Upgrade curl to curl-8_22_0 ()

.circleci/config.yml

@@ -24,7 +24,7 @@
 
 # View these jobs in the browser: https://app.circleci.com/pipelines/github/curl/curl
 
-# Use the latest 2.1 version of CircleCI pipeline process engine. See: https://circleci.com/docs/configuration-reference/
+# Use the latest 2.1 version of CircleCI pipeline process engine. See: https://circleci.com/docs/reference/configuration-reference/
 version: 2.1
 
 commands:
@@ -114,7 +114,7 @@ commands:
 executors:
   ubuntu:
     machine:
-      image: ubuntu-2204:2025.09.1
+      image: ubuntu-2204:2026.05.1
 
 jobs:
   basic:
@@ -157,7 +157,7 @@ jobs:
 
   arm:
     machine:
-      image: ubuntu-2204:2025.09.1
+      image: ubuntu-2204:2026.05.1
     resource_class: arm.medium
     steps:
       - checkout
@@ -168,7 +168,7 @@ jobs:
 
   arm-cares:
     machine:
-      image: ubuntu-2204:2025.09.1
+      image: ubuntu-2204:2026.05.1
     resource_class: arm.medium
     steps:
       - checkout

.clang-tidy.yml

@@ -8,12 +8,13 @@
 Checks:
   - clang-analyzer-*
   - -clang-analyzer-optin.performance.Padding
-  - -clang-analyzer-security.ArrayBound  # due to false positives with clang-tidy v21.1.0+
+  - -clang-analyzer-security.ArrayBound  # due to false positives with clang-tidy 21.1.0+
   - -clang-analyzer-security.insecureAPI.bzero  # for FD_ZERO() (seen on macOS)
   - -clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling
   - -clang-diagnostic-nullability-extension
   - bugprone-assert-side-effect
   - bugprone-assignment-in-if-condition
+  - bugprone-assignment-in-selection-statement
   - bugprone-chained-comparison
   - bugprone-dynamic-static-initializers
   - bugprone-invalid-enum-default-initialization
@@ -41,7 +42,7 @@ Checks:
   # readability-enum-initial-value
   # readability-function-cognitive-complexity
   - readability-inconsistent-declaration-parameter-name
-  # readability-misleading-indentation  # too many false positives and oddball/conditional source
+  # readability-misleading-indentation  # too many false positives in oddball/conditional source
   - readability-named-parameter
   # readability-redundant-casting  # false positives in types that change from platform to platform, even with IgnoreTypeAliases: true
   - readability-redundant-control-flow
@@ -56,4 +57,4 @@ CheckOptions:
   misc-header-include-cycle.IgnoredFilesList: 'curl/curl.h'
   readability-inconsistent-declaration-parameter-name.Strict: true
 
-HeaderFilterRegex: '.*'  # Default in v22.1.0+
+HeaderFilterRegex: '.*'  # Default in 22.1.0+

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -15,6 +15,17 @@ body:
 
         **SECURITY RELATED?** Submit here: https://hackerone.com/curl
 
+  - type: markdown
+    attributes:
+      value: "
+        > [!IMPORTANT]
+
+        > If you cannot understand or explain your work without using
+        Artificial Intelligence (AI) then do not file here. Do not paste
+        massive AI generated explanations. We accept the use of AI as long as
+        it is digestible. Please explain your issues or improvements briefly
+        and clearly in your own human voice."
+
   - type: textarea
     id: reproducer
     attributes:

.github/ISSUE_TEMPLATE/docs.yml

@@ -14,6 +14,17 @@ body:
 
         Only file documentation bugs here! Ask questions on the mailing lists https://curl.se/mail/
 
+  - type: markdown
+    attributes:
+      value: "
+        > [!IMPORTANT]
+
+        > If you cannot understand or explain your work without using
+        Artificial Intelligence (AI) then do not file here. Do not paste
+        massive AI generated explanations. We accept the use of AI as long as
+        it is digestible. Please explain your issues or improvements briefly
+        and clearly in your own human voice."
+
   - type: textarea
     id: source
     attributes:

.github/labeler.yml

@@ -19,6 +19,10 @@
 # patterns, they must be joined with commas to a single string surrounded by
 # braces. For example: '{lib/**,src/**}'.
 #
+# Note that the labelercheck.sh script is sensitive to the specific formatting
+# of this file; strictly follow the established template when adding new
+# patterns.
+#
 # See https://github.com/actions/labeler/ for documentation on this file.
 ---
 
