libcurl: update to 8.12.1

3 files changed, 191 insertions, 175 deletions

diff --git a/libs/libcurl/docs/COPYING b/libs/libcurl/docs/COPYING
index 5f6dc0aef2..40fabe1a30 100644
--- a/libs/libcurl/docs/COPYING
+++ b/libs/libcurl/docs/COPYING
@@ -1,6 +1,6 @@
 COPYRIGHT AND PERMISSION NOTICE

 

-Copyright (c) 1996 - 2024, Daniel Stenberg, <daniel@haxx.se>, and many

+Copyright (c) 1996 - 2025, Daniel Stenberg, <daniel@haxx.se>, and many

 contributors, see the THANKS file.

 

 All rights reserved.

diff --git a/libs/libcurl/docs/RELEASE-NOTES b/libs/libcurl/docs/RELEASE-NOTES
index 3a3787bb36..334493c8ae 100644
--- a/libs/libcurl/docs/RELEASE-NOTES
+++ b/libs/libcurl/docs/RELEASE-NOTES
@@ -1,99 +1,85 @@
-curl and libcurl 8.11.1

+curl and libcurl 8.12.1

 

- Public curl releases:         263

- Command line options:         266

+ Public curl releases:         265

+ Command line options:         267

  curl_easy_setopt() options:   306

- Public functions in libcurl:  94

- Contributors:                 3298

+ Public functions in libcurl:  96

+ Contributors:                 3344

 

 This release includes the following changes:

 

 

 This release includes the following bugfixes:

 

- o build: fix ECH to always enable HTTPS RR [35]

- o build: fix MSVC UWP builds [32]

- o build: omit certain deps from `libcurl.pc` unless found via `pkg-config` [27]

- o build: use `_fseeki64()` on Windows, drop detections [41]

- o cmake: do not echo most inherited `LDFLAGS` to config files [55]

- o cmake: drop cmake args list from `buildinfo.txt` [8]

- o cmake: include `wolfssl/options.h` first [53]

- o cmake: remove legacy unused IMMEDIATE keyword [21]

- o cmake: restore cmake args list in `buildinfo.txt` [26]

- o cmake: set `CURL_STATICLIB` for static lib when `SHARE_LIB_OBJECT=OFF` [64]

- o cmake: sync GSS config code with other deps [28]

- o cmake: typo in comment

- o cmake: work around `ios.toolchain.cmake` breaking feature-detections [37]

- o cmakelint: fix to check root `CMakeLists.txt` [36]

- o cmdline/ech.md: formatting cleanups [13]

- o configure: add FIXMEs for disabled pkg-config references

- o configure: do not echo most inherited `LDFLAGS` to config files [31]

- o configure: replace `$#` shell syntax [25]

- o cookie: treat cookie name case sensitively [4]

- o curl-rustls.m4: keep existing `CPPFLAGS`/`LDFLAGS` when detected [40]

- o curl.h: mark two error codes as obsolete [19]

- o curl: --continue-at is mutually exclusive with --no-clobber [51]

- o curl: --continue-at is mutually exclusive with --range [61]

- o curl: --continue-at is mutually exclusive with --remove-on-error [50]

- o curl: --test-duphandle in debug builds runs "duphandled" [6]

- o curl: do more command line parsing in sub functions [71]

- o curl: rename struct var to fix AIX build [24]

- o curl: use realtime in trace timestamps [52]

- o curl_multi_socket_all.md: soften the deprecation warning [56]

- o CURLOPT_PREREQFUNCTION.md: add result code on failure [23]

- o digest: produce a shorter cnonce in Digest headers [70]

- o DISTROS: update Alt Linux links

- o dmaketgz: use --no-cache when building docker image [66]

- o docs: bring back ALTSVC.md and HSTS.md [76]

- o docs: document default `User-Agent` [57]

- o docs: suggest --ssl-reqd instead of --ftp-ssl [62]

- o duphandle: also init netrc [3]

- o ECH: enable support for the AWS-LC backend [5]

- o hostip: don't use the resolver for FQDN localhost [45]

