[Daniel's week] May 17, 2024

[Daniel Stenberg]

Hello!

Another week is completed. This is some of the things I worked on:

## survey

The annual curl user survey launched this Tuesday [1]. As of this writing, we
have already received over 900 responses which is many more than we received
in total last year. I am thrilled to see this level of attention.

We have received reports about and verified two typos in it. I'm sure there
are more...

## trurl 0.13

I put together a new trurl release, we call it 0.13 [2]. It features a set of
bugfixes, improved command line option parsing and the ability to only set a
component if it was not already set. Small iterative improvements.

A few of the things we have done in trurl recently have pushed me to update
and adjust the libcurl URL API. And even while it is a bit uncomfortable to
build a tool using an API from another library that updates independently, I
think it helps both projects: the libcurl URL API becomes more complete and
powerful and trurl can do more URL magic.

Even if it also means that trurl will not be able to do everything until it
can use a libcurl version that has the latest URL adaptions, it will be a win
over time. And in a few years, nobody will remember about these minor details
from trurl's early days.

## TLS 1.3

We proceeded and merged the PR that documents the fact that starting after May
2025, curl will no longer support TLS libraries that cannot negotiate TLS 1.3
[3]. We draw a line in the sand, and we give everyone a fair amount of time
for the world and everyone to adapt to these coming changes. We raise the bar
another notch for what it means to be supported by curl. Even if/when this
goes through, curl remains supporting a large amount of different TLS
libraries.

Quite timely, we also recently merged support for doing TLS 1.3 using mbedTLS
when using curl.

## renovate

Everyone who monitors the curl GitHub repository traffic noticed a spike in
pull-requests this week when we enable the renovate bot [4]. It is setup to
monitor a lot of CI dependencies and workflows and automatically file PRs to
update them when new versions appear.

## release prep

The next curl release ships next week and I am lining up my ducks. Preparing a
slide set for the video presentation and putting details together for the
release blog post. We have a larger amount of bugfixes than normally this
time, and also not a single secure vulnerability to announce.

curl 8.8.0 ships on Wednesday May 22, 2024.

## dot onion

Because there seems to be some confusions and certainly a few knowledge gaps
out there, I decided to write down the situation for curl, Tor, dot onion and
its use of SOCKS proxies into a blog post [5]. Nothing new if you are a close
follower, but I figure there are too many of those...

## function calls per KLOC

I refreshed the function calls per KLOC graph [6]. First I switched the X and
Y axes to become exactly this graph. Then I added two more plots to show the
total amount of the measure function calls to help put a perspective of what
the relative plots show.

The function calls this graphs shows are ones we have deemed worth trying to
reduce in order to make it harder to do C mistakes in the code.

## curl up presentations

We have added the slides for most of the curl up 2024 presentations over in
the curl website's video section [7].

## Coming up

  - I speak curl in Gothenburg at a private event on May 20
  - we ship curl 8.8.0 on Wednesday
  - I will do a release video presentation on Wednesday on Twitch

## Links

[1] = https://daniel.haxx.se/blog/2024/05/14/curl-user-survey-2024/
[2] = https://github.com/curl/trurl/releases/tag/trurl-0.13
[3] = https://curl.se/dev/deprecate.html
[4] = https://github.com/curl/curl/issues/13630
[5] = https://daniel.haxx.se/blog/2024/05/17/curl-tor-dot-onion-and-socks/
[6] = https://curl.se/dashboard1.html#func-calls
[7] = https://curl.se/docs/videos/


-- 

  / daniel.haxx.se