.. _changes:

--------------
Recent changes
--------------

.. ifconfig:: not is_a_released_version

   .. include:: ../unreleased.rst

Version 9.2
-----------

.. contents::
   :local:
   :depth: 1

Summary of changes
~~~~~~~~~~~~~~~~~~

We highlight some of the most impactful changes here:

- :ref:`Reenable support for `native_compute`<92native>` when compiled with OCaml 5.
  As it relies on some architecture-specific code, only some x86 setups are supported for now
- Records in `Type` and `Prop`, with only fields in `SProp`,
  can now have :ref:`primitive projections but without eta conversion<92etarecord>`.
- Implicit elaboration of :ref:`elimination constraints <92elimconstraints>`
- :ref:`Parsing of elimination constraints<92elimparsing>` in prenex polymorphic definitions
  as well as in constraints declaration :g:`Constraint s1 -> s2.`
- :ref:`Induction hypotheses are now generated for nested arguments<92nested>` provided
  an `All` predicate, and a theorem to prove it, have been registered with
  the keys `All` and `AllForall`.
- Add a `Scheme All` command to :ref:`generate the All predicate<92nestedscheme>` and its theorem
  for inductive types used for the eliminators of nested inductive types
- Tactics such as :tacn:`induction` find eliminators (like `nat_rect`)
  through the :cmd:`Register Scheme` table (which is automatically populated by :cmd:`Scheme` and automatic scheme declarations)
  instead of by name (the lookup by name remains for now for backward compatibility)
- attribute :attr:`schemes` to :ref:`control automatic scheme declaration<92scheme>`.
- :ref:`Goal names can be automatically generated<92goalnames>` for :tacn:`induction`,
  :tacn:`destruct` and :tacn:`eapply` by using the :flag:`Generate Goal Names` flag
- congruence tactics now :ref:`handle primitive ints, floats and strings<92congruence>`
- :cmd:`Ltac2 Custom Entry` making it possible to define :ref:`more complex<92ltac2>` :cmd:`Ltac2 Notation`\s
  and many other additions to Ltac2 (see below for details).
- :flag:`Printing Fully Qualified` to :ref:`print all names<92printfully>` (global references, modules,
  module types, universes, etc) using fully qualified paths
- :ref:`Generalized universe polymorphism flag<92mlapi>` structure (ML API change)

See the `Changes in 9.2.0`_ section below for the detailed list of changes,
including potentially breaking changes marked with **Changed**.
Rocq's `reference manual for 9.2 <https://rocq-prover.org/doc/v9.2/refman>`_,
documentation of the 9.2 `corelib <https://rocq-prover.org/doc/v9.2/corelib>`__
and `developer documentation of the 9.2 ML API <https://rocq-prover.org/doc/v9.2/api>`_
are also available.

Théo Zimmermann, with help from Jason Gross and Gaëtan Gilbert, maintained
`coqbot <https://github.com/rocq-prover/bot>`__ used to run Rocq's CI and other
pull request management tasks.

Jason Gross maintained the `bug minimizer <https://github.com/JasonGross/coq-tools>`_
and its `automatic use through coqbot <https://github.com/rocq-prover/rocq/wiki/Coqbot-minimize-feature>`_.

Ali Caglayan, Emilio Jesús Gallego Arias, Rudi Grinberg and Rodolphe Lepigre maintained the
`Dune build system for OCaml and Coq/Rocq <https://github.com/ocaml/dune/>`_
used to build the Rocq Prover itself and many Rocq projects.

The `opam repository <https://github.com/coq/opam>`_ for Rocq packages has been maintained by
Guillaume Claret, Guillaume Melquiond, Karl Palmskog, Matthieu Sozeau
and Enrico Tassi with contributions from many users. The up-to-date list
of packages is `available on the Rocq website <https://rocq-prover.org/packages>`_.

Erik Martin-Dorel maintained the
`Rocq Docker images <https://hub.docker.com/r/rocq/rocq-prover>`_ and
the `docker-keeper <https://gitlab.com/erikmd/docker-keeper>`_ compiler
used to build and keep those images up to date (note that the tool is not Rocq specific).
Erik Martin-Dorel and Théo Zimmermann maintained the
`docker-coq-action <https://github.com/coq-community/docker-coq-action>`_
container action (which is applicable to any opam project hosted on GitHub).

Cyril Cohen, Vincent Laporte, Pierre Roux and Théo Zimmermann
maintained the `Nix toolbox <https://github.com/coq-community/coq-nix-toolbox>`_.
The docker-coq-action and the Nix toolbox are used by many Rocq projects for continuous integration.

Rocq 9.2 was made possible thanks to the following 35 reviewers:
Eric Bistal, Dan Christensen, Cyril Cohen, Pierre Corbineau, Pierre Courtieu,
Julien Cretin, Tomás Díaz, Andres Erbsen, Jian Fang, Jim Fehrle, Gaëtan Gilbert,
Jason Gross, Hugo Herbelin, Emilio Jesús Gallego Arias, Ralf Jung, Jan-Oliver Kaiser,
Thomas Lamiaux, Olivier Laurent, Rodolphe Lepigre, Yann Leray,
Kenji Maillard, Guillaume Melquiond, Guillaume Munch-Maccagnoni, Karl Palmskog,
Clément Pit-Claudel, Pierre-Marie Pédrot, Pierre Rousselin, Pierre Roux, Radosław Rowicki,
Matthieu Sozeau, Nicolas Tabareau, Enrico Tassi, Li-yao Xia, Théo Zimmermann.

See the `Rocq Team <https://rocq-prover.org/rocq-team>`_ page for
more details on Rocq's development teams.

The 43 contributors to the 9.2 version are:
Charles C Norton, Ilan, Jean Caspar, quarkcool, Lionel Blatter, Mathis Bouverot,
Jeffrey Chang, Owen Conoly, Quentin Corradi, Julien Cretin, Tomás Díaz, Andres Erbsen,
Jim Fehrle, Gaëtan Gilbert, Jason Gross, Dario Halilovic, Hugo Herbelin,
Emilio Jesús Gallego Arias, Jan-Oliver Kaiser, Thomas Lamiaux, Rodolphe Lepigre,
Yann Leray, Gregory Malecha, Bruno Martinez, Guillaume Melquiond, Jan Midtgaard,
Patrick Nicodemus, Charles Norton, Clément Pit-Claudel, Pierre-Marie Pédrot,
Johann Rosain, Dan Rostovtsev, Pierre Rousselin, Pierre Roux, Matthieu Sozeau, Nicolas Tabareau,
Enrico Tassi, Laurent Thery, Quentin Vermande, Théo Winterhalter, Théo Zimmermann.

The Rocq community at large helped improve this new version via
the GitHub issue and pull request system,
the `Discourse forum <https://discourse.rocq-prover.org>`__ and the
`Rocq Zulip chat <https://rocq-prover.zulipchat.com>`_.

Nicolas Tabareau is the release manager of Rocq 9.2.
This release is the result of 486 merged PRs, closing 80 issues.

| Nantes, March 2026
| Nicolas Tabareau for the Rocq development team

Changes in 9.2.0
~~~~~~~~~~~~~~~~

.. contents::
   :local:


Kernel
^^^^^^

.. _92etarecord:

- **Changed:**
  Records in `Type` and `Prop`, with only fields in `SProp`,
  can now have primitive projections but without eta conversion.
  (`#21438 <https://github.com/rocq-prover/rocq/pull/21438>`_,
  by Tomas Diaz).
- **Changed:**
  Error messages for module signature mismatches and "with Definition"
  constraint failures are now more detailed
  (`#21465 <https://github.com/rocq-prover/rocq/pull/21465>`_,
  fixes `#21464 <https://github.com/rocq-prover/rocq/issues/21464>`_,
  by Jason Gross).

  .. _92native:

- **Changed:**
  Reenable support for `native_compute` when compiled with OCaml 5. As it relies on some architecture-specific code, only some x86 setups are supported for now
  (`#21540 <https://github.com/rocq-prover/rocq/pull/21540>`_,
  fixes `#13940 <https://github.com/rocq-prover/rocq/issues/13940>`_,
  by Guillaume Melquiond).
- **Removed:**
  the ability to define monomorphic sorts within sections
  (`#21451 <https://github.com/rocq-prover/rocq/pull/21451>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  Fix the detection and treatment of uniform arguments of nested fixpoints
  (`#21684 <https://github.com/rocq-prover/rocq/pull/21684>`_,
  fixes `#21682 <https://github.com/rocq-prover/rocq/issues/21682>`_
  and `#21683 <https://github.com/rocq-prover/rocq/issues/21683>`_
  and `#21701 <https://github.com/rocq-prover/rocq/issues/21701>`_,
  by Yann Leray).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Added:**
  when a reference is not found in the current environment, the error suggests similar names
  (`#20662 <https://github.com/rocq-prover/rocq/pull/20662>`_,
  by Gaëtan Gilbert).

  .. _92elimconstraints:

- **Added:**
  implicit elaboration of elimination constraints
  (`#21417 <https://github.com/rocq-prover/rocq/pull/21417>`_,
  by Tomas Diaz).

Notations
^^^^^^^^^

- **Changed:**
  :cmd:`Abbreviation` no longer adds a printing rule when a surrounding module is imported
  (i.e. when it would need to print a qualified name). :attr:`global` can be used
  to retrieve the previous behavior
  (`#20816 <https://github.com/rocq-prover/rocq/pull/20816>`_,
  fixes `#20668 <https://github.com/rocq-prover/rocq/issues/20668>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :cmd:`custom entry <Declare Custom Entry>` names are now qualified.
  A compatibility layer provides deprecated access with unqualified names without needing to import their module, as long as it is unambiguous
  (`#20857 <https://github.com/rocq-prover/rocq/pull/20857>`_,
  by Gaëtan Gilbert).
- **Changed:**
  the ``notation-incompatible-prefix`` no longer warns about
  common prefixes followed by terminal symbols. For instance
  ``"x #0`` and ``"x #0 #1"`` are not incompatible since our
  parser isn't exactly LL1, considering successive terminal
  symbols as a single token. Note that this change has an
  impact on the default levels of such notations
  (`#21159 <https://github.com/rocq-prover/rocq/pull/21159>`_,
  by Pierre Roux).
- **Deprecated:**
  use of "Notation" keyword for :cmd:`abbreviations <Abbreviation>`,
  use "Abbreviation" instead
  (`#20855 <https://github.com/rocq-prover/rocq/pull/20855>`_,
  by Pierre Roux).
- **Added:**
  a warning for non closed notations at level 0
  (`#21107 <https://github.com/rocq-prover/rocq/pull/21107>`_,
  by Pierre Roux).

Tactics
^^^^^^^

- **Changed:**
  tactics such as :tacn:`induction` find eliminators (like `nat_rect`)
  through the :cmd:`Register Scheme` table (which is automatically populated by :cmd:`Scheme` and automatic scheme declarations)
  instead of by name (the lookup by name remains for now for backward compatibility)
  (`#20614 <https://github.com/rocq-prover/rocq/pull/20614>`_,
  by Gaëtan Gilbert).
- **Changed:**
  type class hints without hypotheses used via functor
  applications are applied with their type from the module
  type rather than the module instance
  (`#21193 <https://github.com/rocq-prover/rocq/pull/21193>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  the implicit call to `auto with *` in intuition solver, that
  was deprecated since 8.17
  (`#21129 <https://github.com/rocq-prover/rocq/pull/21129>`_,
  fixes `#4949 <https://github.com/rocq-prover/rocq/issues/4949>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  the `destauto` tactic, which was deprecated in 8.20
  (`#21172 <https://github.com/rocq-prover/rocq/pull/21172>`_,
  fixes `#11537 <https://github.com/rocq-prover/rocq/issues/11537>`__,
  by Pierre-Marie Pédrot).
- **Deprecated:**
  tactics such as :tacn:`induction` finding eliminators (like `nat_rect`) by name
  instead of through the :cmd:`Register Scheme` table (which is automatically populated by :cmd:`Scheme` and automatic scheme declarations)
  (`#20614 <https://github.com/rocq-prover/rocq/pull/20614>`_,
  by Gaëtan Gilbert).
- **Deprecated:**
  dynamically generating schemes when needed in tactics.
  This was mostly used for rewriting and equality schemes of the registered equality type
  (`eq` when using the Corelib) for tactics such as :tacn:`discriminate`.
  These schemes are now explicitly declared for `eq` in the Corelib
  (`#21245 <https://github.com/rocq-prover/rocq/pull/21245>`_,
  by Gaëtan Gilbert).

  .. _92congruence:

- **Added:**
  congruence tactics now handle primitive ints, floats and strings
  (`#20810 <https://github.com/rocq-prover/rocq/pull/20810>`_,
  fixes `#20011 <https://github.com/rocq-prover/rocq/issues/20011>`_,
  by Pierre-Marie Pédrot).

  .. _92nested:

- **Added:**
  Induction hypotheses are now generated for nested arguments provided
  an `All` predicate, and a theorem to prove it, have been registered with
  the keys `All` and `AllForall`.
  (`#21356 <https://github.com/rocq-prover/rocq/pull/21356>`_,
  by Thomas Lamiaux).

  .. _92nestedscheme:

- **Added:**
  Add a `Scheme All` command to generate the `All` predicate and its theorem
  for inductive types used for the eliminators of nested inductive types
  (`#21429 <https://github.com/rocq-prover/rocq/pull/21429>`_,
  by Thomas Lamiaux).
- **Fixed:**
  ``setoid_rewrite`` now correctly picks up ``Params`` instances when rewriting in ``Type``
  (`#20045 <https://github.com/rocq-prover/rocq/pull/20045>`_,
  fixes `#20044 <https://github.com/rocq-prover/rocq/issues/20044>`_,
  by quarkcool).
- **Fixed:**
  a sequence `Import M. Remove Hints h. Import M.` where `M` exports hints `h` would not re-add `h` after its removal
  (`#20698 <https://github.com/rocq-prover/rocq/pull/20698>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Canonical structure resolution in tactic unification in presence of
  universe polymorphism (`#20780 <https://github.com/rocq-prover/rocq/pull/20780>`_,
  fixes `#20779 <https://github.com/rocq-prover/rocq/issues/20779>`_,
  by Matthieu Sozeau).
- **Fixed:**
  rewrite hints are controlled by the `hints` import category
  (`#21108 <https://github.com/rocq-prover/rocq/pull/21108>`_,
  fixes `#21106 <https://github.com/rocq-prover/rocq/issues/21106>`_,
  by Gaëtan Gilbert).
- **Changed:**
  The unification algorithm (evarconv) may need to unfold its two input terms to succeed. Now, when one of the terms is an evar, it instantiates it with the folded version of the other term. In other words, tactics now unfold less than before, which may change the behavior of subsequent tactics.
  (`#19987 <https://github.com/rocq-prover/rocq/pull/19987>`_,
  by Quentin Vermande).
- **Changed:**
  Hypotheses of generated induction schemes use the constructor name instead of `f`, `f0`, etc
  (`#20813 <https://github.com/rocq-prover/rocq/pull/20813>`_,
  by Dario Halilovic).

  .. _92goalnames:

- **Added:**
  Goal names can be automatically generated for :tacn:`induction`,
  :tacn:`destruct` and :tacn:`eapply` by using the :flag:`Generate Goal Names` flag
  (`#20809 <https://github.com/rocq-prover/rocq/pull/20809>`_,
  by Dario Halilovic).
- **Fixed:**
  :n:`autorewrite*` was failing if any of the possible rewritings
  failed to solve its generated side-conditions
  (`#21803 <https://github.com/rocq-prover/rocq/pull/21803>`_,
  fixes `#7672 <https://github.com/rocq-prover/rocq/issues/7672>`_
  and `#4976 <https://github.com/rocq-prover/rocq/issues/4976>`_,
  by Matthieu Sozeau).

Ltac2 language
^^^^^^^^^^^^^^

- **Changed:**
  :cmd:`Ltac2 Notation` without an explicit level puts the notation at level `1` instead of `5`
  when it starts with a string which is an identifier.
  Various notations have consequently changed level (e.g. `apply`).
  (`#20759 <https://github.com/rocq-prover/rocq/pull/20759>`_,
  fixes `#20616 <https://github.com/rocq-prover/rocq/issues/20616>`_,
  by Gaëtan Gilbert).
- **Changed:**
  well parenthesized notations (`match!`, `lazy_match!`, etc) are now at level `0` instead of `5`,
  and `now` is at level `1` instead of `6` (its argument is still at level `6`)
  (`#20759 <https://github.com/rocq-prover/rocq/pull/20759>`_,
  by Gaëtan Gilbert).
- **Deprecated:**
  use of "Notation" keyword for :cmd:`abbreviations <Ltac2 Abbreviation>`,
  use "Abbreviation" instead
  (`#20855 <https://github.com/rocq-prover/rocq/pull/20855>`_,
  by Pierre Roux).
- **Deprecated:**
  syntactic classes parsing terms (`constr`, `lconstr`, etc.)
  taking more than one :n:`@scope_key` argument without qualifying it with `delimiters`
  (e.g. `constr(type, function)` should be `constr(delimiters(type, function))`
  but a single argument like `constr(type)` is not deprecated).
  See :n:`@ltac2_constr_synclass_arg`
  (`#21285 <https://github.com/rocq-prover/rocq/pull/21285>`_,
  by Gaëtan Gilbert).

