Robuta

Documentation for the missing package manager for macOS (or Linux).

When an option name is used in text, this script no longer outputs the short plus long version in the manpage output. It makes the text much more readable....

Since this function returns allocated resources there is probably at least a theoretical risk this can return NULL. Pointed out by ZeroPath

CMake 3.18 was released on 2020-07-15. It enables using (and/or dropping workarounds) for these features: LTO support, better performance and pkg-config...

Reported-by: Joshua Rogers

The struct field thus does not depend on the presence of it

If a non-compliant amount of bytes is received, the function would return error without free. Reported-by: Joshua Rogers

The transfer loop used to check the socket and if no poll events were seen, triggered a "DATA_IDLE" event into the filters to let them schedule...

Nov 5, 2025 - Copilot coding agent is our asynchronous, autonomous background agent. When Copilot coding agent finishes its work, it updates the body of its pull request...

Nov 25, 2024 - Presented by Caterina Curti and Chris Williams at DPE Summit 2024, an event developed and hosted by Gradle.

The 'ma' and 'persist' keywords should be considered per list entry, not once per header. Expand test 1654 to verify such headers Reported-by:...

Nov 25, 2018 - Washington DC has made GitHub the authoritative digital source for DC laws.

All Windows platforms support it. It was permanently enabled with most build methods. The exception is autotools where it is enabled by default, with an option...

From lib/h to lib/w. part 1: 47a1ab2 #19764 part 2: 86b3464 #19800 https://github.com/curl/curl/pull/19811/files?w=1

Use &= ~authused in SASL_CANCEL (was ^=) to actually remove the offending mechanism and avoid re-enabling a disabled mech on retry.

Since it isn't linked and users might not understand what it refers to. Ref: #18755

Summary jQuery has followed the following logic for selector handling for ages: Modify the selector to adhere to scoping rules jQuery mandates. Try qSA on the...

ldap_get_dn() can return NULL on error Reported-by: Joshua Rogers

Make sure this is not a surprise

Fixes: #8361 This PR extends Windows long path support (paths > 260 characters) to file operations using CreateFile API, particularly for getting and...

contrib - Public and user contributed website content

For printf()ing the message to show.

No callers of this function checked the return code, meaning failures are not lethal == failf is wrong, and it can just as well return void.

Throughput is more difficult to improve than for example cycle time, since it reflects the team's overall situation rather than just the process.

Batch size measures how much work is bundled up in a change. Swarmia offers tools for evaluating pull request batch size by looking at the total amount of...

Pointed out by ZeroPath

A probably unnecessary precaution but since the field sizes are 16 bit in the protocol this makes sure to fail if they would ever be larger as that would go...

Turns out the signal handler on Windows still wasn't signal safe after the previous round of fix. There is an open() call made from there, and open happens...

As router.cancel() is deprecated, you can now get the same functionality with router.cancelAll({ async: false }).

@sanchezzzhak if is good, I'll add the other devices and improve OS detection in this PR.

Found via -Wformat-signedness: docs/examples/sessioninfo.c: In function 'wrfu': docs/examples/sessioninfo.c:75:53: error: field precision specifier...

In schannel_acquire_credential_handle(), fInCert (if opened) is not properly closed when the cert type check fails. This PR fixes it.

gwpath will be accessed later when generating pathbuffer. Check the return value of curl_url_get for gwpath to catch potential memory error in time.

curl_easy_strerror(result) was called before result was assigned. Reported in Joshua's sarif data

Resolves: #9441 I signed CLA The title of the pull request describes an issue it addresses If changes are extensive, then there is a sequence of easily...

It cannot actually return an error, so the parent function does not need to check for error and have an exit path that cannot be reached. Pointed out by...

Also: sync newlines between the two threaded examples.

Reported-by: Stanislav Fort (Aisle Research)

You can ask Copilot to create a pull request from many places, including GitHub Issues, the agents panel, Copilot Chat, the GitHub CLI, and agentic coding...

Follow-up to 45438c8 #18823

Nov 1, 2023 - Creating PRs is easy. Creating good ones takes effort. Reviewing them, though, that’s a whole different story. Here are a few things to keep in mind when...

Check the easy handles magic in calls to curl_easy_getinfo(). In Curl_close() clear the magic after DNS shutdown since we'd like to see tracing for this....

Recently someone submitted a great pull request to one of my repositories, but before I could merge it, a commenter gave them bad advice and

Made a new script for Ticketbleed, a vuln that was announced within the last several hours. This branch also makes a convenience change to tls.lua that can be...

Jul 12, 2018 - Install the Jenkins Git plug-in to easily accomplish Jenkins Git integration. In this tutorial, we'll use a Jenkins GitHub pull request to demonstrate how to...

Reported-by: Joshua Rogers

nsock_iod_set_hostname is accessible in nse code, but I could not find a knob to use it with ncat. This patch adds --ssl-servername to ncat. With this patch,...

fix CURLcode vs. LDAP result code confusion. Return LDAP_NO_MEMORY when Curl_create_sspi_identity() fails, since it can only return CURLE_OUT_OF_MEMORY as...