- o http_negotiate: allow for a one byte larger channel binding buffer [63]

- o http_proxy: move dynhds_add_custom here from http.c [18]

- o KNOWN_BUGS: setting a disabled option should return CURLE_NOT_BUILT_IN [74]

- o krb5: fix socket/sockindex confusion, MSVC compiler warnings [22]

- o lib: fixes for wolfSSL OPENSSL_COEXIST [73]

- o libssh: use libssh sftp_aio to upload file [47]

- o libssh: when using IPv6 numerical address, add brackets [43]

- o macos: disable gcc `availability` workaround as needed [7]

- o mbedtls: call psa_crypt_init() in global init [2]

- o mime: fix reader stall on small read lengths [65]

- o mk-ca-bundle: remove CKA_NSS_SERVER_DISTRUST_AFTER conditions [39]

- o mprintf: fix the integer overflow checks [44]

- o multi: add clarifying comment for wakeup_write() [9]

- o multi: fix callback for `CURLMOPT_TIMERFUNCTION` not being called again when... [48]

- o netrc: address several netrc parser flaws [17]

- o netrc: support large file, longer lines, longer tokens [14]

- o nghttp2: use custom memory functions [1]

- o OpenSSL: improvde error message on expired certificate [59]

- o openssl: remove three "Useless Assignments" [72]

- o openssl: stop using SSL_CTX_ function prefix for our functions [20]

- o os400: Fix IBMi builds [33]

- o os400: Fix IBMi EBCDIC conversion of arguments [34]

- o pytest: add test for use of CURLMOPT_MAX_HOST_CONNECTIONS [60]

- o rtsp: check EOS in the RTSP receive and return an error code [49]

- o schannel: remove TLS 1.3 ciphersuite-list support [54]

- o setopt: fix CURLOPT_HTTP_CONTENT_DECODING [15]

- o setopt: fix missing options for builds without HTTP & MQTT [10]

- o show-headers.md: clarify the headers are saved with the data [58]

- o socket: handle binding to "host!<ip>" [16]

- o socketpair: fix enabling `USE_EVENTFD` [30]

- o strtok: use namespaced `strtok_r` macro instead of redefining it [29]

- o tests: add the ending time stamp in testcurl.pl

- o tests: re-enable 2086, and 472, 1299, 1613 for Windows [38]

- o TODO: consider OCSP stapling by default [11]

- o tool_formparse: remove use of sscanf() [68]

- o tool_getparam: parse --localport without using sscanf [67]

- o tool_getpass: fix UWP `-Wnull-dereference` [46]

- o tool_getpass: replace `getch()` call with `_getch()` on Windows [42]

- o tool_urlglob: parse character globbing range without sscanf [69]

- o vtls: fix compile warning when ALPN is not available [12]

+ o all: remove FIXME and TODO comments [55]

+ o asyn-thread: fix build with `CURL_DISABLE_SOCKETPAIR` [47]

+ o asyn-thread: fix HTTPS RR crash [10]

+ o asyn-thread: fix the returned bitmask from Curl_resolver_getsock [18]

+ o asyn-thread: survive a c-ares channel set to NULL [52]

+ o build: add tool_hugehelp.c into IBMi build [40]

+ o checksrc.pl: warn on FIXME/TODO comments

+ o cmake/Find: set `<Modulename>_FOUND` for compatibility when found via `pkg-config` [22]

+ o cmake: add integration tests, run them in CI [21]

+ o cmake: always reference OpenSSL and ZLIB via imported targets [24]

+ o cmake: avoid unnecessary `-L` for implicit link dirs [11]

+ o cmake: drop `LDAP_DEPRECATED=1` macro, to sync with autotools [23]

+ o cmake: fix `HAVE_GETHOSTBYNAME_R_*` detections with `CURL_WERROR=ON` [57]

+ o cmake: fix to detect `HAVE_OPENSSL_SRP` in MSVC UWP builds [62]

+ o cmake: fix/add missing feature detections for Windows/MS-DOS [58]