  .. _92ltac2:

- **Added:**
  :cmd:`Ltac2 Custom Entry` making it possible to define more complex :cmd:`Ltac2 Notation`\s
  (`#20561 <https://github.com/rocq-prover/rocq/pull/20561>`_,
  by Gaëtan Gilbert).
- **Added:**
  ``Ltac2.Reference.equal``
  (`#20794 <https://github.com/coq/coq/pull/20794>`_,
  by Pierre Rousselin).
- **Added:**
  :cmd:`Ltac2 Set` supports :attr:`local` and :attr:`export`
  (the default behaviour of `local` in sections and `export` outside sections has not changed)
  (`#20882 <https://github.com/rocq-prover/rocq/pull/20882>`_,
  fixes `#20879 <https://github.com/rocq-prover/rocq/issues/20879>`_,
  by Gaëtan Gilbert).
- **Added:**
  ``Ltac2.Option.filter``
  (`#21023 <https://github.com/rocq-prover/rocq/pull/21023>`_,
  by Jason Gross).
- **Added:**
  :ref:`syntactic class <syntactic_classes>` `lpreterm` parsing terms
  at precedence level 200 and interpreting them as preterms
  (`#21094 <https://github.com/rocq-prover/rocq/pull/21094>`_,
  by Gaëtan Gilbert).
- **Added:**
  `Ltac2.Message.of_lconstr` to print terms without surrounding parentheses
  (`#21096 <https://github.com/rocq-prover/rocq/pull/21096>`_,
  by Gaëtan Gilbert).
- **Added:**
  module `Ltac2.Constr.Relevance` for APIs about proof relevance annotations
  (`#21162 <https://github.com/rocq-prover/rocq/pull/21162>`_,
  by Gaëtan Gilbert).
- **Added:**
  APIs for module introspection in `Ltac2.Module`
  (`#21178 <https://github.com/rocq-prover/rocq/pull/21178>`_,
  by Gaëtan Gilbert).
- **Added:**
  :ref:`syntactic_classes` parsing terms support parsing at a specific level
  and parsing :ref:`custom-entries`
  (`#21215 <https://github.com/rocq-prover/rocq/pull/21215>`_,
  by Gaëtan Gilbert).
- **Added:**
  `Ltac2.Unification.solve_constraints` (cf :tacn:`solve_constraints`)
  (`#21222 <https://github.com/rocq-prover/rocq/pull/21222>`_,
  by Gaëtan Gilbert).
- **Added:**
  `Ltac2.Constant.print`, `Ltac2.Ind.print`, `Ltac2.Constructor.print`,
  `Ltac2.Proj.print`, `Ltac2.Ident.print`, `Ltac2.Message.of_preterm`
  (`#21239 <https://github.com/rocq-prover/rocq/pull/21239>`_,
  by Gaëtan Gilbert).
- **Added:**
  APIs `Control.print_err` and `Control.print_exn` which may be used to customize printing of Ltac2 errors
  (`#21252 <https://github.com/rocq-prover/rocq/pull/21252>`_,
  by Gaëtan Gilbert).
- **Added:**
  :cmd:`Ltac2 Set` supports attribute :attr:`global`
  (`#21264 <https://github.com/rocq-prover/rocq/pull/21264>`_,
  by Gaëtan Gilbert).
- **Added:**
  :flag:`Ltac2 Backtrace Compact` to reduce the output of :flag:`Ltac2 Backtrace`
  (`#21299 <https://github.com/rocq-prover/rocq/pull/21299>`_,
  by Gaëtan Gilbert).
- **Added:**
  `Message.of_exninfo` and `Control.current_exninfo`
  (`#21334 <https://github.com/rocq-prover/rocq/pull/21334>`_,
  fixes `#21312 <https://github.com/rocq-prover/rocq/issues/21312>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  associativity of `::` in Ltac2 `match` patterns (:n:`@tac2pat2`)
  (`#21054 <https://github.com/rocq-prover/rocq/pull/21054>`_,
  fixes `#21045 <https://github.com/rocq-prover/rocq/issues/21045>`_,
  by Gaëtan Gilbert).

SSReflect
^^^^^^^^^

- **Changed:**
  rewrite pattern selection algorithm made more robust in face of changes
  to implicit arguments shape. This changes can result in a different
  pattern selection in some corner cases.
  The option `Set SsrMatching LegacyFoUnif` can be used to obtain the
  previous behavior when repairing scripts
  (`#20707 <https://github.com/rocq-prover/rocq/pull/20707>`_,
  fixes `#16763 <https://github.com/rocq-prover/rocq/issues/16763>`_,
  by Enrico Tassi with help from Georges Gonthier, Pierre Roux and
  Quentin Vermande).
- **Changed:**
  level of notation ``'Under[ _ ]`` in `ssrunder.v` from 8 to 0
  (`#21107 <https://github.com/rocq-prover/rocq/pull/21107>`_,
  by Pierre Roux).
- **Changed:**
  level of ``tactic => intro_pattern`` notation to a left-associative
  notation level with higher priority than level 3, rather than being
  repeated in levels 3 (right-associative) and 4 (left-associative)
  (`#21244 <https://github.com/rocq-prover/rocq/pull/21244>`_,
  by Pierre Roux).

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  Default patterns displayed by :cmd:`Print HintDb` now show
  pattern holes using the name from the original theorem
  (e.g. :n:`?n` instead of :n:`?M3135`)
  (`#20827 <https://github.com/rocq-prover/rocq/pull/20827>`_,
  by Jim Fehrle).
- **Changed:**
  :cmd:`Show` and :n:`Show goalnum` now show diffs (if enabled) in rocqtop.
  Added :cmd:`Show Diffs` :n:`goalname` to show diffs for a named goal.
  For emacs support; still no diffs shown for these commands in other
  IDEs
  (`#21103 <https://github.com/rocq-prover/rocq/pull/21103>`_,
  fixes `#20793 <https://github.com/rocq-prover/rocq/issues/20793>`_,
  by Jim Fehrle).
- **Changed:**
  `_rec` schemes are not defined using `_rect` schemes anymore.
  In particular `eq_rec` is not defined using `eq_rect`
  (`#21241 <https://github.com/rocq-prover/rocq/pull/21241>`_,
  by Gaëtan Gilbert).
- **Changed:**
  Generalize :cmd:`Register Scheme` from constants to constants, or inductive types, or constructors
  (`#21326 <https://github.com/rocq-prover/rocq/pull/21326>`_,
  by Thomas Lamiaux).
- **Changed:**
  :cmd:`Derive` names the existential variables it generates according using the name of the constant they will define
  (e.g. `Derive X in X as x` binds `X` to an evar named `?X` instead of an anonymous evar (which would print as `?Goal`))
  (`#21332 <https://github.com/rocq-prover/rocq/pull/21332>`_,
  by Gaëtan Gilbert).

  .. _92mlapi:

- **Changed:**
  Generalized universe polymorphism flag structure (ML API change)
  (`#21419 <https://github.com/rocq-prover/rocq/pull/21419>`_,
  by Matthieu Sozeau).
- **Changed:**
  :cmd:`Print Assumptions` now recurses into the types of axioms
  (`#21437 <https://github.com/rocq-prover/rocq/pull/21437>`_,
  fixes `#21436 <https://github.com/rocq-prover/rocq/issues/21436>`_,
  by Jason Gross).
- **Changed:**
  :cmd:`Print Assumptions`, :cmd:`Print Opaque Dependencies`, :cmd:`Print
  Transparent Dependencies`, and :cmd:`Print All Dependencies` now accept lists
  of globals instead of single references
  (`#21477 <https://github.com/rocq-prover/rocq/pull/21477>`_,
  by Jason Gross).
- **Removed:**
  flag `Loose Hint Behavior` which appears to have behaved as `Strict` regardless of how it was set for the last few versions
  (`#20698 <https://github.com/rocq-prover/rocq/pull/20698>`_,
  by Gaëtan Gilbert).
- **Deprecated:**
  implicitly creating hint databases when declaring hints.
  (`#21114 <https://github.com/rocq-prover/rocq/pull/21114>`_,
  fixes `#4117 <https://github.com/rocq-prover/rocq/issues/4117>`_,
  by Pierre-Marie Pédrot).
- **Deprecated:**
  creating implicitly rewrite hint databases through the
  :cmd:`Hint Rewrite` command. One must now do it explicitly
  through :cmd:`Create Rewrite HintDb`
  (`#21206 <https://github.com/rocq-prover/rocq/pull/21206>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  Additional documentation of Create HintDb (discriminated), proof search
  tactic performance, matching process and hint transparency
  (`#19761 <https://github.com/rocq-prover/rocq/pull/19761>`_,
  by Jim Fehrle).

  .. _92scheme:

- **Added:**
  attribute :attr:`schemes` to control automatic scheme declaration
  (`#21163 <https://github.com/rocq-prover/rocq/pull/21163>`_,
  fixes `#19480 <https://github.com/rocq-prover/rocq/issues/19480>`_,
  by Gaëtan Gilbert).

  .. _92elimparsing:

- **Added:**
  Parsing of elimination constraints in prenex polymorphic definitions
  as well as in constraints declaration :g:`Constraint s1 -> s2.`
  (`#21195 <https://github.com/rocq-prover/rocq/pull/21195>`_,
  by Johann Rosain).
- **Added:**
  a :cmd:`Create Rewrite HintDb` command to explicitly declare
  rewrite hint databases
  (`#21203 <https://github.com/rocq-prover/rocq/pull/21203>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  :cmd:`Scheme Rewriting` to explicitly declare rewriting schemes for a given inductive
  (`#21248 <https://github.com/rocq-prover/rocq/pull/21248>`_,
  by Gaëtan Gilbert).

  .. _92printfully:

- **Added:**
  :flag:`Printing Fully Qualified` to print all names (global references, modules,
  module types, universes, etc) using fully qualified paths
  (`#21443 <https://github.com/rocq-prover/rocq/pull/21443>`_,
  fixes `#11852 <https://github.com/rocq-prover/rocq/issues/11852>`_,
  by Jason Gross).
- **Fixed:**
  Properly test for duplicate names in mutual blocks
  (`#21082 <https://github.com/rocq-prover/rocq/pull/21082>`_,
  fixes `#20766 <https://github.com/rocq-prover/rocq/issues/20766>`_,
  by Yann Leray).
- **Fixed:**
  Fix Derive command to handle dependent types correctly
  (`#21313 <https://github.com/rocq-prover/rocq/pull/21313>`_,
  fixes `#21292 <https://github.com/rocq-prover/rocq/issues/21292>`_,
  by Jason Gross).
- **Fixed:** fallback printing of inductives using
  ``<inductive:Foo:0>`` should be rarer (it should in any case only
  happen rarely from module errors) (`#21473
  <https://github.com/rocq-prover/rocq/pull/21473>`_, by Jason Gross).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Changed:**
  in ``-emacs`` mode, goals are no longer spontaneously printed
  (`#21038 <https://github.com/rocq-prover/rocq/pull/21038>`_,
  fixes `#21035 <https://github.com/rocq-prover/rocq/issues/21035>`_,
  by Pierre Roux).
- **Changed:**
  `rocq compile` does not create empty `.vos` and `.vok` files anymore,
  their creation is left to the makefile generated by `rocq makefile`.
  Other build system may choose to create these empty files at their discretion
  (`#21548 <https://github.com/rocq-prover/rocq/pull/21548>`_,
  by Gaëtan Gilbert).
- **Added:**
  :ref:`rocq doc <rocqdoc>` replaces `@@TITLE@@` with the page title in custom HTML headers
  (`#20907 <https://github.com/rocq-prover/rocq/pull/20907>`_,
  fixes `#2511 <https://github.com/rocq-prover/rocq/issues/2511>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  ``rocq dep`` now handles non .vo dependencies from the ``ROCQPATH``
  environment variable
  (`#20878 <https://github.com/rocq-prover/rocq/pull/20878>`_,
  fixes `#20835 <https://github.com/rocq-prover/rocq/issues/20835>`_,
  by Gaëtan Gilbert).

Corelib
^^^^^^^

- **Changed:**
  Level of ``_~0`` and ``_~1`` reserved notations (used for positive
  numbers) from level 7 to level 1
  (`#17876 <https://github.com/rocq-prover/rocq/pull/17876>`_,
  by Pierre Roux).
- **Changed:**
  level of postfix notations in `PrimArray` to level 1
  (`#21211 <https://github.com/rocq-prover/rocq/pull/21211>`_,
  by Pierre Roux).
- **Changed:**
  rewriting schemes for `eq` and `eq_true` are explicitly declared in `Init.Logic`
  instead of dynamically when a tactic needs them.
  For instance `EqdepFacts.internal_eq_rew_dep` does not exist anymore and instead `Logic.eq_rew_dep` is available
  (`#21248 <https://github.com/rocq-prover/rocq/pull/21248>`_,
  by Gaëtan Gilbert).
- **Added:**
  a slightly more general variant of Fix_eq which is sometimes more convenient
  (`#20018 <https://github.com/rocq-prover/rocq/pull/20018>`_,
  by Owen Conoly).
- **Fixed:**
  primitive array axioms (in `ArrayAxioms`) are universe polymorphic
  (they were inadvertently turned monomorphic in the stdlib split)
  (`#21744 <https://github.com/rocq-prover/rocq/pull/21744>`_,
  by Gaëtan Gilbert).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Extraction
^^^^^^^^^^

- **Fixed:**
  Added "effect" as a recognized keyword for ocaml extraction
  (`#21350 <https://github.com/rocq-prover/rocq/pull/21350>`_,
  fixes `#21176 <https://github.com/rocq-prover/rocq/issues/21176>`_,
  by Dan Rostovtsev).

Miscellaneous
^^^^^^^^^^^^^

- **Changed:**
  use `Gc.ramp_up` while executing :cmd:`Require` on OCaml 5.4 and later.
  This should partially mitigate the performance lost since OCaml 4.14
  (`#21306 <https://github.com/rocq-prover/rocq/pull/21306>`_,
  by Gaëtan Gilbert).


