

Fix autoupdate on High Sierra and up by bumping the Sparkle version ( #121, #600).Remove Growl support, notification center is always used ( #387).Fail installation on Windows if UCRT is not installed.Switch to submodules to manage (most of) third-party dependencies.CMake-related improvements (Ninja generator, libappindicator, systemd, Solaris and macOS) ( #72, #96, #117, #118, #133, #191).Fix a number of memory leaks (magnet loading, session shutdown, bencoded data parsing) ( #56).Fix quota support for uClibc-ng 1.0.18+ and DragonFly BSD ( #42, #58, #312).Fix building against OpenSSL 1.1.0+ ( #24).Add support for mbedtls (formely polarssl) and wolfssl (formely cyassl), LibreSSL ( #115, #116, #284, #486, #524, #570).Load CA certs from system store on Windows / OpenSSL ( #446).

Sanitize suspicious path components instead of rejecting them ( #62, #294).Parse session-id header case-insensitively ( #765).Add labels support to libtransmission and transmission-remote ( #822).Make multiscrape limits adaptive ( #837).Update the resume file before running scripts ( #825).Support CIDR-notated blocklists ( #230, #741).


Maintain a "session ID" file (in temporary directory) to better detect whether session is local or remote return the ID as part of "session-get" response (TRAC-5348, #861).Improve completion scripts execution and error handling add support for.Don't switch trackers while announcing (leads to crash) ( #297).Abort handshake if establishing DH shared secret fails (leads to crash) ( #27).Add TCP_FASTOPEN support (should result in slight speedup) ( #184).Announce INT64_MAX as size left if the value is unknown (helps with e.g.Add Peer ID for Xfplay, PicoTorrent, Free Download Manager, Folx, Baidu Netdisk torrent clients ( #256, #285, #355, #363, #386).Set idle seed limit range to 1.40320 (4 weeks tops) in all clients ( #212).Limit the number of incorrect authentication attempts in embedded web server to 100 to prevent brute-force attacks ( #371).Handle "fields" argument in "session-get" RPC request if "fields" array is present in arguments, only return session fields specified otherwise return all the fields as before.Go back to using hash as base name for resume and torrent files (those stored in configuration directory) ( #122).Change TR_CURL_SSL_VERIFY to TR_CURL_SSL_NO_VERIFY and enable verification by default ( #334).Allow the RPC server to listen on an IPv6 address ( #161).