+ o cmake: initialize variables where missing [27]

+ o cmake: lib order fixes for picky linkers (e.g. binutils `ld`) [26]

+ o cmake: normalize before matching paths with syspaths [30]

+ o cmake: respect `GNUTLS_CFLAGS` when detected via `pkg-config` [38]

+ o cmake: respect `GNUTLS_LIBRARY_DIRS` in `libcurl.pc` and `curl-config` [39]

+ o cmake: save a line with `CMAKE_C_IMPLICIT_LINK_DIRECTORIES` exclusion [32]

+ o cmake: tidy up string append and list prepend syntax [28]

+ o configure/cmake: check for realpath [19]

+ o configure/cmake: set asyn-rr a feature only if httpsrr is enabled [42]

+ o content_encoding: #error on too old zlib [2]

+ o curl_global_sslset.md: Add SSL backend names [50]

+ o CURLOPT_SSH_KNOWNHOSTS.md: strongly recommend using this [41]

+ o CURLSHOPT_SHARE.md: adjust for the new SSL session cache [6]

+ o docs: better explain multi-part byte range behavior [4]

+ o docs: use valid example domain names [54]

+ o generate.bat: remove curl_get_line.c from the curlx file list [20]

+ o header.md: mention `Authorization:` and `Cookie:` special treatment [43]

+ o imap: TLS upgrade fix [14]

+ o INTERNALS: fix c-ares, as we actually support 1.6.0 or later [37]

+ o ldap: drop support for legacy Novell LDAP SDK [25]

+ o lib: include necessary headers for `inet_ntop`/`inet_pton` [8]

+ o lib: silence LibreSSL collision warning on non-MSVC Windows [51]

+ o libssh2: comparison is always true because rc <= -1 [56]

+ o libssh2: raise lowest supported version to 1.2.8 [3]

+ o libssh: drop support for libssh older than 0.9.0 [33]

+ o libssh: silence `-Wconversion` with a cast (Windows 32-bit) [7]

+ o netrc: return code cleanup, fix missing file error [45]

+ o openssl-quic: ignore ciphers for h3 [1]

+ o openssl: fix out of scope variables in goto [12]

+ o pop3: TLS upgrade fix [15]

+ o runtests: fix the disabling of the memory tracking [29]

+ o runtests: quote commands to support paths with spaces [35]

+ o scache: add magic checks [31]

+ o smb: silence `-Warray-bounds` with gcc 13+ [9]

+ o smtp: TLS upgrade fix [16]

+ o SPONSORS.md: clarify that we don't promise goods or services [5]

+ o test1516: avoid failure due to spaces in path [36]

+ o test2080: simplify, avoid the null byte

+ o tests: fix test 558, 1330 for MSVC, allow TrackMemory with MSVC in cmake [53]

+ o tidy-up: make per-file `ARRAYSIZE` macros global as `CURL_ARRAYSIZE` [48]

+ o tool_cfgable: sort struct fields by size, use bitfields for booleans [17]

+ o tool_getparam: add "TLS required" flag for each such option [44]

+ o tool_progress: fix percent output of large parallel transfers [61]

+ o tool_ssls: switch to tool-specific get_line function [34]

+ o verbose.md: mention how carriage-return might occur in headers [49]

+ o vquic: make the "disable GSO" use infof, not failf [65]

+ o vtls: fix multissl-init [60]

+ o vtsl: eliminate 'data->state.ssl_scache' [59]

+ o wakeup_write: make sure the eventfd write sends eight bytes [46]

+ o wolfssl: silence compiler warning (MSVC 2019), simplify existing [13]

 

 This release includes the following known bugs:

 

- See docs/KNOWN_BUGS (https://curl.se/docs/knownbugs.html)

+ See https://curl.se/docs/knownbugs.html

 

 For all changes ever done in curl:

 

@@ -101,101 +87,86 @@ For all changes ever done in curl:
 

 Planned upcoming removals include:

 

+ o Support for the msh3 HTTP/3 backend

+ o The winbuild build system

  o TLS libraries not supporting TLS 1.3

 