Version 9.1
-----------

.. contents::
   :local:
   :depth: 1

Summary of changes
~~~~~~~~~~~~~~~~~~

We highlight some of the most impactful changes here:

- fixed incorrect guard checking leading to inconsistencies (multiple PRs)

- sort polymorphic universe instances :ref:`should now be written <91sortpolysyntax>`
  as `@{s ; u}` instead of `@{s | u}`

- :ref:`fixed <91ltac2notationfix>` handling of notation variables for ltac2 in notations
  (i.e. `Notation "'foo' x" := ltac2:(...)`)

- :ref:`Support <91refinedef>` for :attr:`refine` attribute in :cmd:`Definition`

- Rocq can be compile-time configured to be :ref:`relocatable <91relocatable>`

- extraction :ref:`handles <91extractsortpoly>` sort polymorphic definitions

See the `Changes in 9.1.0`_ section below for the detailed list of changes,
including potentially breaking changes marked with **Changed**.
Rocq's `reference manual for 9.1 <https://rocq-prover.org/doc/v9.1/refman>`_,
documentation of the 9.1 `corelib <https://rocq-prover.org/doc/v9.1/corelib>`__
and `developer documentation of the 9.1 ML API <https://rocq-prover.org/doc/v9.1/api>`_
are also available.

Théo Zimmermann, with help from Jason Gross and Gaëtan Gilbert, maintained
`coqbot <https://github.com/rocq-prover/bot>`__ used to run Rocq's CI and other
pull request management tasks.

Jason Gross maintained the `bug minimizer <https://github.com/JasonGross/coq-tools>`_
and its `automatic use through coqbot <https://github.com/rocq-prover/rocq/wiki/Coqbot-minimize-feature>`_.

Ali Caglayan, Emilio Jesús Gallego Arias, Rudi Grinberg and Rodolphe Lepigre maintained the
`Dune build system for OCaml and Coq/Rocq <https://github.com/ocaml/dune/>`_
used to build the Rocq Prover itself and many Rocq projects.

The `opam repository <https://github.com/coq/opam>`_ for Rocq packages has been maintained by
Guillaume Claret, Guillaume Melquiond, Karl Palmskog, Matthieu Sozeau
and Enrico Tassi with contributions from many users. The up-to-date list
of packages is `available on the Rocq website <https://rocq-prover.org/packages>`_.

Erik Martin-Dorel maintained the
`Rocq Docker images <https://hub.docker.com/r/rocq/rocq-prover>`_ and
the `docker-keeper <https://gitlab.com/erikmd/docker-keeper>`_ compiler
used to build and keep those images up to date (note that the tool is not Rocq specific).
Erik Martin-Dorel and Théo Zimmermann maintained the
`docker-coq-action <https://github.com/coq-community/docker-coq-action>`_
container action (which is applicable to any opam project hosted on GitHub).

Cyril Cohen, Vincent Laporte, Pierre Roux and Théo Zimmermann
maintained the `Nix toolbox <https://github.com/coq-community/coq-nix-toolbox>`_.
The docker-coq-action and the Nix toolbox are used by many Rocq projects for continuous integration.

Rocq 9.1 was made possible thanks to the following 24 reviewers:
Florian Angeletti, Ali Caglayan, Cyril Cohen, Pierre Courtieu, Jim
Fehrle, Gaëtan Gilbert, Jason Gross, Emilio Jesús Gallego Arias,
Jan-Oliver Kaiser, Thomas Lamiaux, Rodolphe Lepigre,
Erik Martin-Dorel, Guillaume Melquiond, Patrick Nicodemus,
Pierre-Marie Pédrot, Pierre Rousselin, Pierre Roux, Gabriel Scherer,
Matthieu Sozeau, Nicolas Tabareau, Enrico Tassi, Théo Winterhalter and
Théo Zimmermann.

See the `Rocq Team <https://rocq-prover.org/rocq-team>`_ page for
more details on Rocq's development teams.

The 45 contributors to the 9.1 version are: Soudant,
ypopovitch, Reynald Affeldt, Wassim Ait-Moussa, David Allsopp,
Christian Benedict Smit, Frédéric Besson, Mathis Bouverot, Ali
Caglayan, Jean Caspar, Benedict Christian Smit, Cyril Cohen, Pierre Courtieu,
Julien Cretin, Jian Fang, Jim Fehrle, Gaëtan Gilbert, Jason Gross,
Dario Halilovic, Hugo Herbelin, Elyes Jemel, Emilio Jesús Gallego
Arias, Jan-Oliver Kaiser, Kacper Korban, Lucie Lahaye, Thomas Lamiaux,
Rodolphe Lepigre, Yann Leray, Kenji Maillard, Erik Martin-Dorel,
Patrick Nicodemus, Charles Norton, Pim Otte, Pierre-Marie Pédrot,
Josselin Poiret, Johann Rosain, Pierre Rousselin, Pierre Roux,
Radosław Rowicki, Benedict Smit, Bastien Sozeau, Matthieu Sozeau,
Nicolas Tabareau, Enrico Tassi and Théo Zimmermann.

The Rocq community at large helped improve this new version via
the GitHub issue and pull request system,
the `Discourse forum <https://discourse.rocq-prover.org>`__ and the
`Rocq Zulip chat <https://rocq-prover.zulipchat.com>`_.

Gaëtan Gilbert and Pierre-Marie Pédrot are the release managers of Rocq 9.1.
This release is the result of 397 merged PRs, closing 66 issues.

| Nantes, September 2025
| Gaëtan Gilbert and Pierre-Marie Pédrot for the Rocq development team

Changes in 9.1.0
~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

- **Fixed:**
  Guard checking forgot to check non principal arguments of a fixpoint
  for unguarded uses of the fixpoint leading to an inconsistency
  (`#20415 <https://github.com/rocq-prover/rocq/pull/20415>`_,
  fixes `#20413 <https://github.com/rocq-prover/rocq/issues/20413>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  inconsistency from incomplete guard checking with nested matches
  (`#20457 <https://github.com/rocq-prover/rocq/pull/20457>`_,
  fixes `#20455 <https://github.com/rocq-prover/rocq/issues/20455>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  inconsistency from incorrect reduction across a fixpoint during guard checking
  (`#20648 <https://github.com/rocq-prover/rocq/pull/20648>`_,
  fixes `#20555 <https://github.com/rocq-prover/rocq/issues/20555>`_,
  by Yann Leray).
- **Fixed:**
  Wrong context management during rewrite rule reduction
  (`#20729 <https://github.com/rocq-prover/rocq/pull/20729>`_,
  fixes `#20728 <https://github.com/rocq-prover/rocq/issues/20728>`_,
  by Yann Leray).
- **Fixed:**
  Fix guard checker making propositional extensionality inconsistent
  (`#21050 <https://github.com/rocq-prover/rocq/pull/21050>`_,
  fixes `#21053 <https://github.com/rocq-prover/rocq/issues/21053>`_,
  by Yann Leray).
- **Fixed:**
  substitution of functor delta-resolvers when strengthening.
  The previous code was only substituting the inner delta resolvers
  and ignoring the codomain of functors. In particular this was generating
  ill-formed constants whose canonical component was pointing to a bound name
  that did not exist in the global environment, leading to an inconsistency
  (`#21057 <https://github.com/rocq-prover/rocq/pull/21057>`_,
  fixes `#21051 <https://github.com/rocq-prover/rocq/issues/21051>`_,
  by Pierre-Marie Pédrot).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

.. _91sortpolysyntax:

- **Deprecated:**
  in :ref:`sort polymorphic <sort-polymorphism>` instances, separating sorts from universes using `|` instead of `;` (the later being possible since this version)
  (`#20635 <https://github.com/rocq-prover/rocq/pull/20635>`_,
  by Gaëtan Gilbert).
- **Added:**
  in :ref:`sort polymorphic <sort-polymorphism>` instances, sorts can be separated from universes using `;` instead of `|`.
  This is less ambiguous as `|` is also used to separate universes and constraints when declaring sort polymorphic objects,
  and in such declarations when constraints are unspecified it allows omitting the `|`
  (`Definition foo@{s;u} := ...` instead of `Definition foo@{s|u|+} := ...`)
  (`#20635 <https://github.com/rocq-prover/rocq/pull/20635>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Anomaly `List.chop` in the presence of projections with not
  enough argument scopes (`#20945
  <https://github.com/rocq-prover/rocq/pull/20945>`_, fixes `#20940
  <https://github.com/rocq-prover/rocq/issues/20940>`_, by Hugo
  Herbelin).
- **Fixed:**
  Anomaly `List.chop` with too many projection parameters in an abbreviation
  (`#20946 <https://github.com/rocq-prover/rocq/pull/20946>`_,
  fixes `#15815 <https://github.com/rocq-prover/rocq/issues/15815>`_,
  by Hugo Herbelin).

Notations
^^^^^^^^^

- **Changed:**
  The `Specif` notations (`exists x : A, P`, `{ x : A | P }`, `{ x : A & P }`, etc)
  locally opens `type_scope` for the second component (`P`).
  This makes eg `{ x & type_1 * type_2 }` work even when `nat_scope` is opened instead of interpreting `*` as peano multiplication
  (`#20294 <https://github.com/rocq-prover/rocq/pull/20294>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Enable Notation` and :cmd:`Disable Notation` do not take
  effect in deep imports (i.e. when a parent of their origin module is
  imported)
  (`#20484 <https://github.com/rocq-prover/rocq/pull/20484>`_,
  by Gaëtan Gilbert).

Tactics
^^^^^^^

- **Changed:**
  the :tacn:`abstract` tactic now only registers a name
  for the sublemma after the whole tactic block has run,
  i.e. after a dot. In particular, the sublemma cannot
  be accessed by its name while the tactic call has not
  returned
  (`#14937 <https://github.com/rocq-prover/rocq/pull/14937>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  the congruence tactic now can handle some dependently typed constructor fields.
  The field's type has to be composed of terms occuring globally or projectable from
  parameters or indices of the inductive type
  (`#19700 <https://github.com/rocq-prover/rocq/pull/19700>`_,
  by Benedict Christian Smit).
- **Changed:**
  setoid rewriting now rewrites under primitive projections.
  In rare cases (see for instance
  `#20575 <https://github.com/rocq-prover/rocq/issues/20575>`_),
  some rewrite that used to accidentally work will now correctly fail
  (`#19811 <https://github.com/rocq-prover/rocq/pull/19811>`_,
  by Josselin Poiret and Pierre-Marie Pédrot).
- **Changed:**
  output of :cmd:`Print Instances` better matches the actual behaviour
  when an instance is declared multiple times with different priorities
  (`#20486 <https://github.com/rocq-prover/rocq/pull/20486>`_,
  by Gaëtan Gilbert).
- **Added:**
  a new :flag:`Rewrite Output Constraints` flag and :ref:`documented <debugging_resolution_issues>` its use
  for debugging typeclass resolution failures in setoid rewriting
  (`#20476 <https://github.com/rocq-prover/rocq/pull/20476>`_,
  by Matthieu Sozeau).

Ltac language
^^^^^^^^^^^^^

- **Changed:**
  :cmd:`Ltac` redefinitions (`Ltac ::=`) understand :attr:`export`.
  Previously :attr:`global` and the default locality meant the redefinition would
  take effect at Require time and when importing any surrounding module.
  Now :attr:`global` means it takes affect at Require time,
  :attr:`export` when the current module (but not its parents) is imported,
  and the default is equivalent to the combination of :attr:`global` and :attr:`export`
  (`#20054 <https://github.com/rocq-prover/rocq/pull/20054>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Ltac` redefinitions (`Ltac foo ::= ...`) are not undone by
  importing the module containing the original definition.
  To get the previous behaviour, add `Ltac foo ::= orig_def.`
  after the original definition `Ltac foo := orig_def.`
  (`#20391 <https://github.com/rocq-prover/rocq/pull/20391>`_,
  by Gaëtan Gilbert).
- **Changed:**
  Named goals can now appear in any goal selector list
  (`#20511 <https://github.com/rocq-prover/rocq/pull/20511>`_,
  fixes `#12838 <https://github.com/rocq-prover/rocq/issues/12838>`_,
  by Dario Halilovic).

Ltac2 language
^^^^^^^^^^^^^^

- **Changed:**
  Ltac2 does not depend on the prelude (i.e.  it is compiled with `-noinit`).
  It still depends on `Corelib.Init.Ltac` due to the interoperation with Ltac1
  (`#20387 <https://github.com/rocq-prover/rocq/pull/20387>`_,
  by Gaëtan Gilbert).
- **Changed:**
  the documentation and error messages do not use the term "scope" to describe Ltac2 :ref:`syntactic_classes`
  (`#20504 <https://github.com/rocq-prover/rocq/pull/20504>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Ltac2 Set` only takes effect with shallow imports, i.e.
  `Import Foo` will not run a mutation from (non exported) inner module `Foo.Bar`
  (`#20516 <https://github.com/rocq-prover/rocq/pull/20516>`_,
  by Gaëtan Gilbert).
- **Added:**
  A file `Ltac1CompatNotations` for Ltac2 Notations reproducing Ltac1 parsing of tactics,
  that can be harmful to parsing, and produce bad error messages.
  (`#20569 <https://github.com/rocq-prover/rocq/pull/20569>`_,
  by Thomas Lamiaux).
- **Added:**
  `rename` (in `Ltac1CompatNotations`), `eassumption`, `cycle`, and `exfalso` Ltac2 notations
  (`#20197 <https://github.com/rocq-prover/rocq/pull/20197>`_,
  by Josselin Poiret).
- **Added:**
  ``Ltac2.Constr.is_string``, ``Ltac2.Constr.is_sort``
  (`#20088 <https://github.com/rocq-prover/rocq/pull/20088>`_,
  by Jason Gross).
- **Added:**
  ``Ltac2.Constr.decompose_app_list``, ``Ltac2.Constr.decompose_app``
  (`#20089 <https://github.com/rocq-prover/rocq/pull/20089>`_,
  by Jason Gross).
- **Added:**
  ``Ltac2.Option.is_some``, ``Ltac2.Option.is_none``, ``Ltac2.Option.compare``,
  ``Ltac2.Option.join``, ``Ltac2.Option.iter``
  (`#20184 <https://github.com/rocq-prover/rocq/pull/20184>`_,
  by Jason Gross).
- **Added:**
  `empty` and `add` in `Ltac2.Fresh.Free`, `next` in `Ltac2.Fresh`.
  `Ltac2.Fresh` operations should also be faster
  (`#20220 <https://github.com/rocq-prover/rocq/pull/20220>`_,
  by Gaëtan Gilbert).
- **Added:**
  Enable use of (open\_)lconstr inside Ltac2 Notation command
  (`#20430 <https://github.com/rocq-prover/rocq/pull/20430>`_,
  by Pim Otte).
- **Added:**
  API functions for inductive types - `Ind.nparams`, `Ind.nparams_uniform`, `Ind.constructor_nargs`, `Ind.constructor_ndecls`, `Constr.Case.inductive`
  (`#20475 <https://github.com/rocq-prover/rocq/pull/20475>`_,
  fixes `#10940 <https://github.com/rocq-prover/rocq/issues/10940>`_,
  by Patrick Nicodemus).
- **Added:**
  format specifiers `%A` to use unthunked printers and `%m` for already-formatted messages.
  Typically, instead of `printf "foo: %a" (fun () v => print_thing v) v`
  we can now write `printf "foo: %A" print_thing v`
  or `printf "foo: %m" (print_thing v)`
  (`#20498 <https://github.com/rocq-prover/rocq/pull/20498>`_,
  by Gaëtan Gilbert).
- **Added:**
  Ltac2 type for reduction expressions
  (`#20543 <https://github.com/rocq-prover/rocq/pull/20543>`_,
  by Radosław Rowicki, with review of Pierre-Marie Pédrot and Gaëtan Gilbert and Jason Gross).
- **Added:**
  Ported `rewrite_strat` to Ltac2 and added the `Rewrite.Strategy` module for describing rewrite strategies
  (`#20544 <https://github.com/rocq-prover/rocq/pull/20544>`_,
  fixes `#20482 <https://github.com/rocq-prover/rocq/issues/20482>`_,
  by Radosław Rowicki with review of Jason Gross and Pierre-Marie Pédrot and Gaëtan Gilbert).
- **Added:**
  ``Ltac2.Message.empty``
  (`#20547 <https://github.com/rocq-prover/rocq/pull/20547>`_,
  by Elyes Jemel).
- **Added:**
  conversion tests to Unification - `Unification.conv`, `Unification.conv_current`, `Unification.conv_full`
  (`#20649 <https://github.com/rocq-prover/rocq/pull/20649>`_,
  fixes `#20579 <https://github.com/rocq-prover/rocq/issues/20579>`_,
  by Thomas Lamiaux).
- **Added:**
  antiquotation `$hyp:id` in terms for dynamically named hypotheses,
  i.e. `let x := @y in constr:($hyp:x)` is equivalent to `constr:(&y)`
  (`#20656 <https://github.com/rocq-prover/rocq/pull/20656>`_,
  by Gaëtan Gilbert).

  .. _91ltac2notationfix:

- **Fixed:**
  Ltac2 in terms in notations is more aware of the notation variables it uses,
  providing early failure when the variable is instantiated with an invalid term,
  preventing a spurious warning when a variable that cannot be instantiated is unused,
  and preventing exponential blowups from copying unused data
  (`#20313 <https://github.com/rocq-prover/rocq/pull/20313>`_,
  fixes `#17833 <https://github.com/rocq-prover/rocq/issues/17833>`_
  and `#20188 <https://github.com/rocq-prover/rocq/issues/20188>`_
  and `#20305 <https://github.com/rocq-prover/rocq/issues/20305>`_,
  by Gaëtan Gilbert).

SSReflect
^^^^^^^^^

- **Changed:**
  `%FUN` now delimits scope `function_scope` rather than `fun_scope`
  in `ssrfun.v`
  (`#20478 <https://github.com/rocq-prover/rocq/pull/20478>`_,
  by Pierre Roux).
- **Removed:**
  scope `fun_scope` from `ssrfun.v` that was deprecated since 8.20,
  use `function_scope` instead
  (`#20478 <https://github.com/rocq-prover/rocq/pull/20478>`_,
  by Pierre Roux).
- **Deprecated:**
  `idempotent` in `ssrfun.v`, use `idempotent_op` instead
  (`#20478 <https://github.com/rocq-prover/rocq/pull/20478>`_,
  by Pierre Roux).
- **Added:**
  definitions `injective2`, `idempotent_op` and `idempotent_fun` and
  lemmas `omap_id`, `eq_omap`, `inj_omap`, `omapK`, `inr_inj` and
  `inl_inj` in `ssrfun.v`
  (`#20478 <https://github.com/rocq-prover/rocq/pull/20478>`_,
  by Pierre Roux).

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  commands taking a tactic argument (e.g. :cmd:`Hint Extern`)
  now follow :opt:`Default Proof Mode` instead of hardcoding Ltac1
  (`#19690 <https://github.com/rocq-prover/rocq/pull/19690>`_,
  fixes `#13784 <https://github.com/rocq-prover/rocq/issues/13784>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :opt:`Printing Depth` completely skips subterms beyond the given depth.
  In general the formatter depth is higher than the term depth, so there is no visible change,
  but some notations print subterms without increasing the formatting depth in which case
  you may need to increase the printing depth to avoid `...`
  (`#20275 <https://github.com/rocq-prover/rocq/pull/20275>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Search` ignores lemmas declared with :attr:`local` unless
  new flag :flag:`Search Blacklist Locals` is unset
  (`#20349 <https://github.com/rocq-prover/rocq/pull/20349>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Search` now accepts open modules, including the current file with
  the  `in`, `inside` and `outside` filters.
  (`#20733 <https://github.com/rocq-prover/rocq/pull/20733>`_,
  fixes `#14010 <https://github.com/rocq-prover/rocq/issues/14010>`_,
  by Pierre Rousselin, with a lot of help by Gaëtan Gilbert).
- **Removed:**
  flag `Lia Enum`, which did nothing
  (`#20640 <https://github.com/rocq-prover/rocq/pull/20640>`_,
  by Gaëtan Gilbert).
- **Added:**
  :cmd:`Sort` to declare global or section-scoped sort qualities
  (`#18615 <https://github.com/rocq-prover/rocq/pull/18615>`_,
  by Kenji Maillard).
- **Added:**
  :cmd:`Number Notation` and :cmd:`String Notation` understand parsers which may produce error messages
  (`#20107 <https://github.com/rocq-prover/rocq/pull/20107>`_,
  fixes `#20042 <https://github.com/rocq-prover/rocq/issues/20042>`_,
  by Gaëtan Gilbert).

  .. _91refinedef:

- **Added:**
  support for the :attr:`refine` attribute to definitions and (co)fixpoints
  (`#20355 <https://github.com/rocq-prover/rocq/pull/20355>`_,
  fixes `#20302 <https://github.com/rocq-prover/rocq/issues/20302>`_,
  by Yann Leray).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Changed:**
  `rocq timelog2html` now needs package `rocq-devtools` to be installed
  (`#20169 <https://github.com/rocq-prover/rocq/pull/20169>`_,
  by Gaëtan Gilbert).
- **Added:**
  error on ambiguous :cmd:`Require`. Rocq used to silently select a file
  when ambiguous :cmd:`Require`\s came from different loadpaths, for instance
  different fields of the ``ROCQPATH`` environment variable
  (`#20601 <https://github.com/rocq-prover/rocq/pull/20601>`_,
  fixes `#20587 <https://github.com/rocq-prover/rocq/issues/20587>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  `rocq dep` implicitly adds `-I $rocq-runtime/..` after the explicit `-I` instead of before
  (where `$rocq-runtime` is the expected location of the rocq-runtime package).
  This means that if a local plugin (whose META is in an explicit `-I` path) is installed next to rocq-runtime,
  `rocq dep` will emit a dependency on the local version instead of the installed version
  (`#20393 <https://github.com/rocq-prover/rocq/pull/20393>`_,
  by Gaëtan Gilbert).

RocqIDE
^^^^^^^

- **Changed:**
  default character encoding is UTF8 (it was locale dependent on non-windows OSes),
  and when the configured encoding is not UTF8 RocqIDE will attempt to convert input files even if they are already valid UTF8
  (`#20256 <https://github.com/rocq-prover/rocq/pull/20256>`_,
  fixes `#11526 <https://github.com/rocq-prover/rocq/issues/11526>`_,
  by Gaëtan Gilbert).
- **Added:**
  an option to control the maximum length of the message view
  in RocqIDE
  (`#20597 <https://github.com/rocq-prover/rocq/pull/20597>`_,
  fixes `#20420 <https://github.com/rocq-prover/rocq/issues/20420>`_,
  by Pierre-Marie Pédrot).

Corelib
^^^^^^^

- **Added:**
  type `result` in `Corelib.Datatypes`, equivalent to `sum`
  but with a name fitting possibly-failing computations
  (`#20107 <https://github.com/rocq-prover/rocq/pull/20107>`_,
  by Gaëtan Gilbert).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  minimum supported OCaml version is now 4.14.0 (instead of 4.09.0),
  and minimum supported OCamlfind version is now 1.9.1 (instead of 1.8.1)
  (`#20576 <https://github.com/rocq-prover/rocq/pull/20576>`_,
  by Gaëtan Gilbert).

  .. _91relocatable:

- **Added:**
  Rocq can be compile-time configured to be relocatable,
  using `./configure -relocatable` instead of e.g. `./configure -prefix /some/path`.
  See :ref:`system_config` for an explanation of how Rocq uses its configured installation paths
  (`#19901 <https://github.com/rocq-prover/rocq/pull/19901>`_,
  by Gaëtan Gilbert).
- **Added:** Experimental support for native Windows builds.
  Rocq can now build and run under a native Windows environment using
  the new native Windows support in Opam 2.3. This setup is tested in
  CI, running a large part of the test suite. Beware this support is
  still experimental, and some problem may arise on Unix-specific
  tools. Note that RocqIDE is still not supported (c.f. `#20631
  <https://github.com/rocq-prover/rocq/issues/20631>`_) (`#20464
  <https://github.com/rocq-prover/rocq/pull/20464>`_, by Emilio Jesus
  Gallego Arias, Gaëtan Gilbert, David Allsopp, Ali Caglayan, Jason
  Gross, the Opam team, the @setup-ocaml team, the OCaml team).
- **Fixed:**
  Bad interaction between dune, `rocq dep`, and local opam directory switches
  (`#20437 <https://github.com/rocq-prover/rocq/pull/20437>`_,
  fixes `#20422 <https://github.com/rocq-prover/rocq/issues/20422>`_,
  by Rodolphe Lepigre).

Extraction
^^^^^^^^^^

.. _91extractsortpoly:

- **Fixed:**
  extraction handles sort polymorphic definitions
  (`#20655 <https://github.com/rocq-prover/rocq/pull/20655>`_,
  by Pierre-Marie Pédrot).

Miscellaneous
^^^^^^^^^^^^^

- **Added:**
  plugin tutorial for extending Ltac2
  (`#20670 <https://github.com/rocq-prover/rocq/pull/20670>`_,
  by Gaëtan Gilbert).

Changes in 9.1.1
~~~~~~~~~~~~~~~~

.. contents::
   :local:

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Fixed:** anomaly when defining a sort polymorphic inductive
  without enabling :flag:`Universe Polymorphism`
  (`#21479 <https://github.com/rocq-prover/rocq/pull/21479>`_,
  fixes `#21476 <https://github.com/rocq-prover/rocq/issues/21476>`_,
  by Yann Leray)

Miscellaneous
^^^^^^^^^^^^^

- **Fixed:** compatibility with OCaml 5.4 with warnings as errors
  (`#21261 <https://github.com/rocq-prover/rocq/pull/21261>`_,
  by Yann Leray)
- **Fixed:** compatibility with OCaml 5.5 with warnings as errors
  (`#21584 <https://github.com/rocq-prover/rocq/pull/21584>`_,
  by Yann Leray and Kate Deplaix)
- **Changed:** various documentation updates

