fix compiler warning in libcurl.m4
- Docs/cmdline-opts: mark all global options
- Docs/SECURITY-PROCESS.md: updates
- Docs: extend the URL API descriptions
- Docs: note '--data-urlencode' option
- DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
- Easy: remove infof() debug leftover from curl_easy_recv
- Examples/http3.c: use CURL_HTTP_VERSION_3
- Ftp: active mode with SSL, add the filter
- Ftp: add more conditions for connection reuse
- Ftp: allocate the wildcard struct on demand
- Ftp: make the EPSV response parser not use sscanf
- Ftp: replace sscanf for MDTM 213 response parsing
- Ftp: replace sscanf for PASV parsing
- Gssapi: align `gss_OID_desc` to silence ld warnings on macOS ventura
- Headers: make curl_easy_header and nextheader return different buffers
- Hostip: avoid sscanf and extra buffer copies
- Http2: fix error handling during parallel operations
- Http2: fix for http2-prior-knowledge when reusing connections
- Http2: fix handling of RST and GOAWAY to recognize partial transfers
- Http2: fix upload busy loop
- Http: don't send 100-continue for short PUT requests
- Http: fix unix domain socket use in https connects
- Http: rewrite the status line parser without sscanf
- Http_proxy: parse the status line without sscanf
- Idn: return error if the conversion ends up with a blank host
- Krb5: avoid sscanf for parsing
- Lib1560: test parsing URLs with ridiculously large fields
- Lib2305: deal with CURLE_AGAIN
- Lib517: verify time stamps without leading zeroes plus some more
- Lib: silence clang/gcc -Wvla warnings in brotli headers
- Lib: skip Curl_llist_destroy calls
- Libcurl-errors.3: add the CURLHcode errors from curl_easy_header.3
- Libssh2: only set the memory callbacks when debugging
- Libssh2: remove unused variable from libssh2's struct
- Libssh: use dynbuf instead of realloc
- Makefile.mk: delete redundant `HAVE_LDAP_SSL` macro
- Makefile.mk: fix -g option in debug mode
- Mqtt: on send error, return error
- Multi: make multi_perform ignore/unignore signals less often
- Multi: remove PENDING + MSGSENT handles from the main linked list
- Ngtcp2-gnutls.yml: bump to gnutls 3.8.0
- Ngtcp2: fix unwanted close of file descriptor 0
- Page-footer: add explanation for three missing exit codes
- Parsedate: parse strings without using sscanf()
- Parsedate: replace sscanf( for time stamp parsing
- Quic/schannel: fix compiler warnings
- Rand: use arc4random as fallback when available
- Rate.d: single URLs make no sense in --rate example
- RELEASE-PROCEDURE.md: update coming release dates
- Rtsp: avoid sscanf for parsing
- Runtests: use a hash table for server port numbers
- Sectransp: fix compiler warning c89 mixed code/declaration
- Sectransp: make read_cert() use a dynbuf when loading
- Secure-transport: fix recv return code handling
- Select: stop treating POLLRDBAND as an error
- Setopt: move the CURLOPT_CHUNK_DATA pointer to the set struct
- Socket: detect "dead" connections better, e.g. not fit for reuse
- Src: silence wmain() warning for all build methods
- Telnet: only accept option arguments in ascii
- Telnet: parse NEW_ENVIRON without sscanf
- Telnet: parse telnet options without sscanf
- Telnet: parse the WS= argument without sscanf
- Test1470: test socks proxy using unix sockets and connect to https
- Test1960: verify CURL_SOCKOPT_ALREADY_CONNECTED
- Test2600: detect when ALARM_TIMEOUT is in use and adjust
- Test422: verify --next used without a prior URL
- Tests/http: add pytest to GHA and improve tests
- Tests: add `cookies` features
- Tests: add timeout, SLOWDOWN and DELAY keywords to tests
- Tests: fix gnutls-serv check
- Tests: fix MSVC unreachable code warnings in unit tests
- Tests: hack to build most unit tests under cmake
- Tests: HTTP server fixups
- Tests: keep cmake unit tests names in sync
- Tests: make CPPFLAGS common to all unit tests
- Tests: make first.c the same for both lib tests and unit tests
- Tests: support for imaps/pop3s/smtps protocols
- Tests: sync option lists in runtests.pl & its man page
- Tests: test secure mail protocols with explicit SSL requests
- Tests: use AM_CPPFILES to modify flags in unit tests
- Tests: use dynamic ports numbers in pytest suite
- Tool: dump headers even if file is write-only
- Tool: improve --stderr handling
- Tool_getparam: don't add a new node for just --no-remote-name
- Tool_getparam: error if --next is used without a prior URL
- Tool_operate: avoid fclose(NULL) on bad header dump file
- Tool_operate: propagate error codes for missing URL after --next
- Tool_progress: shut off progress meter for --silent in parallel
- Tool_writeout_json. fix the output for duplicate header names
- Transfer: limit Windows SO_SNDBUF updates to once a second
- Url: fix cookielist memleak when curl_easy_reset
- Url: fix logic in connection reuse to deny reuse on "unclean" connections
- Url: fix the SSH connection reuse check
- Url: only reuse connections with same GSS delegation
- Url: remove dummy protocol handler
- Urlapi: '%' is illegal in host names
- Urlapi: avoid mutating internals in getter routine
- Urlapi: parse IPv6 literals without ENABLE_IPV6
- Urlapi: take const args in _dup and _get functions
- Wildcard: remove files and move functions into ftplistparser.c
- Winbuild: fix makefile clean
- Wolfssl: add quic/ngtcp2 detection in cmake, and fix builds
- WolfSSL: ressurect the BIO `io_result`
- Ws: keep the socket non-blocking
- X509asn1.c: use correct format specifier for infof() call
- X509asn1: use plain %x, not %lx, when the arg is an int