- See https://curl.se/dev/deprecate.html for details

+ See https://curl.se/dev/deprecate.html

 

 This release would not have looked like this without help, code, reports and

 advice from friends like these:

 

-  Alexis Savin, Andrew Ayer, Andrew Kirillov, Andy Fiddaman, Ben Greear,

-  Bo Anderson, Brendon Smith, chemodax, Dan Fandrich, Daniel Engberg,

-  Daniel Pouzzner, Daniel Stenberg, Dan Rosser, delogicsreal on github,

-  dengjfzh on github, Ethan Everett, Florian Eckert, galen11 on github,

-  Harmen Stoppels, Harry Sintonen, henrikjehgmti on github, hiimmat on github,

-  Jacob Champion, Jeroen Ooms, Jesus Malo Poyatos, jethrogb on github,

-  Kai Pastor, Logan Buth, Maarten Billemont, marcos-ng on github, Moritz,

-  newfunction on hackerone, Nicolas F., Peter Kokot, Peter Marko, Ray Satiro,

-  renovate[bot], Samuel Henrique, Stefan Eissing, SuperStormer on github,

-  Tal Regev, Thomas, tinyboxvk, tkzv on github, tranzystorekk on github,

-  Viktor Szakats, Vladislavs Sokurenko, wxiaoguang on github, Wyatt O'Day,

-  xiaofeng, Yoshimasa Ohno

-  (51 contributors)

+  Aaron Deadman, Andrei Korshikov, Andrew Kirillov, arlt on github,

+  Christian Schmitz, CueXXIII on Github, Dan Fandrich, Daniel Stenberg,

+  deliciouslytyped on github, Fay Stegerman, Jan Engelhardt,

+  jethrogb on github, Kai Pastor, Marcel Raad, Michael Kaufmann,

+  mschroeder-fzj on github, nono303 on github, Philip Heiduck, qhill,

+  Ralf A. Timmermann, Ray Satiro, renovate[bot], Stefan Eissing, Terence Eden,

+  thisisgk on github, Viktor Szakats, zzq1015 on github

+  (27 contributors)

 

 References to bug reports and discussions on issues:

 