Version 9.0
-----------

.. contents::
   :local:
   :depth: 1

Summary of changes
~~~~~~~~~~~~~~~~~~

The Rocq Prover version 9.0 is the first Rocq Prover release after the renaming
from The Coq Proof Assistant. The Rocq Prover 9.0 command line interface is
backwards compatible with Coq 8.20, providing compatibility shims so that
developments depending on Coq can be easily ported, see `Porting to The Rocq
Prover`_  for details. The 9.0 version is based on a new single binary `rocq`
that dispatches commands to previously separate binaries, a split and renaming
of the standard library to `Stdlib` and improvements to the handling of
template-polymorphism, bringing it closer to a complete subsumption by sort
polymorphism.

We highlight some of the most impactful changes here:

  - "The Rocq Prover" is the new official name of the project. We leave to users the
    choice of renaming their projects to reflect this change, see `Renaming Advice`_.
    The Rocq Prover comes with a new visual identity and website, see `The Rocq Prover Website`_.

  - A single `rocq` binary dispatches commands for compilation, read-eval-print-loop,
    documentation building, dependency computation, etc. See :ref:`therocqcommands`.
    It corresponds to the `rocq-runtime` `opam package <https://ocaml.org/p/rocq-runtime>`_.
    This is a bare-bones package that does not provide any Gallina code.

  - The `Coq` standard library has been :ref:`split <90stdlib>` into two libraries:

    - A `Corelib` library (the `rocq-core` opam package). This is an
      extended prelude, which is
      enough to run Rocq tactics and contains the `Ltac2` library and bindings
      for primitive types (integers, floats, arrays and strings).
    - An `Stdlib` library (the `rocq-stdlib` opam package). The `Stdlib` is
      now maintained out of the main `rocq` repository. We welcome maintainers and
      contributors to the `new repository <https://github.com/rocq-prover/stdlib>`_.
      A specific call for contributions will be
      sent soon.

Notable breaking changes:

  - The legacy loading mode for plugins has been :ref:`removed <LegacyLoadingRemoval>`.

See the `Changes in 9.0.0`_ section below for the detailed list of changes,
including potentially breaking changes marked with **Changed**.
Rocq's `reference manual for 9.0 <https://rocq-prover.org/doc/v9.0/refman>`_,
documentation of the 9.0 `core <https://rocq-prover.org/doc/v9.0/corelib>`_ and
`standard <https://rocq-prover.org/doc/v9.0/stdlib>`_ libraries,
`reference manual of the 9.0 standard library <https://rocq-prover.org/doc/v9.0/refman-stdlib>`_
and `developer documentation of the 9.0 ML API <https://rocq-prover.org/doc/v9.0/api>`_
are also available.

Théo Zimmermann, with help from Jason Gross and Gaëtan Gilbert, maintained
`coqbot <https://github.com/coq/bot>`_ used to run Coq's CI and other
pull request management tasks.

Jason Gross maintained the `bug minimizer <https://github.com/JasonGross/coq-tools>`_
and its `automatic use through coqbot <https://github.com/rocq-prover/rocq/wiki/Coqbot-minimize-feature>`_.

Ali Caglayan, Emilio Jesús Gallego Arias, Rudi Grinberg and Rodolphe Lepigre maintained the
`Dune build system for OCaml and Coq/Rocq <https://github.com/ocaml/dune/>`_
used to build the Rocq Prover itself and many Rocq projects.

The `opam repository <https://github.com/coq/opam>`_ for Rocq packages has been maintained by
Guillaume Claret, Guillaume Melquiond, Karl Palmskog, Matthieu Sozeau
and Enrico Tassi with contributions from many users. The up-to-date list
of packages is `available on the Rocq website <https://rocq-prover.org/packages>`_.

Erik Martin-Dorel and Jaime Arias maintained the
`Rocq Docker images <https://hub.docker.com/r/rocq/rocq-prover>`_.
Erik Martin-Dorel maintained the `docker-keeper <https://gitlab.com/erikmd/docker-keeper>`_ compiler
used to build and keep those images up to date (note that the tool is not Rocq specific).
Erik Martin-Dorel and Théo Zimmermann maintained the
`docker-coq-action <https://github.com/coq-community/docker-coq-action>`_
container action (which is applicable to any opam project hosted on GitHub).

Cyril Cohen, Vincent Laporte, Pierre Roux and Théo Zimmermann
maintained the `Nix toolbox <https://github.com/coq-community/coq-nix-toolbox>`_.
The docker-coq-action and the Nix toolbox are used by many Rocq projects for continuous integration.

Rocq 9.0 was made possible thanks to the following 27 reviewers:
Yves Bertot, Ali Caglayan, Tej Chajed, Andres Erbsen, Jim Fehrle,
Emilio Jesús Gallego Arias, Gaëtan Gilbert, Jason Gross, Samuel Gruetter,
Hugo Herbelin, Thomas Lamiaux, Olivier Laurent, Rodolphe Lepigre,
Erik Martin-Dorel, Guillaume Melquiond, Guillaume Munch-Maccagnoni,
Karl Palmskog, Pierre-Marie Pédrot, Pierre Rousselin, Pierre Roux,
Marcello Seri, Michael Soegtrop, Matthieu Sozeau, Enrico Tassi,
Romain Tetley, Oliver Turner and Théo Zimmermann.

See the `Rocq Team <https://rocq-prover.org/rocq-team>`_ page for
more details on Rocq's development teams.

The 48 contributors to the 9.0 version are:
Jean Abou Samra, Tanaka Akira, David Allsopp, Frédéric Besson, Mathis Bouverot, Sylvain Chiron,
Cyril Cohen, Lucas Donati, Andrej Dudenhefner, Arya Elfren, Andres Erbsen, Siegmentation Fault,
Jim Fehrle, Gaëtan Gilbert, Tomaz Gomes Mascarenhas, Jason Gross, Hugo Herbelin, Florent Hivert,
Daniil Iaitskov, Emilio Jesús Gallego Arias, Jan-Oliver Kaiser, Rodolphe Lepigre, Yann Leray,
Felix Loyau-Kahn, Erik Martin-Dorel, Guillaume Melquiond, Guillaume Munch-Maccagnoni,
Aleksandar Nanevski, Charles Norton, Karl Palmskog, Pierre-Marie Pédrot, Pierre Rousselin,
Pierre Roux, Kazuhiko Sakaguchi, Gabriel Scherer, Marcello Seri, Benny Smit, Michael Soegtrop,
Matthieu Sozeau, Nicolas Tabareau, Enrico Tassi, Oliver Turner, Quentin Vermande, Daneel Yaitskov,
Remzi Yang, Tan Yee Jian and Théo Zimmermann.

The Coq/Rocq community at large helped improve this new version via
the GitHub issue and pull request system, the coq-club@inria.fr mailing list,
the `Discourse forum <https://coq.discourse.group/>`_ and the
`Coq Zulip chat <https://coq.zulipchat.com>`_.

Version 9.0's development spanned 7 months from the release of Coq 8.20.0.
Pierre-Marie Pédrot and Matthieu Sozeau are the release managers of Rocq 9.0.
This release is the result of 491 merged PRs, closing 68 issues.

| Nantes, March 2025
| Pierre-Marie Pédrot and Matthieu Sozeau for the Rocq development team

Porting to The Rocq Prover
~~~~~~~~~~~~~~~~~~~~~~~~~~

The Rocq Prover version 9.0 includes compatibility shims that make it possible
to invoke it through legacy Coq commands: `coq-tex`, `coq_makefile`, `coqchk`, `coqdoc`, `coqpp`, `coqtop`,
`coqwc`, `coqc`, `coqdep`, `coqnative`, `coqtimelog2html`, `coqtop.byte`, `coqworkmgr`.
When using `opam`, this compatibility layer is provided by the packages `coq-core`,
`coq-stdlib` and `coq`. In this setting, nothing needs to be changed to the build systems
of existing projects to compile with Rocq 9.0 (aliased as "Coq 9.0").

You should expect warnings that the standard library previously under namespace
`Coq` has been renamed to `Stdlib`. See `this entry
<https://rocq-prover.org/doc/v9.0/refman-stdlib/changes.html#changed>`_ from
the Standard Library's changelog for the suggested workflow to port theories.

There are important changes to consider for building plugins and libraries:

- To be future-proof, projects based on `coq_makefile` can be ported to not rely
  on the compatibility layer anymore. To do so, one must replace uses of
  `coq_makefile` with :ref:`rocq makefile <rocq_makefile>`, which will directly
  call the new `rocq` binary without relying on the compatibility shims.

- If using `dune` to :ref:`build <building_dune>` a Rocq project, you will still
  need the compatibility shim for `coq-core` so that `dune`'s Coq language extension
  functions correctly.

Regarding packaging:

- Opam packages that depend on the compatibility shims should remain named as `coq-*`, whereas
  ported packages should be named `rocq-*`, with the `coq` dependency being replaced by
  a `rocq-core` and `rocq-stdlib` dependency (unless your package does not depend on the stdlib),
  but **not** `rocq-prover` which is only a user-oriented metapackage.
- Similarly, Nix packages that use the compatibility shims can be kept in
  `coqPackages` (and can keep depending on `coq`), whereas ported packages can
  be added in `rocqPackages`, depending on `rocq-core`.

In both cases, when a `rocq` port is done, a `coq` metapackage can be kept,
simply depending on the new `rocq` package and `coq`.

Renaming Advice
~~~~~~~~~~~~~~~

We have applied the `renaming <https://rocq-prover.org/about#Name>`_ from the
Coq Proof Assistant to The Rocq Prover in this version, and officialy supported
projects in the `Rocq organization <https://github.com/rocq-prover>`_ will be
renamed in the future. The Rocq Development Team's official position on renaming of
projects *it does not officially maintain* is to let their authors do as they wish.
We just note that the new identity is quite compatible with existing
Rooster references. However, we encourage existing and forthcoming projects to
adopt the new logo, its colors and fonts, see the `identity guidelines
<https://rocq-prover.org/logo>`_ for more information.

The Rocq Prover Website
~~~~~~~~~~~~~~~~~~~~~~~

The Rocq Prover comes with a new `website <https://rocq-prover.org>`_ which was
developped by Matthieu Sozeau, Nicolas Tabareau and Théo Zimmermann in
collaboration with Bastien Sozeau of the `Noir Blanc Rouge
<https://noirblancrouge.com/>`_ type foundry. The new website is a fork of the
`OCaml.org <https://ocaml.org>`_ website developed by `Tarides
<https://tarides.com/>`_. The Rocq development team is thankful for their help
and for open-sourcing their website. It includes full support for the `Rocq
package archive <https://github.com/coq/opam>`_, a responsive design and easy
contributions through markdown files. The new identity, customized fonts and
logo were designed by Bastien Sozeau, consulting for the Rocq development team.
The logo is released under the UNLICENSE open-source `license <https://github.com/coq/rocq-prover.org/LICENSE>`_
and customized 3rd-party fonts are released under open-source `licences <https://github.com/coq/rocq-prover.org/LICENSE-3RD-PARTY>`_.

The website is deployed automatically using a
custom `deployer <https://deploy.rocq-prover.org>`_ developed by Matthieu
Sozeau. The deployer keeps the website up-to-date with the GitHub repositories
of the `website <https://github.com/coq/rocq-prover.org>`__ and `documentation
<https://github.com/coq/doc>`_. Its code is accessible on `GitHub
<https://github.com/coq/deploy-rocq-prover.org>`_.


Changes in 9.0.0
~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

- **Changed:**
  large performance improvements in kernel checking of terms with repeated subterms
  (`#19160 <https://github.com/rocq-prover/rocq/pull/19160>`_,
  by Gaëtan Gilbert)
- **Changed:**
  the criteria for a parameter to be considered template in a template inductive type.
  For a level to be template, it must now appear only once in the context of parameters,
  and only as the return sort of the arity of some parameter. Furthermore,
  it may appear neither in the indices of the inductive type nor in the type of its constructors.
  Finally, a template level appearing in the return sort of the inductive type must have a zero increment
  (`#19250 <https://github.com/rocq-prover/rocq/pull/19250>`_,
  `#19254 <https://github.com/rocq-prover/rocq/pull/19254>`_,
  `#19263 <https://github.com/rocq-prover/rocq/pull/19263>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  the kernel typing rules for template polymorphic inductive types do not
  require anymore adding global constraints when applied enough. Rather,
  template polymorphic inductive types are now a special kind of universe
  polymorphic inductive types that do not need explicit instances and
  can handle some amount of algebraic universe levels. The new rules are
  strictly more general than the previous ones and thus backwards compatible
  (`#19262 <https://github.com/rocq-prover/rocq/pull/19262>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  the kernel always produces an error when given terms with bad relevances
  instead of emitting the default-error `bad-relevance` warning
  (which is now only used by the higher layers)
  (`#19164 <https://github.com/rocq-prover/rocq/pull/19164>`_,
  by Gaëtan Gilbert).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  Typeclasses queries of classes that are declared with the options
  `Typeclasses Strict Resolution` and `Typeclasses Unique Instances`
  enabled are resolved independently of other queries, allowing them
  to succeed even when the remaining queries fail
  (`#18762 <https://github.com/rocq-prover/rocq/pull/18762>`_,
  by Jan-Oliver Kaiser).
- **Changed:**
  More systematic early check of `@{univs}`-like universe declarations
  at the time of declaring the statement of an interactive
  definition/theorem
  (`#18960 <https://github.com/rocq-prover/rocq/pull/18960>`_,
  by Hugo Herbelin).
- **Changed:**
  The syntax :n:`Derive x SuchThat type As name` is deprecated and replaced by
  :n:`Derive x in type as name` which itself is generalized into
  :n:`Derive open_binders in type as name`, so that several names,
  and possibly types to these names, can be given
  (`#19295 <https://github.com/rocq-prover/rocq/pull/19295>`_,
  by Hugo Herbelin).
- **Changed:**
  `match` elaboration can unify sort quality variables to make an elimination valid
  (`#19329 <https://github.com/rocq-prover/rocq/pull/19329>`_,
  fixes `#19327 <https://github.com/rocq-prover/rocq/issues/19327>`_,
  by Gaëtan Gilbert).
- **Changed:**
  ``:>`` in :token:`of_type_inst` now always declares coercions. The previous behavior,
  deprecated since 8.18, was to declare typeclass instances instead,
  when used in records declared with the :cmd:`Class` keyword. Look at
  the :ref:`previous changelog entries <819_changes_spec_language>`
  about former warnings `future-coercion-class-constructor` and
  `future-coercion-class-field` for advice on how to update your code
  (`#19519 <https://github.com/rocq-prover/rocq/pull/19519>`_, by Pierre Roux).
- **Changed:**
  The unification algorithm does not solve unification problems of the
  form `proj _ ~ _` using canonical structures when the LHS reduces or
  is ground
  (`#19611 <https://github.com/rocq-prover/rocq/pull/19611>`_,
  by Quentin Vermande).
- **Changed:**
  When unification fails to instantiate an evar because
  of a problem that occurs under a beta-redex, we reduce
  this beta-redex and try again
  (`#19833 <https://github.com/rocq-prover/rocq/pull/19833>`_,
  by Quentin Vermande).
- **Added:**
  Ability to hide the quantification over the decreasing argument of a
  fixpoint under a definition, with application to declaring fixpoints
  as instance of a class
  (`#19296 <https://github.com/rocq-prover/rocq/pull/19296>`_,
  fixes `#7913 <https://github.com/rocq-prover/rocq/issues/7913>`_,
  by Hugo Herbelin).
- **Fixed:**
  :cmd:`Derive` now supports :cmd:`Admitted`
  (`#19092 <https://github.com/rocq-prover/rocq/pull/19092>`_,
  fixes `#18951 <https://github.com/rocq-prover/rocq/issues/18951>`_,
  by Hugo Herbelin).
- **Fixed:**
  Mishandling of let binders in `Program Fixpoint`
  (`#19257 <https://github.com/rocq-prover/rocq/pull/19257>`_,
  fixes `#16906 <https://github.com/rocq-prover/rocq/issues/16906>`_,
  by Hugo Herbelin).
- **Fixed:**
  Pattern-matching in :attr:`Program` mode now supports inductive
  types using :ref:`local definitions <let-in>` in their declaration
  (`#19773 <https://github.com/rocq-prover/rocq/pull/19773>`_,
  fixes `#10407 <https://github.com/rocq-prover/rocq/issues/10407>`_,
  by Hugo Herbelin).
- **Fixed:**
  Anomaly in :cmd:`Function` when a well-founded relation had not the expected type
  (`#19775 <https://github.com/rocq-prover/rocq/pull/19775>`_,
  fixes `#12417 <https://github.com/rocq-prover/rocq/issues/12417>`_,
  by Hugo Herbelin).

Notations
^^^^^^^^^

- **Fixed:**
  Recognized all Unicode non-spacing marks as valid identifier characters
  (`#19693 <https://github.com/rocq-prover/rocq/pull/19693>`_,
  fixes `#19512 <https://github.com/rocq-prover/rocq/issues/19512>`_,
  by Guillaume Melquiond).

Tactics
^^^^^^^

- **Changed:**
  The reduction tactic :tacn:`hnf` becomes insensitive to the
  :g:`simpl never` status of constants, as prescribed in the reference
  manual; this can exceptionally impact the behavior of :tacn:`intros`
  on goals defining an implicative or universally quantified statement
  by recursion (`#18580 <https://github.com/rocq-prover/rocq/pull/18580>`_,
  by Hugo Herbelin).
- **Changed:**
  `Ncring_tac.extra_reify` is expected to return `tt` on failure and
  the reification result on success, instead of `(false, anything)` on failure
  and `(true, result)` on success
  (this only matters to users overriding it to extend the Ncring reification)
  (`#19501 <https://github.com/rocq-prover/rocq/pull/19501>`_,
  by Gaëtan Gilbert).
- **Removed:**
  the deprecated `gintuition` tactic
  (`#19704 <https://github.com/rocq-prover/rocq/pull/19704>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  `dfs eauto` tactic, which was deprecated in 8.16
  (`#19817 <https://github.com/rocq-prover/rocq/pull/19817>`_,
  by Jim Fehrle).
- **Added:**
  The :flag:`Info Micromega` flag (unset by default) makes :tacn:`lia`,
  :tacn:`lra`, :tacn:`nia` and :tacn:`nra` print the names of
  hypotheses used by the proof
  (`#19703 <https://github.com/rocq-prover/rocq/pull/19703>`_,
  by Frédéric Besson).
- **Fixed:**
  Refolding of constants marked as :g:`simpl never` in position of
  argument of a destructor in :tacn:`simpl`; note that this may
  occasionally cause some calls to :tacn:`simpl` to satisfy more
  scrupulously :g:`simpl never` and to stop reducing further in
  subterms that are *not* in position of argument of a destructor, as
  specified by :g:`simpl never`
  (`#18591 <https://github.com/rocq-prover/rocq/pull/18591>`_,
  fixes `#16040 <https://github.com/rocq-prover/rocq/issues/16040>`_,
  by Hugo Herbelin).
- **Fixed:**
  `Set Typeclasses Strict Resolution` is no longer ignored in
  `typeclasses eauto with <dbs>`
  (`#19436 <https://github.com/rocq-prover/rocq/pull/19436>`_,
  fixes `#15432 <https://github.com/rocq-prover/rocq/issues/15432>`_,
  by Jan-Oliver Kaiser).
- **Fixed:**
  Unbound variables were sometimes generated when a metavariable of a
  theorem given to :tacn:`apply` occurred in the type of the theorem
  under a :n:`fun`
  (`#19769 <https://github.com/rocq-prover/rocq/pull/19769>`_,
  fixes `#17314 <https://github.com/rocq-prover/rocq/issues/17314>`_,
  by Hugo Herbelin).
- **Fixed:**
  `cbn` now considers primitive literals (integers, floats, arrays, strings)
  "constructors", i.e. they now satisfy the `!` modifier in `Arguments`
  (`#20004 <https://github.com/rocq-prover/rocq/pull/20004>`_,
  fixes `#20003 <https://github.com/rocq-prover/rocq/issues/20003>`_,
  by Jan-Oliver Kaiser).

