From: Todd Zullinger <tmz@pobox.com>
Date: Thu, 18 Jun 2026 14:49:53 GMT
Subject: Re: t5563-simple-http-auth failures with v2.55.0-rc0
Message-ID: <20260618144953.l6Ng-dvv@teonanacatl.net>
In-Reply-To: <20260612180203.s2qSgDUs@teonanacatl.net>

Hi,

I wrote:
> Matthew John Cheetham wrote:
>> Thanks for the report. The failure is not in Git, it is a libcurl
>> behaviour change, and there is already an open upstream issue:
>> 
>>   https://github.com/curl/curl/issues/21943
>>   "Negotiate ignored with --anyauth" (Dan Fandrich, 2026-06-10)
>> 
>> Dan also bisected it to the same commit I had locally,
>> `8f71d0fde515` ("creds: hold credentials", curl PR #21548).
> [...]
>> Daniel Stenberg has acknowledged the curl issue but has not yet
>> posted a fix. I will follow curl#21943 and, if the upstream answer
>> is "the new behaviour is intended", come back here with a proposal
>> for what Git should do about `http.emptyAuth` and test 18.
> 
> Excellent.  This is it good hands all around.
[...]
> 
> If there is a curl update, I imagine it will be picked up
> reasonably quickly in Fedora (and elsewhere that was testing
> 8.21.0 release candidates) and there will hopefully be no
> strong need to make any changes on the git side.

I saw Fedora picked up curl-8.21.0-rc3 this morning and
confirmed it resolves the git test failures.  Someone else
has already commented on the upstream curl issue to note
that.

Thanks,

-- 
Todd