- [1] = https://curl.se/bug/?i=15527

- [2] = https://curl.se/bug/?i=15500

- [3] = https://curl.se/bug/?i=15496

- [4] = https://curl.se/bug/?i=15492

- [5] = https://curl.se/bug/?i=15499

- [6] = https://curl.se/bug/?i=15504

- [7] = https://curl.se/bug/?i=15508

- [8] = https://curl.se/bug/?i=15501

- [9] = https://curl.se/bug/?i=15600

- [10] = https://curl.se/bug/?i=15634

- [11] = https://curl.se/bug/?i=15483

- [12] = https://curl.se/bug/?i=15515

- [13] = https://curl.se/bug/?i=15506

- [14] = https://curl.se/bug/?i=15513

- [15] = https://curl.se/bug/?i=15511

- [16] = https://curl.se/bug/?i=15553

- [17] = https://curl.se/bug/?i=15586

- [18] = https://curl.se/bug/?i=15672

- [19] = https://curl.se/bug/?i=15538

- [20] = https://curl.se/bug/?i=15673

- [21] = https://curl.se/bug/?i=15661

- [22] = https://curl.se/bug/?i=15585

- [23] = https://curl.se/bug/?i=15542

- [24] = https://curl.se/bug/?i=15580

- [25] = https://curl.se/bug/?i=15584

- [26] = https://curl.se/bug/?i=15563

- [27] = https://curl.se/bug/?i=15469

- [28] = https://curl.se/bug/?i=15545

- [29] = https://curl.se/bug/?i=15549

- [30] = https://curl.se/bug/?i=15561

- [31] = https://curl.se/bug/?i=15533

- [32] = https://curl.se/bug/?i=15657

- [33] = https://curl.se/bug/?i=15566

- [34] = https://curl.se/bug/?i=15570

- [35] = https://curl.se/bug/?i=15648

- [36] = https://curl.se/bug/?i=15565

- [37] = https://curl.se/bug/?i=15557

- [38] = https://curl.se/bug/?i=15644

- [39] = https://curl.se/bug/?i=15547

- [40] = https://curl.se/bug/?i=15546

- [41] = https://curl.se/bug/?i=15525

- [42] = https://curl.se/bug/?i=15642

- [43] = https://curl.se/bug/?i=15522

- [44] = https://curl.se/bug/?i=15699

- [45] = https://curl.se/bug/?i=15676

- [46] = https://curl.se/bug/?i=15638

- [47] = https://curl.se/bug/?i=15625

- [48] = https://curl.se/bug/?i=15627

- [49] = https://curl.se/bug/?i=15624

- [50] = https://curl.se/bug/?i=15645

- [51] = https://curl.se/bug/?i=15645

- [52] = https://curl.se/bug/?i=15614

- [53] = https://curl.se/bug/?i=15620

- [54] = https://hackerone.com/reports/2792484

- [55] = https://curl.se/bug/?i=15617

- [56] = https://curl.se/mail/lib-2024-11/0029.html

- [57] = https://curl.se/bug/?i=15608

- [58] = https://curl.se/bug/?i=15605

- [59] = https://curl.se/bug/?i=15612

- [60] = https://curl.se/bug/?i=15494

- [61] = https://curl.se/bug/?i=15646

- [62] = https://curl.se/bug/?i=15658

- [63] = https://curl.se/bug/?i=15685

- [64] = https://curl.se/bug/?i=15695

- [65] = https://curl.se/bug/?i=15688

- [66] = https://curl.se/bug/?i=15689

- [67] = https://curl.se/bug/?i=15681

- [68] = https://curl.se/bug/?i=15683

- [69] = https://curl.se/bug/?i=15682

- [70] = https://curl.se/bug/?i=15653

- [71] = https://curl.se/bug/?i=15680

- [72] = https://curl.se/bug/?i=15679

- [73] = https://curl.se/bug/?i=15650

- [74] = https://curl.se/bug/?i=15472

- [76] = https://curl.se/bug/?i=15705

+ [1] = https://curl.se/bug/?i=16232

+ [2] = https://curl.se/bug/?i=16202

+ [3] = https://curl.se/bug/?i=16199

+ [4] = https://curl.se/bug/?i=16139

+ [5] = https://curl.se/bug/?i=16196

+ [6] = https://curl.se/bug/?i=16245

+ [7] = https://curl.se/bug/?i=16194

+ [8] = https://curl.se/bug/?i=16184

+ [9] = https://curl.se/bug/?i=16187

+ [10] = https://curl.se/bug/?i=16169

+ [11] = https://curl.se/bug/?i=16233

+ [12] = https://curl.se/bug/?i=16246

+ [13] = https://curl.se/bug/?i=16230

+ [14] = https://curl.se/bug/?i=16213

+ [15] = https://curl.se/bug/?i=16208

+ [16] = https://curl.se/bug/?i=16189

+ [17] = https://curl.se/bug/?i=16211

+ [18] = https://curl.se/bug/?i=16227

+ [19] = https://curl.se/bug/?i=16209