Ltac2 language
^^^^^^^^^^^^^^

- **Deprecated:**
  `Ltac2.Constr.occur_between` and `occurn` whose return values are the opposite of that implied by their names
  (`#19614 <https://github.com/rocq-prover/rocq/pull/19614>`_,
  by Gaëtan Gilbert).
- **Added:**
  Added Ltac2 bindings for congruence and simpl congruence, it fixes #14289 not entirely but provides Ltac2 bindings for one of the tactics listed there
  (`#19032 <https://github.com/rocq-prover/rocq/pull/19032>`_,
  fixes `#14289 <https://github.com/rocq-prover/rocq/issues/14289>`_,
  by Benny Smit, reviewed by Jason Gross, Pierre-Marie Pédrot, Gaëtan Gilbert).
- **Added:**
  APIs `compare` `of_int` and `print` in `Ltac2.Uint63`
  (`#19197 <https://github.com/rocq-prover/rocq/pull/19197>`_,
  by Gaëtan Gilbert).
- **Added:**
  :cmd:`Ltac2 Type` supports deprecation of the declared constructors
  (`#19575 <https://github.com/rocq-prover/rocq/pull/19575>`_,
  by Gaëtan Gilbert).
- **Added:**
  `Ltac2.Constr.noccur_between` and `noccurn` to test for non-occurrence of local variables in terms
  (`#19614 <https://github.com/rocq-prover/rocq/pull/19614>`_,
  by Gaëtan Gilbert).
- **Added:**
  `Ltac2.Control.hyp_value` to get the value (`v` in `H := v`) of an hypothesis
  (`#19630 <https://github.com/rocq-prover/rocq/pull/19630>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  resolution of :ref:`abbreviations <Abbreviations>` in :n:`reference`
  in :token:`ltac2_quotations`, for instance in eval tactic
  delta-reduction flags :token:`ltac2_delta_reductions`
  (`#19589 <https://github.com/rocq-prover/rocq/pull/19589>`_,
  fixes `#19590 <https://github.com/rocq-prover/rocq/issues/19590>`_,
  by Pierre Roux).
- **Fixed:**
  `Ltac2 Eval` does not require to be focused in a goal
  anymore (`#19961 <https://github.com/rocq-prover/rocq/pull/19961>`_, by
  Daniil Iaitskov).

SSReflect
^^^^^^^^^

- **Changed:**
  The :tacn:`done` tactic now tries to apply `sym_equal` with four arguments
  instead of trying first with zero to three arguments
  (`#19372 <https://github.com/rocq-prover/rocq/pull/19372>`_,
  by Quentin Vermande).
- **Changed:**
  `done` uses `simple refine` instead of `apply` to apply `sym_equal`
  (`#19399 <https://github.com/rocq-prover/rocq/pull/19399>`_,
  by Quentin Vermande).
- **Removed:**
  no longer used lemma ``not_locked_false_eq_true``
  and its call in the :tacn:`done` tactic
  (`#19382 <https://github.com/rocq-prover/rocq/pull/19382>`_,
  by Pierre Roux).

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  :cmd:`Variables` and its aliases do not share the type of combined binders anymore.
  This makes for instance `Variables a b : T` strictly equivalent to `Variables (a: T) (b : T).`
  (when `a` is not bound in `T`).
  The difference matters when interpreting `T` generates fresh universes or existential variables:
  they will be distinct in the types of `a` and `b`.
  This was already the case for binders in terms (eg `fun (a b : T) => ...`), :cmd:`Context`,
  and when :flag:`Universe Polymorphism` is enabled
  (`#19277 <https://github.com/rocq-prover/rocq/pull/19277>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Guarded` and :cmd:`Validate Proof` are now internally classified as "queries" instead of "proof steps".
  This means they should not be counted anymore when stepping back with :cmd:`Undo`.
  (`#19383 <https://github.com/rocq-prover/rocq/pull/19383>`_,
  by Gaëtan Gilbert).
- **Changed:**
  template polymorphism can bind universes which do not appear in the inductive's conclusion.
  For instance `eq` and `ex` are now template polymorphic.
  (`#19528 <https://github.com/rocq-prover/rocq/pull/19528>`_,
  by Gaëtan Gilbert).
- **Changed:**
  The order of hints shown in the "For any goal" category in :cmd:`Print HintDb`
  now matches the order in which they will be tried.
  Previously the entries were misordered on their priority
  (`#19624 <https://github.com/rocq-prover/rocq/pull/19624>`_,
  by Jim Fehrle).
- **Changed:**
  The :cmd:`Hint Rewrite` command now requires a *non-empty* list of hintDbs
  after the colon to be consistent with other Hint commands.  If your script
  has an empty list of hintDbs, fix it by removing the colon
  (`#19730 <https://github.com/rocq-prover/rocq/pull/19730>`_,
  by Jim Fehrle).
- **Changed:**
  :cmd:`Create HintDb` no longer erases pre-existing hint databases
  (`#19808 <https://github.com/rocq-prover/rocq/pull/19808>`_,
  by Gaëtan Gilbert).

.. _LegacyLoadingRemoval:

- **Removed:**
  "legacy" (non-findlib) loading mode for plugins in :cmd:`Declare ML Module`
  (`#18385 <https://github.com/rocq-prover/rocq/pull/18385>`_,
  by Emilio Jesús Gallego Arias and Gaëtan Gilbert).
- **Removed:**
  :n:`: @type` annotation in :cmd:`Obligation` which was ignored when executing the command
  (`#19678 <https://github.com/rocq-prover/rocq/pull/19678>`_,
  by Gaëtan Gilbert).
- **Removed:**
  flag `Automatic Proposition Inductives` (using its effect was deprecated since 8.20)
  (`#19872 <https://github.com/rocq-prover/rocq/pull/19872>`_,
  by Gaëtan Gilbert).
- **Added:**
  New :cmd:`Arguments`' modifier `clear simpl` to reset `simpl` reduction flags
  (`#19216 <https://github.com/rocq-prover/rocq/pull/19216>`_,
  by Hugo Herbelin).
- **Added:**
  The ``use`` field of the :attr:`deprecated` attribute lets one specify
  a replacement for a ``Theorem``, ``Definition`` or ``Notation`` that is
  printed as part of the deprecation warning message and also used to suggest
  a quick fix in LSP based user interfaces
  (`#19300 <https://github.com/rocq-prover/rocq/pull/19300>`_,
  by Enrico Tassi).
- **Added:**
  :cmd:`Register`, :cmd:`Register Scheme` and :cmd:`Add Zify`
  now support attributes :attr:`local`, :attr:`export` and :attr:`global`
  (`#19362 <https://github.com/rocq-prover/rocq/pull/19362>`_,
  by Gaëtan Gilbert).
- **Added:**
  :cmd:`Add` and :cmd:`Remove`
  now support attributes :attr:`local`, :attr:`export` and :attr:`global`
  (`#19390 <https://github.com/rocq-prover/rocq/pull/19390>`_,
  by Gaëtan Gilbert).
- **Added:**
  Default hint mode option for typeclasses, mode attribute on Class
  declarations overriding the default and class-declaration-default-mode
  warning to check for uses of the default mode
  (`#19473 <https://github.com/rocq-prover/rocq/pull/19473>`_,
  by Matthieu Sozeau).
- **Added:**
  :cmd:`Profile` command modifier to get profiling information for a given command
  (`#19517 <https://github.com/rocq-prover/rocq/pull/19517>`_,
  by Gaëtan Gilbert).
- **Added:**
  :cmd:`Print Universes` `Subgraph` accepts raw universe names (which end in an integer instead of an identifier)
  for debugging purposes, eg `Print Universes Subgraph ("foo.1" "foo.2")`.
  The integer in raw universe expressions is extremely unstable,
  so raw universe expressions should not be used outside debugging sessions
  (`#19640 <https://github.com/rocq-prover/rocq/pull/19640>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  the effect of :cmd:`Export` survives sections
  (the previous behaviour was identical to :cmd:`Import` in sections)
  (`#19361 <https://github.com/rocq-prover/rocq/pull/19361>`_,
  fixes `#19360 <https://github.com/rocq-prover/rocq/issues/19360>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Anomaly when printing a module functor with :cmd:`Strategy` or
  :cmd:`Transparent` in one of its parameters
  (`#19768 <https://github.com/rocq-prover/rocq/pull/19768>`_,
  fixes `#19767 <https://github.com/rocq-prover/rocq/issues/19767>`_,
  by Hugo Herbelin).
- **Fixed:**
  :opt:`Debug` and :opt:`Warnings` are classified as Synterp.
  This changes the scheduling during :cmd:`Import` such that putting `#[export] Set Warnings` around a specific command may change behaviour.
  (`#19981 <https://github.com/rocq-prover/rocq/pull/19981>`_,
  by Gaëtan Gilbert).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Changed:**
  The ``-compat`` :ref:`command line option <command-line-options>`
  now raises a warning rather than an error when the compatibility file
  doesn't exist. This enables easier use of the compat mechanism with
  versions where the compatibility file doesn't exist yet
  (`#19370 <https://github.com/rocq-prover/rocq/pull/19370>`_,
  by Pierre Roux).
- **Changed:**
  `coq_makefile` generated makefiles only install plugin `.cmxs` files in findlib locations
  and stop putting a copy in `user-contrib` (the copy should be useless after the removal of plugin legacy loading)
  (`#19841 <https://github.com/rocq-prover/rocq/pull/19841>`_,
  by Gaëtan Gilbert).
- **Removed:**
  `coqdep` flag `-m` (it was used through `coq_makefile`)
  (`#19863 <https://github.com/rocq-prover/rocq/pull/19863>`_,
  by Gaëtan Gilbert).
- **Added:**
  :ref:`command line option <command-line-options>` ``-compat-from``
  to enable writing compatibility files for libraries similarly to the
  ``-compat`` option for Rocq
  (`#19370 <https://github.com/rocq-prover/rocq/pull/19370>`_,
  by Pierre Roux).
- **Added:**
  The ``-compat`` :ref:`command line option <command-line-options>`
  now silences deprecation warnings that were introduced since the
  given version
  (`#19370 <https://github.com/rocq-prover/rocq/pull/19370>`_,
  by Pierre Roux).

RocqIDE
^^^^^^^

- **Changed:**
  Improved Preferences dialog: larger margins,
  tree of categories, sections in the categories,
  spin buttons for numbers, preservation of the last
  selected category, and more
  (`#19417 <https://github.com/rocq-prover/rocq/pull/19417>`_,
  by Sylvain Chiron).
- **Fixed:**
  All preferences are now applied after clicking Apply or OK
  rather than immediately
  (`#19417 <https://github.com/rocq-prover/rocq/pull/19417>`_,
  by Sylvain Chiron).
- **Fixed:**
  Changing the allowed modifiers in the Shortcuts panel of
  the Preferences dialog now immediately updates the available
  modifiers for the listed items
  (`#19417 <https://github.com/rocq-prover/rocq/pull/19417>`_,
  by Sylvain Chiron).
- **Added:**
  Preference setting for unjustified conclusions background color
  (`#19417 <https://github.com/rocq-prover/rocq/pull/19417>`_,
  by Sylvain Chiron).
- **Changed:**
  CoqIDE is renamed to RocqIDE (the auxiliary binary `coqidetop` is not renamed)
  (`#20036 <https://github.com/rocq-prover/rocq/pull/20036>`_,
  by Gaëtan Gilbert).
- **Added:**
  Warnings are now included in the Errors panel
  (`#19188 <https://github.com/rocq-prover/rocq/pull/19188>`_,
  by Jim Fehrle).
- **Fixed:**
  Changing the position of buffer names (top, left,
  bottom or right) no longer needs a restart
  (`#19166 <https://github.com/rocq-prover/rocq/pull/19166>`_,
  by Sylvain Chiron).
- **Added:**
  Document tabs are now reorderable
  (`#19166 <https://github.com/rocq-prover/rocq/pull/19166>`_,
  by Sylvain Chiron).

Standard library
^^^^^^^^^^^^^^^^

.. _90stdlib:

- **Changed:**
  Stdlib moved to its own repository, look for
  `Stdlib own changelog <https://rocq-prover.org/doc/v9.0/refman-stdlib/changes.html>`_
  for other changes there
  (`#19975 <https://github.com/rocq-prover/rocq/pull/19975>`_,
  by Pierre Roux).
- **Added:**
  a new `rocq-core` package for users who don't want to depend on Stdlib.
  This provides `Corelib <https://rocq-prover.org/doc/v9.0/corelib>`_ a tiny subset of Stdlib
  (`#19530 <https://github.com/rocq-prover/rocq/pull/19530>`_,
  starting to implement `CEP#83 <https://github.com/coq/ceps/pull/83>`_
  by Pierre Roux).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  when building Coq, the makefile's `world` target and `dune build`'s default target do not build rocqide anymore.
  Use `make world rocqide` or `dune build @default rocqide.install` to build what they respectively used to build
  (`#19378 <https://github.com/rocq-prover/rocq/pull/19378>`_,
  by Gaëtan Gilbert).
- **Changed:**
  `coq_makefile` generates profiling info for `coqc` in `foo.vo.prof.json.gz` instead of `foo.v.prof.json.gz`
  (`#19428 <https://github.com/rocq-prover/rocq/pull/19428>`_,
  by Gaëtan Gilbert).
- **Added:**
  `coq_makefile` generates profiling info for `coqchk` in `validate.prof.json.gz`
  (`#19428 <https://github.com/rocq-prover/rocq/pull/19428>`_,
  by Gaëtan Gilbert).
- **Changed:**
  minimal Dune version required to build Coq bumped to 3.8.3
  (`#19621 <https://github.com/rocq-prover/rocq/pull/19621>`_,
  by Pierre Roux).

Miscellaneous
^^^^^^^^^^^^^

- **Changed:**
  the current working directory is not implicitly added to the ML search path
  (`#19834 <https://github.com/rocq-prover/rocq/pull/19834>`_,
  by Gaëtan Gilbert).
- **Changed:**
  the `user-contrib`, XDG and `COQPATH` directories are not implicitly added to the ML loadpath
  (`#19842 <https://github.com/rocq-prover/rocq/pull/19842>`_,
  by Gaëtan Gilbert).

Changes in 9.0.1
~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

- **Fixed:**
  Guard checking forgot to check non principal arguments of a fixpoint
  for unguarded uses of the fixpoint leading to an inconsistency
  (`#20415 <https://github.com/rocq-prover/rocq/pull/20415>`_,
  fixes `#20413 <https://github.com/rocq-prover/rocq/issues/20413>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  inconsistency from incomplete guard checking with nested matches
  (`#20457 <https://github.com/rocq-prover/rocq/pull/20457>`_,
  fixes `#20455 <https://github.com/rocq-prover/rocq/issues/20455>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  inconsistency from incorrect reduction across a fixpoint during guard checking
  (`#20648 <https://github.com/rocq-prover/rocq/pull/20648>`_,
  fixes `#20555 <https://github.com/rocq-prover/rocq/issues/20555>`_,
  by Yann Leray).
- **Fixed:**
  Fix guard checker making propositional extensionality inconsistent
  (`#21050 <https://github.com/rocq-prover/rocq/pull/21050>`_,
  fixes `#21053 <https://github.com/rocq-prover/rocq/issues/21053>`_,
  by Yann Leray).
- **Fixed:**
  substitution of functor delta-resolvers when strengthening.
  The previous code was only substituting the inner delta resolvers
  and ignoring the codomain of functors. In particular this was generating
  ill-formed constants whose canonical component was pointing to a bound name
  that did not exist in the global environment, leading to an inconsistency
  (`#21057 <https://github.com/rocq-prover/rocq/pull/21057>`_,
  fixes `#21051 <https://github.com/rocq-prover/rocq/issues/21051>`_,
  by Pierre-Marie Pédrot).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Fixed:**
  `rocq dep` implicitly adds `-I $rocq-runtime/..` after the explicit `-I` instead of before
  (where `$rocq-runtime` is the expected location of the rocq-runtime package).
  This means that if a local plugin (whose META is in an explicit `-I` path) is installed next to rocq-runtime,
  `rocq dep` will emit a dependency on the local version instead of the installed version
  (`#20393 <https://github.com/rocq-prover/rocq/pull/20393>`_,
  by Gaëtan Gilbert).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Fixed:**
  Bad interaction between dune, `rocq dep`, and local opam directory switches
  (`#20437 <https://github.com/rocq-prover/rocq/pull/20437>`_,
  fixes `#20422 <https://github.com/rocq-prover/rocq/issues/20422>`_,
  by Rodolphe Lepigre).

Version 8.20
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.20 adds a new rewrite rule mechanism along with a few
new features, a host of improvements to the virtual machine, the
notation system, Ltac2 and the standard library.

We highlight some of the most impactful changes here:

  - :ref:`rewrite_rules`

  - `primitive strings <https://github.com/rocq-prover/rocq/pull/18973>`_

  - A lot of work went into reducing the size of the bytecode segment,
    which in turn means that .vo files might now be considerably
    smaller.

  - A new version of the
    `docker-keeper <https://gitlab.com/erikmd/docker-keeper>`_ compiler to
    build and maintain Docker images of Coq.

Notable breaking changes:

  - Syntactic global references passed through the `using` clauses of
    :tacn:`auto`-like tactics are now handled as plain references
    rather than interpreted terms. In particular, their typeclass
    arguments will not be inferred. In general, the previous behaviour
    can be emulated by replacing `auto using foo` with `pose proof
    foo; auto`.

  - Argument order for the Ltac2 combinators `List.fold_left2` and
    `List.fold_right2` changed to be the same as in OCaml.

  - :cmd:`Import`\ing a module containing a mutable Ltac2 definition
    does not undo its mutations. Replace `Ltac2 mutable foo :=
    some_expr.` with `Ltac2 mutable foo := some_expr. Ltac2 Set foo :=
    some_expr.` to recover the previous behaviour.

  - Some :ref:`renaming <820_renaming_stdlib>` in the standard
    library. Deprecations are provided for a smooth transition.

See the `Changes in 8.20.0`_ section below for the detailed list of changes,
including potentially breaking changes marked with **Changed**.
Coq's `reference manual for 8.20 <https://coq.github.io/doc/v8.20/refman>`_,
`documentation of the 8.20 standard library <https://coq.github.io/doc/v8.20/stdlib>`_
and `developer documentation of the 8.20 ML API <https://coq.github.io/doc/v8.20/api>`_
are also available.

