diff --git a/Makefile b/Makefile
index 4e69d0489f..2db004ad15 100644
--- a/Makefile
+++ b/Makefile
@@ -1,10 +1,10 @@
ROOT=.
# the latest stable version is:
-STABLE= 8.6.0
-RELDATE = "2024-01-31"
+STABLE= 8.7.0
+RELDATE = "2024-03-27"
# The planned *next* release is:
-NEXTDATE = "2024-03-27"
+NEXTDATE = "2024-05-22"
# generated file with binary package stats
STAT = packstat.t
diff --git a/_changes.html b/_changes.html
index 7d718898e0..d5f0294beb 100644
--- a/_changes.html
+++ b/_changes.html
@@ -60,6 +60,181 @@
#define RELEASEVIDEO(ver,vid)
+
+SUBTITLE(Fixed in 8.7.0 - March 27 2024)
+ Changes:
+
+ Bugfixes:
+
+ BGF ALTSVC.md: correct a typo
+ BGF asyn-ares: fix data race warning
+ BGF asyn-thread: use wakeup_close to close the read descriptor
+ BGF badwords: use hostname, not host name
+ BGF BINDINGS: add mcurl, the python binding
+ BGF bufq: writing into a softlimit queue cannot be partial
+ BGF c-hyper: add header collection writer in hyper builds
+ BGF cd2nroff: gen: make `\>` in input to render as plain '>' in output
+ BGF cd2nroff: remove backticks from titles
+ BGF checksrc.pl: fix handling .checksrc with CRLF
+ BGF cmake: add USE_OPENSSL_QUIC support
+ BGF cmake: add warning for using TLS libraries without 1.3 support
+ BGF cmake: enable `ENABLE_CURL_MANUAL` by default
+ BGF cmake: fix `CURL_WINDOWS_SSPI=ON` with Schannel disabled
+ BGF cmake: fix function description in comment
+ BGF cmake: fix install for older CMake versions
+ BGF cmake: fix libcurl.pc and curl-config library specifications
+ BGF cmdline-docs/Makefile: avoid using a fixed temp file name
+ BGF cmdline-docs: quote and angle bracket cleanup
+ BGF cmdline-opts/_EXITCODES: sync with libcurl-errors
+ BGF cmdline-opts/_VARIABLES.md: improve the description
+ BGF cmdline-opts/_VERSION: provide %VERSION correctly
+ BGF cmdline-opts: shorter help texts
+ BGF configure: add pkg-config support to rustls detection
+ BGF configure: add warning for using TLS libraries without 1.3 support
+ BGF configure: build & install shell completions when enabled
+ BGF configure: do not link with nghttp3 unless necessary
+ BGF configure: Don't build shell completions when disabled
+ BGF configure: Don't make shell completions without perl
+ BGF configure: find libpsl with pkg-config
+ BGF connect.c: fix typo
+ BGF CONTRIBUTE: update the section on documentation format
+ BGF cookie.md: provide an example sending a fixed cookie
+ BGF cookie: if psl fails, reject the cookie
+ BGF curl: exit on config file parser errors
+ BGF curl: make --libcurl output better CURLOPT_*SSLVERSION
+ BGF curl: when allocating variables, add the name into the struct
+ BGF curl_setup.h: add curl_uint64_t internal type
+ BGF curldown: fix email address in Copyright
+ BGF CURLMOPT_MAX*: mention what happens if changed mid-transfer
+ BGF CURLOPT_INTERFACE.md: remove spurious amp, add see-also
+ BGF CURLOPT_POSTQUOTE.md: fix typo
+ BGF CURLOPT_SSL_CTX_FUNCTION.md: no promises of lifetime after return
+ BGF CURLOPT_WRITEFUNCTION.md: typo fix
+ BGF digest: add check for hashing error
+ BGF dist: make sure the http tests are in the tarball
+ BGF DISTROS: add document with distro pointers
+ BGF docs/libcurl: add TLS backend info for all TLS options
+ BGF docs/libcurl: generate PROTOCOLS from meta-data
+ BGF docs: add missing slashes to SChannel client certificate documentation
+ BGF docs: add necessary setup for nghttp3
+ BGF docs: ascii version of manpage without nroff
+ BGF docs: dist curl*.1 and install without perl
+ BGF docs: make curldown do angle brackets like markdown
+ BGF docs: make each libcurl man specify protocol(s)
+ BGF docs: make sure curl.1 is included in dist tarballs
+ BGF docs: update minimal binary size in INSTALL.md
+ BGF docs: use present tense
+ BGF examples: use present tense in comments
+ BGF file: use xfer buf for file:// transfers
+ BGF fopen: fix narrowing conversion warning on 32-bit Android
+ BGF form-string.md: correct the example
+ BGF ftp: do lineend conversions in client writer
+ BGF ftp: fix socket wait activity in ftp_domore_getsock
+ BGF ftp: tracing improvements
+ BGF ftp: treat a 226 arriving before data as a signal to read data
+ BGF gen.pl: make the "manpageification" faster
+ BGF gen: make `\>` in input to render as plain '>' in output
+ BGF getparam: make --ftp-ssl work again
+ BGF GHA/linux: add sysctl trick to work-around GitHub runner issue
+ BGF GIT-INFO: convert to markdown
+ BGF GOVERNANCE: document the core team
+ BGF header.md: remove backslash, make nicer markdown
+ BGF HTTP/2: write response directly
+ BGF http2, http3: return CURLE_PARTIAL_FILE when bytes were received
+ BGF http2: fix push discard
+ BGF http2: memory errors in the push callbacks are fatal
+ BGF http2: minor tweaks to optimize two struct sizes
+ BGF http2: push headers better cleanup