+ [20] = https://curl.se/bug/?i=16248

+ [21] = https://curl.se/bug/?i=16126

+ [22] = https://curl.se/bug/?i=16153

+ [23] = https://curl.se/bug/?i=16146

+ [24] = https://curl.se/bug/?i=16207

+ [25] = https://curl.se/bug/?i=16176

+ [26] = https://curl.se/bug/?i=16182

+ [27] = https://curl.se/bug/?i=16198

+ [28] = https://curl.se/bug/?i=16144

+ [29] = https://curl.se/bug/?i=16226

+ [30] = https://curl.se/bug/?i=16191

+ [31] = https://curl.se/bug/?i=16240

+ [32] = https://curl.se/bug/?i=16243

+ [33] = https://curl.se/bug/?i=16200

+ [34] = https://curl.se/bug/?i=16201

+ [35] = https://curl.se/bug/?i=16220

+ [36] = https://curl.se/bug/?i=16223

+ [37] = https://curl.se/bug/?i=16221

+ [38] = https://curl.se/bug/?i=16242

+ [39] = https://curl.se/bug/?i=16190

+ [40] = https://curl.se/bug/?i=16214

+ [41] = https://curl.se/bug/?i=16204

+ [42] = https://curl.se/bug/?i=16183

+ [43] = https://curl.se/bug/?i=16160

+ [44] = https://curl.se/bug/?i=16159

+ [45] = https://curl.se/bug/?i=16163

+ [46] = https://curl.se/bug/?i=16237

+ [47] = https://curl.se/bug/?i=16179

+ [48] = https://curl.se/bug/?i=16111

+ [49] = https://curl.se/bug/?i=16285

+ [50] = https://curl.se/bug/?i=16256

+ [51] = https://curl.se/bug/?i=16273

+ [52] = https://curl.se/bug/?i=16216

+ [53] = https://curl.se/bug/?i=16289

+ [54] = https://curl.se/bug/?i=16269

+ [55] = https://curl.se/bug/?i=16283

+ [56] = https://curl.se/bug/?i=16268

+ [57] = https://curl.se/bug/?i=16282

+ [58] = https://curl.se/bug/?i=16278

+ [59] = https://curl.se/bug/?i=16261

+ [60] = https://curl.se/bug/?i=16253

+ [61] = https://curl.se/bug/?i=16284

+ [62] = https://curl.se/bug/?i=16293

+ [65] = https://curl.se/bug/?i=16294

diff --git a/libs/libcurl/docs/THANKS b/libs/libcurl/docs/THANKS
index 46b2897cf2..1a37d7737c 100644
--- a/libs/libcurl/docs/THANKS
+++ b/libs/libcurl/docs/THANKS
@@ -13,6 +13,7 @@
 3eka on github

 5533asdg on github

 8U61ife on github

+9cel

 a1346054 on github

 Aaro Koskinen

 Aaron Oneal

@@ -181,6 +182,7 @@ Andrei Benea
 Andrei Bica

 Andrei Cipu

 Andrei Karas

+Andrei Korshikov

 Andrei Kurushin

 Andrei Neculau

 Andrei Rybak

@@ -258,6 +260,7 @@ arainchik on github
 Archangel_SDY on github

 Arjan van de Ven

 Arkadiusz Miskiewicz

+arlt on github

 Armel Asselin

 Arnaud Compan

 Arnaud Ebalard

@@ -272,6 +275,7 @@ Arve Knudsen
 Arvid Norberg

 arvids-kokins-bidstack on github

 asavah on github

+Asger Hautop Drewsen

 Ashish Shukla

 Ashwin Metpalli

 Ask Bjørn Hansen

@@ -303,6 +307,7 @@ Balakrishnan Balasubramanian
 Balazs Kovacsics

 balikalina on Github

 Balint Szilakszi

+baranyaib90 on github

 Barry Abrahamson

 Barry Pollard

 Bart Whiteley

@@ -326,6 +331,7 @@ Ben Noordhuis
 Ben Van Hof

 Ben Voris

 Ben Winslow

+Ben Zanin

 Benau on github

 Benbuck Nason

 Benjamin Gerard

@@ -392,6 +398,7 @@ Brad Fitzpatrick
 Brad Forschinger

 Brad Harder

 Brad Hards

+Brad House

 Brad King

 Brad Spencer

 Bradford Bruce

@@ -446,6 +453,7 @@ Byrial Jensen
 Cajus Pollmeier

 Caleb Raitto

 Calvin Buckley

+Calvin Ruocco

 calvin2021y on github

 Cameron Blomquist

 Cameron Cawley

@@ -532,6 +540,7 @@ Christophe Demory
 Christophe Dervieux

 Christophe Legry

 Christopher Conroy

+Christopher Dannemiller

 Christopher Degawa

 Christopher Head

 Christopher Palow

@@ -589,6 +598,7 @@ Cris Bailiff
 Cristian Greco

 Cristian Morales Vega

 Cristian Rodríguez

+CueXXIII on Github

 Curt Bogmine

 Cynthia Coan

 Cyril B

@@ -663,6 +673,7 @@ Daniel Woelfel
 Daphne Luong

 Dario Nieuwenhuis

 Dario Weißer

+Darren Banfi

 Darryl House

 Darshan Mody

 Darío Hereñú

@@ -730,6 +741,7 @@ dbrowndan on github
 dEajL3kA on github

 Deal(一线灵)