Théo Zimmermann with help from Ali Caglayan and Jason Gross maintained
`coqbot <https://github.com/coq/bot>`_ used to run Coq's CI and other
pull request management tasks.

Jason Gross maintained the `bug minimizer <https://github.com/JasonGross/coq-tools>`_
and its `automatic use through coqbot <https://github.com/rocq-prover/rocq/wiki/Coqbot-minimize-feature>`_.

Erik Martin-Dorel maintained the
`Coq Docker images <https://hub.docker.com/r/coqorg/coq>`_
and the `docker-keeper <https://gitlab.com/erikmd/docker-keeper>`_ compiler
used to build and keep those images up to date (note that the tool is not Coq specific).
Cyril Cohen, Vincent Laporte, Pierre Roux and Théo Zimmermann
maintained the `Nix toolbox <https://github.com/coq-community/coq-nix-toolbox>`_
used by many Coq projects for continuous integration.

Ali Caglayan, Emilio Jesús Gallego Arias, Rudi Grinberg and
Rodolphe Lepigre maintained the
`Dune build system for OCaml and Coq <https://github.com/ocaml/dune/>`_
used to build Coq itself and many Coq projects.

The opam repository for Coq packages has been maintained by
Guillaume Claret, Guillaume Melquiond, Karl Palmskog and Enrico Tassi with
contributions from many users. A list of packages is `available on the Coq website <https://coq.inria.fr/coq-package-index>`_.

Coq 8.20 was made possible thanks to the following reviewers:
Frédéric Besson, Lasse Blaauwbroek, Ali Caglayan, Cyril Cohen, Andrej
Dudenhefner, Andres Erbsen, Jim Fehrle, Emilio Jesús Gallego Arias,
Gaëtan Gilbert, Jason Gross, Hugo Herbelin, Ralf Jung, Jan-Oliver
Kaiser, Chantal Keller, Olivier Laurent, Rodolphe Lepigre, Yishuai Li,
Ralph Matthes, Guillaume Melquiond, Pierre-Marie Pédrot, Karl
Palmskog, Clément Pit-Claudel, Pierre Rousselin, Pierre Roux, Michael
Soegtrop, soukouki, Matthieu Sozeau, Nicolas Tabareau, Enrico Tassi,
Niels van der Weide, Nickolai Zeldovich and Théo Zimmermann. See the
`Coq Team face book <https://coq.inria.fr/coq-team.html>`_ page for
more details on Coq's development team.

The 59 contributors to the 8.20 version are:
Timur Aminev, Frédéric Besson, Lasse Blaauwbroek, Björn Brandenburg,
Ali Caglayan, Nikolaos Chatzikonstantinou, Sylvain Chiron, chluebi,
Cyril Cohen, Anton Danilkin, Louise Dubois de Prisque, Andrej
Dudenhefner, Maxime Dénès, Andres Erbsen, Jim Fehrle, Davide Fissore,
Andreas Florath, Yannick Forster, Mario Frank, Gaëtan Gilbert, Georges
Gonthier, Jason Gross, Stefan Haan, Hugo Herbelin, Lennart Jablonka,
Emilio Jesús Gallego Arias, Ralf Jung, Jan-Oliver Kaiser, Evgenii
Kosogorov, Rodolphe Lepigre, Yann Leray, David M. Cooke, Erik
Martin-Dorel, Guillaume Melquiond, Guillaume Munch-Maccagnoni, Karl
Palmskog, Julien Puydt, Pierre-Marie Pédrot, Ramkumar Ramachandra,
Pierre Rousselin, Pierre Roux, Kazuhiko Sakaguchi, Bernhard Schommer,
Remy Seassau, Matthieu Sozeau, Enrico Tassi, Romain Tetley, Laurent
Théry, Alexey Trilis, Oliver Turner, Quentin Vermande, Li-yao Xia and
Théo Zimmermann,

The Coq community at large helped improve this new version via
the GitHub issue and pull request system, the coq-club@inria.fr mailing list,
the `Discourse forum <https://coq.discourse.group/>`_ and the
`Coq Zulip chat <https://coq.zulipchat.com>`_.

Version 8.20's development spanned 7 months from the release of Coq 8.19.0
(9 months since the branch for 8.19.0).
Pierre Roux and Guillaume Melquiond are the release managers of Coq 8.20.
This release is the result of 470 merged PRs, closing 113 issues.

| Toulouse, September 2024
| Pierre Roux and Guillaume Melquiond for the Coq development team

Changes in 8.20.0
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

- **Changed:**
  The guard checker now recognizes uniform parameters of a
  fixpoint and treats their instances as constant over the recursive call
  (`#17986 <https://github.com/rocq-prover/rocq/pull/17986>`_,
  grants `#16040 <https://github.com/rocq-prover/rocq/issues/16040>`_,
  by Hugo Herbelin).
- **Added:**
  A mechanism to add user-defined rewrite rules to Coq's reduction mechanisms;
  see chapter :ref:`rewrite_rules`
  (`#18038 <https://github.com/rocq-prover/rocq/pull/18038>`_,
  by Yann Leray).
- **Added:** Support for primitive strings in terms
  (`#18973 <https://github.com/rocq-prover/rocq/pull/18973>`_,
  by Rodolphe Lepigre).

.. _819_changes_spec_language:

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  warnings `future-coercion-class-constructor`
  and `future-coercion-class-field` about ``:>`` in :cmd:`Class` as
  errors by default. This offers a last opportunity to replace ``:>``
  with ``::`` (available since Coq 8.18) to declare typeclass instances
  before making ``:>`` consistently declare coercions in all records in
  next version.
  To adapt huge codebases, you can try
  `this script <https://gist.github.com/JasonGross/59fc3c03664f2280849abf50b531be42>`_
  or the one below. But beware that both are incomplete.

  .. code-block:: sh

     #!/bin/awk -f
     BEGIN {
       startclass = 0;
       inclass = 0;
       indefclass = 0;  # definitionalclasses (single field, without { ... })
     }
     {
       if ($0 ~ "[ ]*Class") {
         startclass = 1;
       }
       if (startclass == 1 && $0 ~ ":=") {
         inclass = 1;
         indefclass = 1;
       }
       if (startclass == 1 && $0 ~ ":=.*{") {
         indefclass = 0;
       }
       if (inclass == 1) startclass = 0;

       if (inclass == 1 && $0 ~ ":>") {
         if ($0 ~ "{ .*:>") {  # first field on a single line
           sub("{ ", "{ #[global] ");
         } else if ($0 ~ ":=.*:>") {  # definitional classes on a single line
           sub(":= ", ":= #[global] ");
         } else if ($0 ~ "^  ") {
           sub("  ", "  #[global] ");
         } else {
           $0 = "#[global] " $0;
         }
         sub(":>", "::")
       }
     print $0;

     if ($0 ~ ".*}[.]" || indefclass == 1 && $0 ~ "[.]$") inclass = 0;
   }

  (`#18590 <https://github.com/rocq-prover/rocq/pull/18590>`_,
  by Pierre Roux).
- **Changed:**
  Mutually-proved theorems with statements in different coinductive
  types now supported
  (`#18743 <https://github.com/rocq-prover/rocq/pull/18743>`_,
  by Hugo Herbelin).
- **Added:**
  :cmd:`CoFixpoint` supports attributes `bypass_guard`, `clearbody`,
  `deprecated` and `warn`
  (`#18754 <https://github.com/rocq-prover/rocq/pull/18754>`_,
  by Hugo Herbelin).
- **Added:**
  `Program Fixpoint` with `measure` or `wf` (see
  :ref:`program_fixpoint`) now supports the `where` clause for
  notations, the `local` and `clearbody` attributes, as well as
  non-atomic conclusions
  (`#18834 <https://github.com/rocq-prover/rocq/pull/18834>`_,
  by Hugo Herbelin, fixes in particular
  `#13812 <https://github.com/rocq-prover/rocq/issues/13812>`_ and
  `#14841 <https://github.com/rocq-prover/rocq/issues/14841>`_).
- **Fixed:**
  Anomaly on the absence of remaining obligations of some name now
  an error
  (`#18873 <https://github.com/rocq-prover/rocq/pull/18873>`_,
  fixes `#3889 <https://github.com/rocq-prover/rocq/issues/3889>`_,
  by Hugo Herbelin).
- **Fixed:**
  Universe polymorphic `Program`'s obligations are now generalized
  only over the universe variables that effectively occur in the
  obligation
  (`#18915 <https://github.com/rocq-prover/rocq/pull/18915>`_,
  fixes `#11766 <https://github.com/rocq-prover/rocq/issues/11766>`_
  and `#11988 <https://github.com/rocq-prover/rocq/issues/11988>`_,
  by Hugo Herbelin).
- **Fixed:**
  Anomaly `assertion failed` in pattern-matching compilation, with
  :flag:`Program Mode` or with let-ins in the arity of an inductive type
  (`#18921 <https://github.com/rocq-prover/rocq/pull/18921>`_,
  fixes `#5777 <https://github.com/rocq-prover/rocq/issues/5777>`_
  and `#11030 <https://github.com/rocq-prover/rocq/issues/11030>`_
  and `#11586 <https://github.com/rocq-prover/rocq/issues/11586>`_,
  by Hugo Herbelin).
- **Fixed:**
  Support for `Program`-style pattern-matching on more than one
  argument in an inductive family
  (`#18929 <https://github.com/rocq-prover/rocq/pull/18929>`_,
  fixes `#1956 <https://github.com/rocq-prover/rocq/issues/1956>`_
  and `#5777 <https://github.com/rocq-prover/rocq/issues/5777>`_,
  by Hugo Herbelin).
- **Fixed:**
  anomaly with obligations in the binders of a `measure`- or
  `wf`-based `Program Fixpoint`
  (`#18958 <https://github.com/rocq-prover/rocq/pull/18958>`_,
  fixes `#18920 <https://github.com/rocq-prover/rocq/issues/18920>`_,
  by Hugo Herbelin).
- **Fixed:**
  Incorrect registration of universe names attached to a primitive
  polymorphic constant
  (`#19100 <https://github.com/rocq-prover/rocq/pull/19100>`_,
  fixes `#19099 <https://github.com/rocq-prover/rocq/issues/19099>`_,
  by Hugo Herbelin).

Notations
^^^^^^^^^

- **Changed:**
  an :g:`only printing` interpretation of a notation with a specific
  format does no longer change the printing rule of other
  interpretations of the notation; to globally change the default
  printing rule of all interpretations of a notation, use
  :g:`Reserved Notation` instead
  (`#16329 <https://github.com/rocq-prover/rocq/pull/16329>`_,
  fixes `#16262 <https://github.com/rocq-prover/rocq/issues/16262>`_,
  by Hugo Herbelin).
- **Changed:**
  levels of :cmd:`Reserved Notation` now default to levels of
  previous notations with longest common prefix, if any. This helps to
  :ref:`factorize notations <NotationFactorization>` with common
  prefixes
  (`#19149 <https://github.com/rocq-prover/rocq/pull/19149>`_,
  by Pierre Roux).
- **Added:**
  :warn:`closed-notation-not-level-0` and :warn:`postfix-notation-not-level-1`
  warnings about closed and postfix notations at unusual levels
  (`#18588 <https://github.com/rocq-prover/rocq/pull/18588>`_,
  by Pierre Roux).
- **Added:**
  :warn:`notation-incompatible-prefix` warning when two notation
  definitions have incompatible prefixes
  (`#19049 <https://github.com/rocq-prover/rocq/pull/19049>`_,
  by Pierre Roux).
- **Fixed:**
  Notations for applied constants equipped with multiple signatures of
  implicit arguments were not correctly inserting as many maximal
  implicit arguments as they should have
  (`#18445 <https://github.com/rocq-prover/rocq/pull/18445>`_,
  by Hugo Herbelin).
- **Fixed:**
  Add support for printing notations applied to extra arguments in
  custom entries, thus eliminating an anomaly
  (`#18447 <https://github.com/rocq-prover/rocq/pull/18447>`_,
  fixes `#18342 <https://github.com/rocq-prover/rocq/issues/18342>`_,
  by Hugo Herbelin).

Tactics
^^^^^^^

- **Changed:**
  When using :g:`Z.to_euclidean_division_equations`, :tacn:`nia` can now relate
  :g:`Z.div`/:g:`Z.modulo` to :g:`Z.quot`/:g:`Z.rem` a bit better, by virtue of being
  noticing when there are two equations of the form ``x = y * q₁ + _`` and
  ``x = y * q₂ + _`` (or minor variations thereof), suggesting that ``q₁ = q₂``.
  Users can replace :g:`Z.to_euclidean_division_equations` with
  :g:`let flags := Z.euclidean_division_equations_flags.default_with Z.euclidean_division_equations_flags.find_duplicate_quotients false in Z.to_euclidean_division_equations_with flags`
  or, using :g:`Import Z.euclidean_division_equations_flags.`, with
  :g:`Z.to_euclidean_division_equations_with ltac:(default_with find_duplicate_quotients false)`
  (`#17934 <https://github.com/rocq-prover/rocq/pull/17934>`_,
  by Jason Gross).
- **Changed:**
  The opacity/transparency of primitive projections is now attached to the
  projections themselves, not the compatibility constants, and compatibility
  constants are always considered transparent
  (`#18327 <https://github.com/rocq-prover/rocq/pull/18327>`_,
  fixes `#18281 <https://github.com/rocq-prover/rocq/issues/18281>`_,
  by Jan-Oliver Kaiser and Rodolphe Lepigre).
- **Changed:**
  Tactic :g:`intro z` on an existential variable goal forces the resolution
  of the existential variable into a goal :g:`forall z:?T, ?P`, which
  becomes :g:`?P` in context :g:`z:?T` after introduction. The
  existential variable :n:`?P` itself is now defined in a context
  where the variable of type `?T` is also named :g:`z`, as specified
  by :tacn:`intro` instead of :g:`x` as it was conventionally the case
  before
  (`#18395 <https://github.com/rocq-prover/rocq/pull/18395>`_,
  by Hugo Herbelin).

- **Changed:**
  syntactic global references passed through the `using` clauses of :tacn:`auto`-like
  tactics are now handled as plain references rather than interpreted terms. In
  particular, their typeclass arguments will not be inferred. In general, the previous
  behaviour can be emulated by replacing `auto using foo` with `pose proof foo; auto`
  (`#18909 <https://github.com/rocq-prover/rocq/pull/18909>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  Use Coqlib's :cmd:`Register` mechanism for the generalized rewriting tactic
  and make the (C)RelationClasses/(C)Morphisms independent of the `rewrite`
  tactic to ease maintainance.
  (`#19115 <https://github.com/rocq-prover/rocq/pull/19115>`_,
  by Matthieu Sozeau).
- **Removed:**
  the `clear` modifier which was deprecated since 8.17
  (`#18887 <https://github.com/rocq-prover/rocq/pull/18887>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  the `cutrewrite` tactic, which was deprecated since
  Coq 8.5
  (`#19027 <https://github.com/rocq-prover/rocq/pull/19027>`_,
  by Pierre-Marie Pédrot).
- **Deprecated:**
  non-reference hints in `using` clauses of :tacn:`auto`-like tactics
  (`#19006 <https://github.com/rocq-prover/rocq/pull/19006>`_,
  by Pierre-Marie Pédrot).
- **Deprecated:**
  the `gintuition` tactic, which used to be undocumented
  until Coq 8.16
  (`#19129 <https://github.com/rocq-prover/rocq/pull/19129>`_,
  by Pierre-Marie Pédrot).
- **Deprecated:**
  `destauto`,
  see `#11537 <https://github.com/rocq-prover/rocq/issues/11537#issuecomment-2154260216>`_
  (`#19179 <https://github.com/rocq-prover/rocq/pull/99999>`_,
  by Jim Fehrle).
- **Added:**
  When using :g:`Z.to_euclidean_division_equations`, you can now pose
  equations of the form ``x = y * q`` using :g:`Z.divide`
  (`#17927 <https://github.com/rocq-prover/rocq/pull/17927>`_,
  by Evgenii Kosogorov).
- **Added:** support for :g:`Nat.double` and :g:`Nat.div2` to :g:`zify` and
  :g:`lia`
  (`#18729 <https://github.com/rocq-prover/rocq/pull/18729>`_,
  by Andres Erbsen).
- **Added:**
  the :tacn:`replace` tactic now accepts `->` and `<-`
  to specify the direction of the replacement
  when used with a `with` clause
  (`#19060 <https://github.com/rocq-prover/rocq/pull/19060>`_,
  fixes `#13480 <https://github.com/rocq-prover/rocq/issues/13480>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  The name of a cofixpoint globally defined with a name is now
  systematically reused by :tacn:`simpl` after reduction, even when
  the named cofixpoint is mutually defined or defined in a section
  (`#18576 <https://github.com/rocq-prover/rocq/pull/18576>`_,
  fixes `#4056 <https://github.com/rocq-prover/rocq/issues/4056>`_,
  by Hugo Herbelin).
- **Fixed:**
  The reduction of primitive projections of cofixpoints by
  :tacn:`simpl` is now implemented
  (`#18577 <https://github.com/rocq-prover/rocq/pull/18577>`_,
  fixes `#7982 <https://github.com/rocq-prover/rocq/issues/7982>`_,
  by Hugo Herbelin).
- **Fixed:**
  Support for refolding reduced global mutual fixpoints/cofixpoints
  with parameters in :tacn:`cbn`
  (`#18601 <https://github.com/rocq-prover/rocq/pull/18601>`_,
  fixes part of `#4056 <https://github.com/rocq-prover/rocq/issues/4056>`_,
  by Hugo Herbelin).
- **Fixed:**
  :tacn:`cbn` was leaving behind unnamable constants when refolding
  mutual fixpoints/cofixpoints from aliased modules
  (`#18616 <https://github.com/rocq-prover/rocq/pull/18616>`_,
  fixes `#17897 <https://github.com/rocq-prover/rocq/issues/17897>`_,
  by Hugo Herbelin).
- **Fixed:**
  :tacn:`cbv` of primitive projections applied to a tuple now ignores `beta`
  like it does for :tacn:`cbn`, :tacn:`lazy` and :tacn:`simpl`
  (`#18618 <https://github.com/rocq-prover/rocq/pull/18618>`_,
  fixes `#9086 <https://github.com/rocq-prover/rocq/issues/9086>`_,
  by Hugo Herbelin).

Ltac language
^^^^^^^^^^^^^
- **Added:**
  In :tacn:`rewrite_strat`, :n:`@rewstrategy` now supports the fixpoint operator :n:`fix @ident := @rewstrategy1`
  (`#18094 <https://github.com/rocq-prover/rocq/pull/18094>`_,
  fixes `#13702 <https://github.com/rocq-prover/rocq/issues/13702>`_,
  by Jason Gross and Gaëtan Gilbert).
- **Fixed:**
  :tacn:`rewrite_strat` now works inside module functors
  (`#18094 <https://github.com/rocq-prover/rocq/pull/18094>`_,
  fixes `#18463 <https://github.com/rocq-prover/rocq/issues/18463>`_,
  by Jason Gross).

