Our sys admins have flagged the libcurl that ships with Julia for security issues. They are asking us to update to at 8.21.0. I see that it got merged into master a little while ago: curl: New version 8.21.0 - Pull Request #62251 - JuliaLang/julia - GitHub. I don’t see it in any of the “backport” issues, though. Is it possible for that to be backported as well? We were able to build from source and specify a different version of libcurl, but I’d love to keep using juliaup instead.
Those PRs are unlikely to be backportable as-is because they go through multiple intermediate updates, which breaks the automated backport pipeline. If you care about that, opening yourself the PR to do the update may be more effective