+ BGF http2: remove the third (unused) argument from http2_data_done()
+ BGF HTTP3.md: adjust the OpenSSL QUIC install instructions
+ BGF http: better error message for HTTP/1.x response without status line
+ BGF http: improve response header handling, save cpu cycles
+ BGF http: move headers collecting to writer
+ BGF http: remove stale comment about rewindbeforesend
+ BGF http: separate response parsing from response action
+ BGF http_chunks: fix the accounting of consumed bytes
+ BGF http_chunks: remove unused 'endptr' variable
+ BGF https-proxy: use IP address and cert with ip in alt names
+ BGF hyper: implement unpausing via client reader
+ BGF ipv6.md: mention IPv4 mapped addresses
+ BGF KNOWN_BUGS: POP3 issue when reading small chunks
+ BGF lib1598: fix `CURLOPT_POSTFIELDSIZE` usage
+ BGF lib582: remove code causing warning that is never run
+ BGF lib: add `void *ctx` to reader/writer instances
+ BGF lib: convert Curl_get_line to use dynbuf
+ BGF lib: Curl_read/Curl_write clarifications
+ BGF lib: enhance client reader resume + rewind
+ BGF lib: initialize output pointers to NULL before calling strto[ff,l,ul]
+ BGF lib: keep conn IP information together
+ BGF lib: move 'done' parameter to SingleRequests
+ BGF lib: remove curl_mimepart object when CURL_DISABLE_MIME
+ BGF libcurl-docs: cleanups
+ BGF libcurl-security.md: Active FTP passes on the local IP address
+ BGF libssh/libssh2: return error on too big range
+ BGF MANUAL.md: fix typo
+ BGF mbedtls: fix building when MBEDTLS_X509_REMOVE_INFO flag is defined
+ BGF mbedtls: fix pytest for newer versions
+ BGF mbedtls: properly cleanup the thread-shared entropy
+ BGF mbedtls: use mbedtls_ssl_conf_{min|max}_tls_version
+ BGF md4: include strdup.h for the memdup proto
+ BGF mime: add client reader
+ BGF misc: fix typos in docs and lib
+ BGF mkhelp: simplify the generated hugehelp program
+ BGF mprintf: fix format prefix I32/I64 for windows compilers
+ BGF multi: add xfer_buf to multi handle
+ BGF multi: fix multi_sock handling of select_bits
+ BGF multi: make add_handle free any multi_easy
+ BGF ngtcp2: no recvbuf for stream
+ BGF ntml_wb: fix buffer type typo
+ BGF OpenSSL QUIC: adapt to v3.3.x
+ BGF openssl-quic: check on Windows that socket conv to int is possible
+ BGF openssl-quic: fix BIO leak and Windows warning
+ BGF openssl-quic: fix unity build, casing, indentation
+ BGF OS400: avoid using awk in the build scripts
+ BGF paramhlp: fix CRLF-stripping files with "-d @file"
+ BGF proxy1.0.md: fix example
+ BGF pytest: adapt to API change
+ BGF request: clarify message when request has been sent off
+ BGF rustls: make curl compile with 0.12.0
+ BGF schannel: fix hang on unexpected server close
+ BGF scripts: fix cijobs.pl for Azure and GHA
+ BGF sendf: ignore response body to HEAD
+ BGF setopt: fix check for CURLOPT_PROXY_TLSAUTH_TYPE value
+ BGF setopt: fix disabling all protocols
+ BGF sha512_256: add support for GnuTLS and OpenSSL
+ BGF smtp: fix STARTTLS
+ BGF SPONSORS: describe the basics
+ BGF strtoofft: fix the overflow check
+ BGF test 1541: verify getinfo values on first header callback
+ BGF test1165: improve pattern matching
+ BGF tests: support setting/using blank content env variables
+ BGF TIMER_STARTTRANSFER: set the same for everyone
+ BGF TLS: start shutdown only when peer did not already close
+ BGF TODO: update 13.11 with more information
+ BGF tool_cb_hdr: only parse etag + content-disposition for 2xx
+ BGF tool_getparam: accept a blank -w ""
+ BGF tool_getparam: handle non-existing (out of range) short-options
+ BGF tool_operate: change precedence of server Retry-After time
+ BGF tool_operate: do not set CURLOPT_QUICK_EXIT in debug builds
+ BGF trace-config.md: remove the mutexed options list
+ BGF transfer.c: break receive loop in speed limited transfers
+ BGF transfer: improve Windows SO_SNDBUF update limit
+ BGF urldata: move authneg bit from conn to Curl_easy
+ BGF version: allow building with ancient libpsl
+ BGF vquic-tls: fix the error code returned for bad CA file
+ BGF vtls: fix tls proxy peer verification
+ BGF vtls: revert "receive max buffer" + add test case
+ BGF VULN-DISCLOSURE-POLICY.md: update detail about CVE requests
+ BGF websocket: fix curl_ws_recv()
+ BGF wolfSSL: do not call the stub function wolfSSL_BIO_set_init()
+ BGF write-out.md: clarify error handling details
+
SUBTITLE(Fixed in 8.6.0 - January 31 2024)
diff --git a/_newslog.html b/_newslog.html
index 1bc4f6b67d..2e1cda575f 100644
--- a/_newslog.html
+++ b/_newslog.html
@@ -34,6 +34,20 @@
NCOLE
#endif
+NSUBJ(curl and libcurl 8.7.0)
+NDATE(March 27 2024)
+NCOLS
+
+The curl team proudly presents curl and
+libcurl version 8.7.0. See the
+full changelog.
+
+
+Pay special attention to the security
+vulnerability fixed in this version.
+
+NCOLE
+
NSUBJ(curl and libcurl 8.6.0)
NDATE(January 31 2024)
NCOLS