Bumps minimist from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted...

Description Adds the Occitan language, talked in South France, North Spain, Monaco and North Italy. It's based on the translation of PeerTube Specific...

Ref: #3316 (comment) Follow-up to ea4ba6d #18803 Follow-up to 558814e

This just adds a script to decode any unencrypted BIG-IP cookies in the response. See this support article for information on the encoding scheme:...

Pull Request for Issue #46333 . Summary of Changes Don't use the data-nested attribute when features articles are selected. Testing Instructions Make a few...

Fixes #902. What was happening The macOS app starts the gateway via a launchd LaunchAgent and configures StandardOutPath/StandardErrorPath to...

nghttp2 always consumes the memory, but be safe in case it ever decideds to not to. Fixes J2 Reported in Joshua's sarif data

find_ssl_filter used while(cf && cf->next) and skipped the last node. If the SSL filter was last, channel binding lookup failed and we returned...

This PR fixes three robustness issues in the HTTP/3 (ngtcp2/nghttp3) path: Stream leak on submit failure After successfully opening a QUIC bidi stream, if...

This PR adds TLS support to rdp-enum-encryption. The value that it adds is that it enables determining the RDP protocol version against servers that require...

Follow-up to 0513f9f #18645

Replace char *dest[1] with a proper char dest[1] array in cpool_bundle. This removes undefined behavior from memcpy (writing past the declared object) while...

use cmake_path() to query filenames, with CMake 3.20 or upper. https://cmake.org/cmake/help/v4.1/command/cmake_path.html#query use...

Sync format more with the rest of the Find modules. Cherry-picked from #18932 w/o sp https://github.com/curl/curl/pull/18957/files?w=1

Diagnose cycle time issues, decrease review time and improve pull request workflow with Swarmia's pull request insights.

drop x-hacks for curl internal variables and certain autotools ones that do not hold custom values. make x-hacks consistently use "x$var" =...

Create filters to automatically exclude specific pull requests from all Swarmia metrics at the team and organization levels, or exclude individual pull...

It's defined in lib/curl_setup_once.h which is always included before the duplicate definition in src/tool_cfgable.h. Delete the latter. Follow-up to...

To match the rest of the codebase. Follow-up to 548d8a8 Cherry-picked from #18660

It was not necessary. Its only purpose was to know if an upload is done, and that information is already available elsewhere.

Also renamed the struct field to 'h1hdr' from 'scratch' to better say what its purpose is.

remove assertions that are unnecessary lookup stream after assertions

http2-upload: use fstat() to query file length to fix TOCTOU. ftpuploadresume: fix checking sscanf() return value. Follow-up to b4922b1 #18564

The ld linker is sensitive to this, and did not find libcurl symbol with the order before this patch. Seen with mingw-w64 gcc. Follow-up to f6ddc1f #18554

Single pass, not enforced. Also: pyspelling.words: drop web page

One webpage for every book ever published! Contribute to internetarchive/openlibrary development by creating an account on GitHub.

The code obtained a pointer resp via Curl_bufq_peek(), but called Curl_bufq_skip() before it would access them in the failf() call. The Curl_bufq_skip() call...

Oct 24, 2025

After updating to nmap7.25BETA2 from nmap7.25BETA1 I started consistently encountering a bad date argument exception when trying to run the smb-ls script on a...

Follow-up to c1e3a76. The previous update missed an addition that also can wrap and cause confusion. Fixing this by calling Curl_pgrsSetDownloadSize() after...

This a patch for a bug in the knx-gateway-discover script and it fails because the function packlen does not exists in Line 96. Nmap version used: Nmap version...

From lib/curl* to lib/g*. With fixes to part 1. part 1: 47a1ab2 #19764 https://github.com/curl/curl/pull/19800/files?w=1

To allow replacing & characters in tests/data/test* files for XML-compliance. Also: document %GT, %LT Follow-up to de49cc8 tests/data: more XML-compliance...

In the logic called for curl_multi_fdset(). File descriptors larger than FD_SETSIZE size are simply ignored, which of course will make things break but at...

Get visibility into your team’s pull requests and the contributing factors behind cycle time: the number of pull requests in progress, batch size, and review...

Cleanup the vtls pinned key matching somewhat. Add a DEBUGF for pinned key hashes that do not match, so we can see in traces what was going on. refs #19489

The kerberos5 library Heimdal is one of three GSS libraries curl support. It has a memory leak triggered by the new test in #18917 and the project seems mostly...

Fast Copy-on-Write branches for every pull request. No more waiting for shared environments or blocked by teammates' changes.

Also: add argument names to prototypes.

The PR addresses two closely related issues in publickey_canauth() in nse_libssh2: An uninitialized pointer was getting freed up, resulting in memory...

Already included directly via hostip.c, and other header users do not use it. Also add comment about why setjmp.h is used. Cherry-picked from #20106