 dekerser on github

+deliciouslytyped on github

 delogicsreal on github

 dengjfzh on github

 Dengminwen

@@ -744,6 +756,7 @@ Dennis Clarke
 Dennis Felsing

 dependabot[bot]

 Derek Higgins

+Derek Huang

 Derzsi Dániel

 Desmond O. Chang

 destman on github

@@ -809,6 +822,7 @@ Dominik Thalhammer
 Dominique Leuenberger

 Don J Olmstead

 Dongliang Mu

+Donguk Kim

 Dorian Craps

 Doron Behar

 Doug Kaufman

@@ -832,6 +846,7 @@ Dustin Howett
 Dusty Mabe

 Duy Phan Thanh

 Dwarakanath Yadavalli

+dwickr

 Dylam De La Torre

 Dylan Anthony

 Dylan Ellicott

@@ -964,6 +979,7 @@ farazrbx on github
 Farzin on github

 Fata Nugraha

 Fawad Mirza

+Fay Stegerman

 FC Stegerman

 fds242 on github

 Federico Bianchi

@@ -1036,6 +1052,7 @@ Gaelan Steele
 galen11 on github

 Gambit Communications

 Ganesh Kamath

+Ganesh Viswanathan

 gaoxingwang on github

 Garrett Holmstrom

 Garrett Squire

@@ -1180,6 +1197,7 @@ Henrik Storner
 henrikjehgmti on github

 Henry Ludemann

 Henry Roeland

+Hermes Zhang

 Herve Amblard

 HexTheDragon

 hgdagon on github

@@ -1220,6 +1238,7 @@ Ian Spence
 Ian Turner

 Ian Wilkes

 iAroc on github

+IcedCoffeee on github

 iconoclasthero

 icy17 on github

 Ignacio Vazquez-Abrams

@@ -1426,6 +1445,7 @@ Jimmy Gaussen
 Jiri Dvorak

 Jiri Hruska

 Jiri Jaburek

+Jiri Stary

 Jishan Shaikh

 Jiwoo Park

 Jiří Bok

@@ -1657,6 +1677,7 @@ Kevin Reed
 Kevin Roth

 Kevin Ryan

 Kevin Smith

+Kevin Sun

 Kevin Ushey

 Kim Minjoong

 Kim Rinnewitz

@@ -1694,6 +1715,7 @@ Kristian Köhntopp
 Kristian Mide

 Kristiyan Tsaklev

 Kristoffer Gleditsch

+Kuan-Wei Chiu

 Kunal Chandarana

 Kunal Ekawde

 Kurt Fankhauser

@@ -1752,6 +1774,7 @@ Lenaic Lefever
 Lenny Rachitsky

 Leo Neat

 Leon Breedt

+Leon Timmermans

 Leon Winter

 Leonardo Rosati

 Leonardo Taccari

@@ -1848,6 +1871,7 @@ Mamoru Tasaka
 Mamta Upadhyay

 Mandy Wu

 Manfred Schwarb

+Manuel Einfalt

 Manuel Massing

 Manuj Bhatia

 Marc Aldorasi

@@ -1931,6 +1955,7 @@ Martin Galvan
 Martin Gartner

 Martin Hager

 Martin Halle

+Martin Harrigan

 Martin Hedenfalk

 Martin Howarth

 Martin Jansen

@@ -1993,6 +2018,7 @@ Matthias Naegler
 Matthieu Baerts

 Mattias Fornander

 Matus Uzak

+mauke

 Maurice Barnum

 Mauricio Scheffer

 Mauro Iorio

@@ -2060,6 +2086,7 @@ Michael O'Farrell
 Michael Olbrich

 Michael Osipov

 Michael Schmid

+Michael Schuster

 Michael Smith

 Michael Stapelberg

 Michael Steuer