Ltac2 language
^^^^^^^^^^^^^^
- **Changed:**
  recursive `let` and non mutable projections of syntactic values are considered syntactic values
  (`#18411 <https://github.com/rocq-prover/rocq/pull/18411>`_,
  by Gaëtan Gilbert).
- **Changed:**
  Ltac2 notations are typechecked at declaration time by default.
  This should produce better errors when a notation argument does not have the expected type
  (e.g. wrong branch type in `match! goal`).
  In the previous behaviour of typechecking, only the expansion result can be
  recovered using :flag:`Ltac2 Typed Notations`. We believe there are no real
  use cases for this, please report if you have any
  (`#18432 <https://github.com/rocq-prover/rocq/pull/18432>`_,
  fixes `#17477 <https://github.com/rocq-prover/rocq/issues/17477>`_,
  by Gaëtan Gilbert).
- **Changed:**
  argument order for the Ltac2 combinators `List.fold_left2` and `List.fold_right2`
  changed to be the same as in OCaml
  (`#18706 <https://github.com/rocq-prover/rocq/pull/18706>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Import`\ing a module containing a mutable Ltac2 definition
  does not undo its mutations. Replace `Ltac2 mutable foo := some_expr.`
  with `Ltac2 mutable foo := some_expr. Ltac2 Set foo := some_expr.`
  to recover the previous behaviour
  (`#18713 <https://github.com/rocq-prover/rocq/pull/18713>`_,
  by Gaëtan Gilbert).
- **Changed:**
  the `using` clause argument of :tacn:`auto`-like tactics in Ltac2 now
  take a global `reference` rather than arbitrary `constr`
  (`#18940 <https://github.com/rocq-prover/rocq/pull/18940>`_,
  by Pierre-Marie Pédrot).
- **Deprecated:**
  `Ltac2.Constr.Pretype.Flags.open_constr_flags` whose name is misleading
  as it runs typeclass inference unlike `open_constr:()`
  (`#18765 <https://github.com/rocq-prover/rocq/pull/18765>`_,
  by Gaëtan Gilbert).
- **Added:**
  `fst` and `snd` in `Ltac2.Init`
  (`#18370 <https://github.com/rocq-prover/rocq/pull/18370>`_,
  by Gaëtan Gilbert).
- **Added:**
  `Ltac2.Ltac1.of_preterm` and `to_preterm`
  (`#18551 <https://github.com/rocq-prover/rocq/pull/18551>`_,
  by Gaëtan Gilbert).
- **Added:**
  `of_intro_pattern` and `to_intro_pattern` in `Ltac2.Ltac1`
  (`#18558 <https://github.com/rocq-prover/rocq/pull/18558>`_,
  by Gaëtan Gilbert).
- **Added:**
  basic APIs in `Ltac2.Ltac1` to produce slightly more informative errors when failing to convert a Ltac1 value to some Ltac2 type
  (`#18558 <https://github.com/rocq-prover/rocq/pull/18558>`_,
  by Gaëtan Gilbert).
- **Added:**
  APIs `Ltac2.Control.unshelve` and `Ltac2.Notations.unshelve`
  (`#18604 <https://github.com/rocq-prover/rocq/pull/18604>`_,
  by Gaëtan Gilbert).
- **Added:**
  warning on unused Ltac2 variables (except when starting with `_`)
  (`#18641 <https://github.com/rocq-prover/rocq/pull/18641>`_,
  by Gaëtan Gilbert).
- **Added:**
  `Ltac2.Control.numgoals`
  (`#18690 <https://github.com/rocq-prover/rocq/pull/18690>`_,
  by Gaëtan Gilbert).
- **Added:**
  `intropattern` and `intropatterns` notation scopes support views (`foo%bar`)
  (`#18757 <https://github.com/rocq-prover/rocq/pull/18757>`_,
  by Gaëtan Gilbert).
- **Added:**
  open recursion combinators in `Ltac2.Constr.Unsafe`
  (`#18764 <https://github.com/rocq-prover/rocq/pull/18764>`_,
  by Gaëtan Gilbert).
- **Added:**
  APIs in `Ltac2.Constr.Pretype.Flags` to customize pretyping flags.
  (`#18765 <https://github.com/rocq-prover/rocq/pull/18765>`_,
  by Gaëtan Gilbert).
- **Added:**
  :attr:`abstract` attribute for :cmd:`Ltac2 Type` to turn types abstract at the end of the current module
  (`#18766 <https://github.com/rocq-prover/rocq/pull/18766>`_,
  fixes `#18656 <https://github.com/rocq-prover/rocq/issues/18656>`_,
  by Gaëtan Gilbert).
- **Added:**
  APIs in `Ltac2.Message` to interact with the boxing system of the pretty printer
  (`#18988 <https://github.com/rocq-prover/rocq/pull/18988>`_,
  by Gaëtan Gilbert).
- **Added:**
  flag `Automatic Proposition Inductives`, :flag:`Dependent Proposition Eliminators` and
  warning `automatic-prop-lowering`
  (`#18989 <https://github.com/rocq-prover/rocq/pull/18989>`_,
  by Gaëtan Gilbert).
- **Added:**
  `String.sub`
  (`#19204 <https://github.com/rocq-prover/rocq/pull/19204>`_,
  by Rodolphe Lepigre).
- **Fixed:**
  `Ltac2.Control.new_goal` removes the new goal from the shelf and future goals
  (`#19141 <https://github.com/rocq-prover/rocq/pull/19141>`_,
  fixes `#19138 <https://github.com/rocq-prover/rocq/issues/19138>`_,
  by Gaëtan Gilbert).

SSReflect
^^^^^^^^^

- **Changed:**
  ssreflect no longer relies on the recovery mechanism
  of the parsing engine, this can slightly change
  the parsing priorities in rare occurences, for instance
  when combining :tacn:`unshelve` and ``=>``
  (`#18224 <https://github.com/rocq-prover/rocq/pull/18224>`_,
  by Pierre Roux).
- **Changed:**
  notations ``_.1`` and ``_.2`` are now defined in the prelude
  at level 1 rather than in ``ssrfun`` at level 2
  (`#18224 <https://github.com/rocq-prover/rocq/pull/18224>`_,
  by Pierre Roux).
- **Changed:**
  The :tacn:`have` tactic generates a proof term containing an opaque
  constant, as it did up to PR `#15121 <https://github.com/rocq-prover/rocq/pull/15121>`_
  included in Coq 8.16.0. See the variant `have @H` to generate a (transparent)
  let-in instead (:ref:`generating_let_ssr`).
  (`#18449 <https://github.com/rocq-prover/rocq/pull/18449>`_,
  fixes `#18017 <https://github.com/rocq-prover/rocq/issues/18017>`_,
  by Enrico Tassi).
- **Deprecated:**
  The ``fun_scope`` notation scope declared in `ssrfun.v` is deprecated. Use
  ``function_scope`` instead
  (`#18374 <https://github.com/rocq-prover/rocq/pull/18374>`_,
  by Kazuhiko Sakaguchi).
- **Fixed:**
  handling of primitive projections in ssrewrite
  (`#19213 <https://github.com/rocq-prover/rocq/pull/19213>`_,
  fixes `#19229 <https://github.com/rocq-prover/rocq/issues/19229>`_,
  by Pierre Roux, Kazuhiko Sakaguchi, Enrico Tassi and Quentin Vermande).

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  the default reversibility status of most coercions.
  The refman states that

     By default coercions are not reversible
     except for Record fields specified using ``:>``.

  The previous code was making way too many coercion reversible by default.
  The new behavior should be closer from the spec in the doc
  (`#18705 <https://github.com/rocq-prover/rocq/pull/18705>`_,
  by Pierre Roux).
- **Changed:**
  focus commands such as `1:{` and goal selection for query commands such as `1: Check`
  do not need `Classic` (Ltac1) proof mode to function. In particular they function in Ltac2 mode
  (`#18707 <https://github.com/rocq-prover/rocq/pull/18707>`_,
  fixes `#18351 <https://github.com/rocq-prover/rocq/issues/18351>`_,
  by Gaëtan Gilbert).
- **Changed:**
  inductives declared with `: Type` or no annotation and automatically put in `Prop`
  are not declared template polymorphic
  (`#18867 <https://github.com/rocq-prover/rocq/pull/18867>`_,
  by Gaëtan Gilbert).
- **Changed:**
  Clarify the warning about use of :cmd:`Let`, :cmd:`Variable`,
  :cmd:`Hypothesis` and :cmd:`Context` outside sections and make it an
  error by default
  (`#18880 <https://github.com/rocq-prover/rocq/pull/18880>`_,
  by Pierre Roux).
- **Changed:**
  The "fragile-hint-constr" warning is now an error by default,
  as the corresponding feature will be removed in a later version
  (`#18895 <https://github.com/rocq-prover/rocq/pull/18895>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  :cmd:`Scheme` automatically registers the resulting schemes in the :cmd:`Register Scheme` database
  (`#19016 <https://github.com/rocq-prover/rocq/pull/19016>`_,
  fixes `#3132 <https://github.com/rocq-prover/rocq/issues/3132>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Typeclasses Transparent` and :cmd:`Typeclasses Opaque` default locality outside section is now :attr:`export`
  (`#19069 <https://github.com/rocq-prover/rocq/pull/19069>`_,
  by Gaëtan Gilbert).
- **Deprecated:**
  The :cmd:`Cd` command.  Instead use the command line option
  `-output-directory` (see :ref:`command-line-options`) or, for
  extraction, :opt:`Extraction Output Directory`
  (`#17403 <https://github.com/rocq-prover/rocq/pull/17403>`_,
  by Ali Caglayan and Hugo Herbelin).
- **Added:**
  :attr:`warn` attribute generalizing the deprecation
  machinery to other forms of comments
  (`#18248 <https://github.com/rocq-prover/rocq/pull/18248>`_,
  by Hugo Herbelin and Pierre Roux).
- **Added:**
  :cmd:`Register Scheme` to add entries to the scheme database used by some tactics
  (`#18299 <https://github.com/rocq-prover/rocq/pull/18299>`_,
  by Gaëtan Gilbert).
- **Added:**
  :cmd:`Print` :n:`@reference` now shows the implicit arguments of a
  :n:`@reference` directly on the type of :n:`@reference`, using
  `{...}` and `[...]` markers for respectively maximally-inserted and
  non-maximally-inserted implicit arguments, as :cmd:`About` does
  (`#18444 <https://github.com/rocq-prover/rocq/pull/18444>`_,
  by Hugo Herbelin).
- **Added:**
  :n:`@import_categories` supports category `options` controlling :ref:`flags-options-tables`
  (`#18536 <https://github.com/rocq-prover/rocq/pull/18536>`_,
  by Gaëtan Gilbert).
- **Added:**
  When a name is a projection, :cmd:`About` and :cmd:`Print` now indicate it
  (`#18725 <https://github.com/rocq-prover/rocq/pull/18725>`_,
  by Hugo Herbelin).
- **Added:**
  :cmd:`Hint Projections` command that sets the transparency flag for projections
  for the specified hint databases
  (`#18785 <https://github.com/rocq-prover/rocq/pull/18785>`_,
  by Jan-Oliver Kaiser and Rodolphe Lepigre).
- **Added:**
  :cmd:`Search` now admits the `is:Fixpoint` and `is:CoFixpoint` logical
  kinds to search for constants defined with the `Fixpoint` and `CoFixpoint`
  keywords
  (`#18983 <https://github.com/rocq-prover/rocq/pull/18983>`_,
  by Pierre Rousselin).
- **Added:**
  The :cmd:`Include` command can now include module types with a `with` clause (:n:`@with_declaration`)
  to instantiate some parameters
  (`#19144 <https://github.com/rocq-prover/rocq/pull/19144>`_,
  by Pierre Rousselin).
- **Fixed:**
  Fixes missing implicit arguments coming after a :g:`->` in the main type
  printed by :cmd:`Print` and :cmd:`About`
  (`#18442 <https://github.com/rocq-prover/rocq/pull/18442>`_,
  fixes `#15020 <https://github.com/rocq-prover/rocq/issues/15020>`_,
  by Hugo Herbelin).
- **Fixed:**
  :flag:`Cumulativity Weak Constraints` can unify universes to `Set` when :flag:`Universe Minimization ToSet` is enabled
  (`#18458 <https://github.com/rocq-prover/rocq/pull/18458>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  :cmd:`Search` with modifier `is:Scheme` restricted the search to inductive types
  which have schemes instead of the schemes themselves.
  For instance `Search nat is:Scheme` with just the prelude loaded would return `le`
  i.e. the only inductive type whose type mentions `nat`
  (`#18537 <https://github.com/rocq-prover/rocq/pull/18537>`_,
  fixes `#18298 <https://github.com/rocq-prover/rocq/issues/18298>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  :cmd:`Search` now searches also in included module types
  (`#18662 <https://github.com/rocq-prover/rocq/pull/18662>`_,
  fixes `#18657 <https://github.com/rocq-prover/rocq/issues/18657>`_,
  by Hugo Herbelin).
- **Fixed:**
  :cmd:`Eval` and :cmd:`Definition` with `:= Eval` work without needing to load the Ltac plugin
  (`#18852 <https://github.com/rocq-prover/rocq/pull/18852>`_,
  fixes `#12948 <https://github.com/rocq-prover/rocq/issues/12948>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  :cmd:`Scheme` declares non-recursive schemes for :n:`@scheme_type` `Case` and `Elimination`
  (`#19017 <https://github.com/rocq-prover/rocq/pull/19017>`_,
  fixes `#10816 <https://github.com/rocq-prover/rocq/issues/10816>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  :flag:`Cumulativity Weak Constraints` had its meaning flipped since 8.12
  (`#19201 <https://github.com/rocq-prover/rocq/pull/19201>`_,
  by Gaëtan Gilbert).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Changed:**
  signal `SIGINT` interrupts the process with " "user interrupt" error
  instead of aborting. This is intended to produce better messages when interrupting Coq
  (`#18716 <https://github.com/rocq-prover/rocq/pull/18716>`_,
  by Gaëtan Gilbert).
- **Added:**
  Command line option :n:`-output-directory dir` to set the default output directory
  for extraction, :cmd:`Redirect` and :cmd:`Print Universes`
  (`#17392 <https://github.com/rocq-prover/rocq/pull/17392>`_,
  fixes `#8649 <https://github.com/rocq-prover/rocq/issues/8649>`_,
  by Hugo Herbelin).
- **Fixed:**
  coqdoc links to section variables introduced with :cmd:`Context`
  (`#18527 <https://github.com/rocq-prover/rocq/pull/18527>`_,
  fixes `#18516 <https://github.com/rocq-prover/rocq/issues/18516>`_,
  by Pierre Roux).

CoqIDE
^^^^^^

- **Changed:**
  Find/replace UI was improved: margins, icons for found/not found
  (`#18523 <https://github.com/rocq-prover/rocq/pull/18523>`_,
  fixes `#11024 <https://github.com/rocq-prover/rocq/issues/11024>`_,
  by Sylvain Chiron).
- **Changed:**
  The default key binding modifier for the Navigation menu
  was changed to Alt on non-macOS systems.  The previous default,
  Ctrl, hid some conventional cursor movement bindings such as Ctrl-Left,
  Ctrl-Right, Ctrl-Home and Ctrl-End.  The new default generally
  has no effect if you've previously installed Coq on your
  system.  See :ref:`Shortcuts<shortcuts>` to change the default.

  The Edit/Undo key binding was changed from Ctrl-U to Ctrl-Z to
  be more consistent with common conventions.  `View/Previous Tab`
  and `View/Next Tab` were changed from `Alt-Left/Right` to
  `Ctrl-PgUp/PgDn` (`Cmd-PgUp/PgDn` on macOS).  To change key
  bindings on your system (e.g. back to Ctrl-U), see :ref:`key_bindings`
  (`#18717 <https://github.com/rocq-prover/rocq/pull/18717>`_,
  by Sylvain Chiron).
- **Changed:**
  Changing modifiers for the View menu only applies
  to toggleable items; View/Show Proof was changed to Shift-F2
  (`#18717 <https://github.com/rocq-prover/rocq/pull/18717>`_,
  by Sylvain Chiron).
- **Added:**
  Edit/Select All and Navigation/Fully Check menu items
  (`#18717 <https://github.com/rocq-prover/rocq/pull/18717>`_,
  fixes `#16141 <https://github.com/rocq-prover/rocq/issues/16141>`_,
  by Sylvain Chiron).
- **Fixed:**
  Opening a file with drag and drop now works correctly (fixed regression)
  (`#18524 <https://github.com/rocq-prover/rocq/pull/18524>`_,
  fixes `#3977 <https://github.com/rocq-prover/rocq/issues/3977>`_,
  by Sylvain Chiron).
- **Fixed:**
  Incorrect highlight locations and line numbers for errors and warnings,
  especially in the presence of unicode characters.  This updates the XML protocol
  (`#19040 <https://github.com/rocq-prover/rocq/pull/19040>`_,
  fixes `#18682 <https://github.com/rocq-prover/rocq/issues/18682>`_,
  by Hugo Herbelin).
- **Fixed:**
  Show tooltips for syntax errors
  (`#19153 <https://github.com/rocq-prover/rocq/pull/19153>`_,
  fixes `#19152 <https://github.com/rocq-prover/rocq/issues/19152>`_,
  by Jim Fehrle).