@@ -39,8 +43,11 @@ authentication:
           - any-glob-to-all-files: "{\
               CMake/FindGSS.cmake,\
               CMake/FindLibgsasl.cmake,\
+              docs/cmdline-opts/httpsig*,\
+              docs/internals/CREDENTIALS.md,\
               docs/libcurl/opts/CURLINFO_HTTPAUTH*,\
               docs/libcurl/opts/CURLINFO_PROXYAUTH*,\
+              docs/libcurl/opts/CURLOPT_HTTPSIG*,\
               docs/libcurl/opts/CURLOPT_KRB*,\
               docs/libcurl/opts/CURLOPT_SASL*,\
               docs/libcurl/opts/CURLOPT_SERVICE_NAME*,\
@@ -49,10 +56,14 @@ authentication:
               docs/libcurl/opts/CURLOPT_XOAUTH*,\
               lib/*gssapi*,\
               lib/*ntlm*,\
+              lib/creds.*,\
+              lib/curl_ntlm*,\
               lib/curl_sasl.*,\
               lib/http_aws*,\
               lib/http_digest.*,\
+              lib/http_httpsig.*,\
               lib/http_negotiate.*,\
+              lib/http_ntlm.*,\
               lib/vauth/**\
               }"
 
@@ -98,6 +109,7 @@ cmake:
               CMake/**,\
               docs/INSTALL-CMAKE.md,\
               lib/curl_config-cmake.h.in,\
+              scripts/cmakeopts.sh,\
               tests/cmake/**\
               }"
 
@@ -129,16 +141,20 @@ connecting & proxies:
               docs/libcurl/opts/CURLOPT_SOCKS*,\
               docs/libcurl/opts/CURLOPT_TCP*,\
               docs/libcurl/opts/CURLOPT_TIMEOUT*,\
+              lib/cf-https-connect.*,\
+              lib/cf-ip-happy.*,\
               lib/cf-*proxy.*,\
               lib/cf-socket.*,\
               lib/cfilters.*,\
               lib/conncache.*,\
               lib/connect.*,\
               lib/http_proxy.*,\
               lib/if2ip.*,\
-              lib/noproxy.*,\
+              lib/proxy.*,\
               lib/socks.*,\
+              lib/vquic/*-proxy.*,\
               src/tool_cb_soc.*,\
+              tests/http/*proxy*,\
               tests/http/*socks*,\
               tests/server/socksd.c\
               }"
@@ -165,6 +181,7 @@ cryptography:
               docs/CIPHERS.md,\
               docs/RUSTLS.md,\
               docs/libcurl/opts/CURLOPT_EGDSOCKET*,\
+              lib/*ed25519*,\
               lib/*sha256*,\
               lib/*sha512*,\
               lib/curl_hmac.*,\
@@ -195,7 +212,6 @@ documentation:
               .github/scripts/verify-synopsis.pl,\
               **/*.md,\
               **/*.txt,\
-              **/*.1,\
               CHANGES.md,\
               docs/**,\
               LICENSES/**,\
@@ -211,6 +227,8 @@ documentation:
               # negative matches
               - '!**/CMakeLists.txt'
               - '!**/Makefile.am'
+              - '!tests/**/data*.txt'
+              - '!tests/**/requirements*.txt'
 
 FTP:
   - all:
@@ -295,11 +313,13 @@ HTTP/3:
               .github/workflows/http3-linux.yml,\
               CMake/FindNGHTTP3.cmake,\
               CMake/FindNGTCP2.cmake,\
+              docs/cmdline-opts/proxy-http3.md,\
               docs/HTTP3.md,\
               docs/examples/http3*,\
               lib/vquic/**,\
               tests/http3-server.pl,\
-              tests/nghttpx.conf\
+              tests/nghttpx.conf,\
+              tests/http/*httpsrr*\
               }"
 
 IMAP:
@@ -371,16 +391,14 @@ name lookup:
               docs/libcurl/opts/CURLOPT_DOH*,\
               docs/libcurl/opts/CURLOPT_RESOLVE*,\
               lib/*addrinfo*,\
-              lib/asyn*,\
-              lib/cf-dns.*,\
               lib/curl_gethostname.*,\
-              lib/dns*,\
-              lib/doh*,\
-              lib/host*,\
               lib/idn*,\
               lib/socketpair*,\
               lib/thrdpool.*,\
               lib/thrdqueue.*,\
+              lib/vdns/*,\
+              tests/http/testenv/dnsd.*,\
+              tests/http/*httpsrr*,\
               tests/http/*resolve.py,\
               tests/server/dnsd.c,\
               tests/server/resolve.c\
@@ -458,6 +476,7 @@ tests:
   - all:
       - changed-files:
           - any-glob-to-any-file:
+              - 'docs/tests/**'
               - 'tests/**'
 
 TFTP:
@@ -548,9 +567,9 @@ Windows:
               lib/curlx/fopen.*,\
               lib/curlx/multibyte.*,\
               lib/curlx/winapi.*,\
+              lib/libcurl.def,\
               lib/vtls/schannel*,\
               m4/curl-schannel.m4,\
               projects/Windows/**,\
-              src/tool_doswin.c,\
-              lib/libcurl.def\
+              src/tool_doswin.c\
               }"

.github/pull_request_template.md

@@ -0,0 +1,8 @@
+<!--
+        IMPORTANT:
+        If you cannot understand or explain your work without using
+        Artificial Intelligence (AI) then do not file here. Do not paste
+        massive AI generated explanations. We accept the use of AI as long as
+        it is digestible. Please explain your issues or improvements briefly
+        and clearly in your own human voice.
+-->