@@ -2107,6 +2134,7 @@ Mike Revi
 Mike Tzou

 Mikhail Kuznetsov

 Miklos Nemeth

+Milon Renatus

 Miloš Ljumović

 Mingliang Zhu

 Mingtao Yang

@@ -2123,6 +2151,7 @@ Mohammad AlSaleh
 Mohammad Hasbini

 Mohammadreza Hendiani

 Mohammed Naser

+Mohammed Sadiq

 Mohun Biswas

 momala454 on github

 Momoka Yamamoto

@@ -2138,6 +2167,7 @@ Mostyn Bramley-Moore
 Moti Avrahami

 MrdUkk on github

 MrSorcus on github

+mschroeder-fzj on github

 Muhammad Herdiansyah

 Muhammad Hussein Ammari

 Muhammed Yavuz Nuzumlalı

@@ -2146,6 +2176,7 @@ musvaage on github
 Muz Dima

 Myk Taylor

 n0name321 on github

+na-trium-144 on github

 Nach M. S.

 Nagai H

 Nao Yonashiro

@@ -2169,6 +2200,8 @@ Nehal J Wani
 neheb on github

 Neil Bowers

 Neil Dunbar

+Neil Horman

+Neil Johari

 Neil Kolban

 Neil Spring

 nekopsykose on github

@@ -2207,6 +2240,7 @@ Nicolas Morey-Chaisemartin
 Nicolas Noben

 Nicolas Sterchele

 Nicolás Ojeda Bär

+Nicolás San Martín

 Niels Martignène

 Niels van Tongeren

 Nikita Schmidt

@@ -2230,6 +2264,7 @@ nobedee on github
 NobodyXu on github

 Nobuhiro Ban

 Nodak Sodak

+nono303 on github

 nopjmp on github

 Norbert Frese

 Norbert Kett

@@ -2450,13 +2485,16 @@ Priyanka Shah
 ProceduralMan on github

 promptfuzz_ on hackerone

 Pronyushkin Petr

+prpr19xx on Github

 Przemysław Tomaszewski

 pszemus on github

 pszlazak on github

 puckipedia on github

 Puneet Pawaia

 Pēteris Caune

+qhill

 qiandu2006 on github

+Qriist on github

 Quagmire

 Quanah Gibson-Mount

 Quentin Balland

@@ -2483,11 +2521,13 @@ RainRat
 Raito Bezarius

 Rajesh Naganathan

 Rajkumar Mandal

+Ralf A. Timmermann

 Ralf S. Engelschall

 ralfjunker on github

 Ralph Beckmann

 Ralph Langendam

 Ralph Mitchell

+Ralph Sennhauser

 Ram Krushna Mishra

 Ramiro Garcia

 rampageX on github

@@ -2924,6 +2964,8 @@ Tadej Vengust
 Tae Hyoung Ahn

 Taiyu Len

 Tal Regev

+Tamir Duberstein

+Tamás Bálint Misius

 Taneli Vähäkangas

 Tanguy Fautre

 Taras Kushnir

@@ -2935,6 +2977,7 @@ tbugfinder on github
 Ted Lyngmo

 Teemu Yli-Elsila

 Temprimus

+Terence Eden

 Terri Oda

 Terry Wu

 thanhchungbtc on github

@@ -2945,6 +2988,7 @@ Theo
 Theodore Dubois

 therealhirudo on github

 Thiago Suchorski

+thisisgk on github

 tholin on github

 Thomas

 Thomas Bouzerar

@@ -3236,6 +3280,7 @@ Yehoshua Hershberg
 ygthien on github

 Yi Huang

 Yifei Kong

+Yihang Zhou

 Yiming Jing

 Yingwei Liu

 yiyuaner on github