.. _820_renaming_stdlib:

Standard library
^^^^^^^^^^^^^^^^

- **Changed:** names of "push" lemmas for :g:`List.length` to follow the same
  convention as push lemmas for other operations. For example, :g:`app_length`
  became :g:`length_app`. The standard library was migrated using the following
  script:

  .. code-block:: sh

     find theories -name '*.v' | xargs sed -i -E '
       s/\<app_length\>/length_app/g;
       s/\<rev_length\>/length_rev/g;
       s/\<map_length\>/length_map/g;
       s/\<fold_left_length\>/fold_left_S_O/g;
       s/\<split_length_l\>/length_fst_split/g;
       s/\<split_length_r\>/length_snd_split/g;
       s/\<combine_length\>/length_combine/g;
       s/\<prod_length\>/length_prod/g;
       s/\<firstn_length\>/length_firstn/g;
       s/\<skipn_length\>/length_skipn/g;
       s/\<seq_length\>/length_seq/g;
       s/\<concat_length\>/length_concat/g;
       s/\<flat_map_length\>/length_flat_map/g;
       s/\<list_power_length\>/length_list_power/g;
     '

  (`#18564 <https://github.com/rocq-prover/rocq/pull/18564>`_,
  by Andres Erbsen).
- **Changed:**
  ``Coq.CRelationClasses.arrow``, ``Coq.CRelationClasses.iffT`` and
  ``Coq.CRelationClasses.flip`` are now :cmd:`Typeclasses Opaque`
  (`#18910 <https://github.com/rocq-prover/rocq/pull/18910>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  The library files ``Coq.NArith.Ndigits``, ``Coq.NArith.Ndist``, and ``Coq.Strings.ByteVector``
  which were deprecated since 8.19
  (`#18936 <https://github.com/rocq-prover/rocq/pull/18936>`_,
  by Andres Erbsen).
- **Deprecated:**
  The library files

  * ``Coq.Numbers.Integer.Binary.ZBinary``
  * ``Coq.Numbers.Integer.NatPairs.ZNatPairs``
  * ``Coq.Numbers.Natural.Binary.NBinary``

  have been deprecated.
  Users should require ``Coq.Arith.PeanoNat`` or ``Coq.Arith.NArith.BinNat``
  if they want implementations of natural numbers and
  ``Coq.Arith.ZArith.BinInt`` if they want an implementation of integers
  (`#18500 <https://github.com/rocq-prover/rocq/pull/18500>`_,
  by Pierre Rousselin).
- **Deprecated:**
  The library file ``Coq.Numbers.NatInt.NZProperties`` is deprecated.
  Users can require ``Coq.Numbers.NatInt.NZMulOrder`` instead and replace the
  module ``NZProperties.NZProp`` with ``NZMulOrder.NZMulOrderProp``
  (`#18501 <https://github.com/rocq-prover/rocq/pull/18501>`_,
  by Pierre Rousselin).
- **Deprecated:**
  The library file ``Coq.Arith.Bool_nat`` has been deprecated
  (`#18538 <https://github.com/rocq-prover/rocq/pull/18538>`_,
  by Pierre Rousselin).
- **Deprecated:**
  The library file ``Coq.Numbers.NatInt.NZDomain`` is deprecated
  (`#18539 <https://github.com/rocq-prover/rocq/pull/18539>`_,
  by Pierre Rousselin).
- **Deprecated:**
  The library files ``Coq.Numbers.Integers.Abstract.ZDivEucl``
  and ``Coq.ZArith.Zeuclid`` are deprecated
  (`#18544 <https://github.com/rocq-prover/rocq/pull/18544>`_,
  by Pierre Rousselin).
- **Deprecated:**
  The library files ``Coq.Numbers.Natural.Abstract.NIso``
  and ``Coq.Numbers.Natural.Abstract.NDefOps`` are deprecated
  (`#18668 <https://github.com/rocq-prover/rocq/pull/18668>`_,
  by Pierre Rousselin).
- **Deprecated:** ``Bool.Bvector``. Users are encouraged to consider ``list bool`` instead. Please open an issue if you would like to keep using ``Bvector``.
  (`#18947 <https://github.com/rocq-prover/rocq/pull/18947>`_,
  by Andres Erbsen).
- **Added:**
  A warning on :g:`Vector.t` to make its new users aware that using
  this dependently typed representation of fixed-length lists is more
  technically difficult, compared to bundling lists with a proof of their
  length. This is not a deprecation and there is no intent to remove it
  from the standard library. Use option `-w -stdlib-vector`
  to silence the warning
  (`#18032 <https://github.com/rocq-prover/rocq/pull/18032>`_,
  by Pierre Roux, reviewed by Andres Erbsen, Jim Fehrle, Emilio Jesús Gallego Arias, Gaëtan Gilbert, Hugo Herbelin, Olivier Laurent, Yishuai Li, Pierre-Marie Pédrot and Michael Soegtrop).
- **Added:**
  lemmas :g:`NoDup_app`, :g:`NoDup_iff_ForallOrdPairs`, :g:`NoDup_map_NoDup_ForallPairs` and :g:`NoDup_concat`
  (`#18172 <https://github.com/rocq-prover/rocq/pull/18172>`_,
  by Stefan Haani and Andrej Dudenhefner).
- **Added:** lemmas
  :g:`In_iff_nth_error`
  :g:`nth_error_app`,
  :g:`nth_error_cons_0`,
  :g:`nth_error_cons_succ`,
  :g:`nth_error_rev`,
  :g:`nth_error_firstn`,
  :g:`nth_error_skipn`,
  :g:`hd_error_skipn`,
  :g:`nth_error_seq`
  (`#18563 <https://github.com/rocq-prover/rocq/pull/18563>`_,
  by Andres Erbsen)
- **Added:** to :g:`N` and :g:`Nat` lemmas
  :g:`strong_induction_le`,
  :g:`binary_induction`,
  :g:`strong_induction_le`,
  :g:`even_even`,
  :g:`odd_even`,
  :g:`odd_odd`,
  :g:`even_odd`,
  :g:`b2n_le_1`,
  :g:`testbit_odd_succ'`,
  :g:`testbit_even_succ'`,
  :g:`testbit_div2`,
  :g:`div2_0`,
  :g:`div2_1`,
  :g:`div2_le_mono`,
  :g:`div2_even`,
  :g:`div2_odd'`,
  :g:`le_div2_diag_l`,
  :g:`div2_le_upper_bound`,
  :g:`div2_le_lower_bound`,
  :g:`lt_div2_diag_l`,
  :g:`le_div2`,
  :g:`lt_div2`,
  :g:`div2_decr`,
  :g:`land_even_l`,
  :g:`land_even_r`,
  :g:`land_odd_l`,
  :g:`land_odd_r`,
  :g:`land_even_even`,
  :g:`land_odd_even`,
  :g:`land_even_odd`,
  :g:`land_odd_odd`,
  :g:`land_le_l`,
  :g:`land_le_r`,
  :g:`ldiff_even_l`,
  :g:`ldiff_odd_l`,
  :g:`ldiff_even_r`,
  :g:`ldiff_odd_r`,
  :g:`ldiff_even_even`,
  :g:`ldiff_odd_even`,
  :g:`ldiff_even_odd`,
  :g:`ldiff_odd_odd`,
  :g:`ldiff_le_l`,
  :g:`shiftl_lower_bound`,
  :g:`shiftr_upper_bound`,
  :g:`ones_0`,
  :g:`ones_succ`,
  :g:`pow_lower_bound`
  (`#18628 <https://github.com/rocq-prover/rocq/pull/18628>`_,
  by Pierre Rousselin).
- **Fixed:**
  :g:`Z.euclidean_division_equations_cleanup` has been reordered so that
  :tacn:`zify` (and :tacn:`lia`, :tacn:`nia`, etc) are no longer as slow when the
  context contains many assumptions of the form :g:`0 <= ... < ...`
  (`#18818 <https://github.com/rocq-prover/rocq/pull/18818>`_,
  fixes `#18770 <https://github.com/rocq-prover/rocq/issues/18770>`_,
  by Jason Gross).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  Bump minimal Dune version required to build Coq to 3.6.1
  (`#18359 <https://github.com/rocq-prover/rocq/pull/18359>`_,
  by Emilio Jesus Gallego Arias).
- **Removed:**
  Support for ``.vio`` files and for ``.vio2vo`` transformation has
  been removed, compilation to ``.vos`` is the supported method for
  quick compilation now
  (`#18424 <https://github.com/rocq-prover/rocq/pull/18424>`_,
  fixes `#4007 <https://github.com/rocq-prover/rocq/issues/4007>`_
  and `#4013 <https://github.com/rocq-prover/rocq/issues/4013>`_
  and `#4123 <https://github.com/rocq-prover/rocq/issues/4123>`_
  and `#5308 <https://github.com/rocq-prover/rocq/issues/5308>`_
  and `#5223 <https://github.com/rocq-prover/rocq/issues/5223>`_
  and `#6720 <https://github.com/rocq-prover/rocq/issues/6720>`_
  and `#8402 <https://github.com/rocq-prover/rocq/issues/8402>`_
  and `#9637 <https://github.com/rocq-prover/rocq/issues/9637>`_
  and `#11471 <https://github.com/rocq-prover/rocq/issues/11471>`_
  and `#18380 <https://github.com/rocq-prover/rocq/issues/18380>`_,
  by Emilio Jesus Gallego Arias).
- **Added:**
  The `coq-doc` opam / Dune package will now build and install Coq's
  documentation (`#17808 <https://github.com/rocq-prover/rocq/pull/17808>`_, by
  Emilio Jesus Gallego Arias).
- **Added:**
  Coq is now compatible with `memprof-limits` interruption
  methods. This means that Coq will be recompiled when the library is
  installed / removed from an OPAM switch.
  (`#18906 <https://github.com/rocq-prover/rocq/pull/18906>`_,
  fixes `#17760 <https://github.com/rocq-prover/rocq/issues/17760>`_,
  by Emilio Jesus Gallego Arias).
- **Added:**
  ability to exit from `Drop.` in Coq toplevel by a simple `Ctrl + D`,
  without leaving the OCaml toplevel on the stack.
  Also add a custom OCaml toplevel directory `#go` which does the same
  action as `go ()`, but with a more native syntax
  (`#18771 <https://github.com/rocq-prover/rocq/pull/18771>`_,
  by Anton Danilkin).

Extraction
^^^^^^^^^^

- **Added:**
  Extension for OCaml extraction:
  Commands to extract foreign function calls to C (external)
  and ML function exposition (Callback.register) for calling
  being able to call them by C functions
  (`#18270 <https://github.com/rocq-prover/rocq/pull/18270>`_,
  fixes `#18212 <https://github.com/rocq-prover/rocq/issues/18212>`_,
  by Mario Frank).
- **Fixed:**
  Wrongly self-referencing extraction of primitive projections to OCaml in functors
  (`#17321 <https://github.com/rocq-prover/rocq/pull/17321>`_,
  fixes `#16288 <https://github.com/rocq-prover/rocq/issues/16288>`_,
  by Hugo Herbelin). Note that OCaml wrappers assuming that the
  applicative syntax of projections is provided may have
  to use the dot notation instead.

Changes in 8.20.1
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

- **Fixed:**
  Possible guard checker anomaly on fixpoints containing an inner
  fixpoint that is reducible (because of its main argument reducing to a
  constructor). This is a regression in 8.20
  (`#19671 <https://github.com/rocq-prover/rocq/pull/19671>`_,
  fixes `#19661 <https://github.com/rocq-prover/rocq/issues/19661>`_,
  by Hugo Herbelin).

Notations
^^^^^^^^^

- **Fixed:**
  spurious warning about incompatible prefixes in presence of ``as
  pattern`` :n:`@syntax_modifier`
  (`#19653 <https://github.com/rocq-prover/rocq/pull/19653>`_,
  fixes `#19541 <https://github.com/rocq-prover/rocq/issues/19541>`_,
  by Pierre Roux).
- **Fixed:**
  spurious warning about incompatible prefixes in presence of
  recursive notations
  (`#19673 <https://github.com/rocq-prover/rocq/pull/19673>`_,
  fixes `#19658 <https://github.com/rocq-prover/rocq/issues/19658>`_,
  by Pierre Roux).

Tactics
^^^^^^^

- **Fixed:**
  a regression in `Hint Extern` matching primitive projections
  (`#19675 <https://github.com/rocq-prover/rocq/pull/19675>`_,
  fixes `#19668 <https://github.com/rocq-prover/rocq/issues/19668>`_,
  by Jan-Oliver Kaiser).

Version 8.19
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.19 extends the kernel universe polymorphism to
polymorphism over sorts (e.g. `Prop`, `SProp`) along with a few new
features, a host of improvements to the notation system, the Ltac2
standard library, and the removal of some standard library files after
a long deprecation period.

We highlight some of the most impactful changes here:

  - :ref:`sort-polymorphism` makes it possible to share common constructs
    over `Type` `Prop` and `SProp`.

  - The notation :g:`term%_scope` to set a scope only temporarily
    (in addition to :g:`term%scope` for opening a
    scope applying to all subterms).

  - :tacn:`lazy`, :tacn:`simpl`, :tacn:`cbn` and :tacn:`cbv` and the associated :cmd:`Eval`
    and :tacn:`eval` reductions learned to do head reduction when given flag `head`.

  - :ref:`New Ltac2 APIs <819Ltac2>`, improved Ltac2 `exact` and
    dynamic building of Ltac2 term patterns.

  - New performance evaluation facilities: :cmd:`Instructions` to
    count CPU instructions used by a command (Linux only) and
    :ref:`profiling` system to produce trace files.

  - New command :cmd:`Attributes` to assign attributes such as
    :attr:`deprecated` to a library file.

Notable breaking changes:

  - :tacn:`replace` with `by tac` does not automatically attempt to solve
    the generated equality subgoal using the hypotheses.
    Use `by first [assumption | symmetry;assumption | tac]`
    if you need the previous behaviour.

  - :ref:`Removed old deprecated files <819Stdlib>` from the standard library.

See the `Changes in 8.19.0`_ section below for the detailed list of changes,
including potentially breaking changes marked with **Changed**.
Coq's `reference manual for 8.19 <https://coq.github.io/doc/v8.19/refman>`_,
`documentation of the 8.19 standard library <https://coq.github.io/doc/v8.19/stdlib>`_
and `developer documentation of the 8.19 ML API <https://coq.github.io/doc/v8.19/api>`_
are also available.

Maxime Dénès and Thierry Martinez with support from Erik Martin-Dorel
and Théo Zimmermann moved the CI away from `gitlab.com <http://gitlab.com>`_
to use Inria supported runner machines through
`gitlab.inria.fr <https://gitlab.inria.fr>`_.

Théo Zimmermann with help from Ali Caglayan and Jason Gross maintained
`coqbot <https://github.com/coq/bot>`_ used to run Coq's CI and other
pull request management tasks.

Jason Gross maintained the `bug minimizer <https://github.com/JasonGross/coq-tools>`_
and its `automatic use through coqbot <https://github.com/rocq-prover/rocq/wiki/Coqbot-minimize-feature>`_.

Jaime Arias and Erik Martin-Dorel maintained the
`Coq Docker images <https://hub.docker.com/r/coqorg/coq>`_
and Cyril Cohen, Vincent Laporte, Pierre Roux and Théo Zimmermann
maintained the `Nix toolbox <https://github.com/coq-community/coq-nix-toolbox>`_
used by many Coq projects for continuous integration.

Ali Caglayan, Emilio Jesús Gallego Arias, Rudi Grinberg and
Rodolphe Lepigre maintained the
`Dune build system for OCaml and Coq <https://github.com/ocaml/dune/>`_
used to build Coq itself and many Coq projects.

The opam repository for Coq packages has been maintained by
Guillaume Claret, Guillaume Melquiond, Karl Palmskog and Enrico Tassi with
contributions from many users. A list of packages is `available on the Coq website <https://coq.inria.fr/coq-package-index>`_.

Our current maintainers are Yves Bertot, Frédéric Besson, Ana Borges,
Ali Caglayan, Tej Chajed, Cyril Cohen, Pierre Corbineau, Pierre
Courtieu, Andres Erbsen, Jim Fehrle, Julien Forest, Emilio Jesús
Gallego Arias, Gaëtan Gilbert, Georges Gonthier, Benjamin Grégoire,
Jason Gross, Hugo Herbelin, Vincent Laporte, Olivier Laurent, Assia
Mahboubi, Kenji Maillard, Guillaume Melquiond, Pierre-Marie Pédrot,
Clément Pit-Claudel, Pierre Roux, Kazuhiko Sakaguchi, Vincent Semeria,
Michael Soegtrop, Arnaud Spiwack, Matthieu Sozeau, Enrico Tassi,
Laurent Théry, Anton Trunov, Li-yao Xia and Théo Zimmermann. See the
`Coq Team face book <https://coq.inria.fr/coq-team.html>`_ page for
more details.

The 40 contributors to the 8.19 version are:
quarkcool, Khalid Abdullah, Tanaka Akira, Isaac van Bakel,
Frédéric Besson, Lasse Blaauwbroek, Ana Borges, Ali Caglayan, Nikolaos
Chatzikonstantinou, Maxime Dénès, Andrej Dudenhefner, Andres Erbsen,
Jim Fehrle, Gaëtan Gilbert, Jason Gross, Stefan Haan, Hugo Herbelin,
Emilio Jesús Gallego Arias, Pierre Jouvelot, Ralf Jung, Jan-Oliver
Kaiser, Robbert Krebbers, Jean-Christophe Léchenet, Rodolphe Lepigre,
Yann Leray, Yishuai Li, Guillaume Melquiond, Guillaume
Munch-Maccagnoni, Sotaro Okada, Karl Palmskog, Pierre-Marie Pédrot, Jim Portegies,
Pierre Rousselin, Pierre Roux, Michael Soegtrop, David Swasey, Enrico
Tassi, Shengyi Wang and Théo Zimmermann.

The Coq community at large helped improve this new version via
the GitHub issue and pull request system, the coq-club@inria.fr mailing list,
the `Discourse forum <https://coq.discourse.group/>`_ and the
`Coq Zulip chat <https://coq.zulipchat.com>`_.

Version 8.19's development spanned 4 months from the release of Coq 8.18.0
(6 months since the branch for 8.18.0).
Gaëtan Gilbert and Matthieu Sozeau are the release managers of Coq 8.19.
This release is the result of 285 merged PRs, closing 70 issues.

| Nantes, January 2024
| Gaëtan Gilbert for the Coq development team

Changes in 8.19.0
~~~~~~~~~~~~~~~~~

.. contents::
   :local:


Kernel
^^^^^^

- **Added:**
  :ref:`sort-polymorphism` makes it possible to share common constructs
  over `Type` `Prop` and `SProp`
  (`#17836 <https://github.com/rocq-prover/rocq/pull/17836>`_,
  `#18331 <https://github.com/rocq-prover/rocq/pull/18331>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Primitives being incorrectly considered convertible to anything by module subtyping
  (`#18507 <https://github.com/rocq-prover/rocq/pull/18507>`_,
  fixes `#18503 <https://github.com/rocq-prover/rocq/issues/18503>`_,
  by Gaëtan Gilbert).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  :token:`term_forall_or_fun`, :token:`term_let`, :token:`term_fix`,
  :token:`term_cofix` and :token:`term_if` from :token:`term` at level 200
  to :token:`term10` at level 10. This is a first step towards getting rid
  of the recovery mechanism of camlp5/coqpp. The impact will mostly be
  limited to rare cases of additional parentheses around the above
  (`#18014 <https://github.com/rocq-prover/rocq/pull/18014>`_,
  by Hugo Herbelin).
- **Changed:**
  Declarations of the form :g:`(id := body)` in :cmd:`Context` outside a
  section in a :cmd:`Module Type` do not any more try to declare a class
  instance. Assumptions whose type is a class and declared using
  :cmd:`Context` outside a section in a :cmd:`Module Type` are now
  declared as global, instead of local
  (`#18254 <https://github.com/rocq-prover/rocq/pull/18254>`_,
  by Hugo Herbelin).
- **Fixed:**
  Anomaly in the presence of duplicate variables within a disjunctive pattern
  (`#17857 <https://github.com/rocq-prover/rocq/pull/17857>`_ and `#18005 <https://github.com/rocq-prover/rocq/pull/18005>`_,
  fixes `#17854 <https://github.com/rocq-prover/rocq/issues/17854>`_ and `#18004 <https://github.com/rocq-prover/rocq/issues/18004>`_,
  by Hugo Herbelin).
- **Fixed:**
  Printing of constructors and of :g:`in` clause of :g:`match` now respects the
  :flag:`Printing Implicit` and :flag:`Printing All` flags
  (`#18176 <https://github.com/rocq-prover/rocq/pull/18176>`_,
  fixes `#18163 <https://github.com/rocq-prover/rocq/issues/18163>`_,
  by Hugo Herbelin).
- **Fixed:**
  Wrong shift of argument names when using :cmd:`Arguments` in nested sections
  (`#18393 <https://github.com/rocq-prover/rocq/pull/18393>`_,
  fixes `#12755 <https://github.com/rocq-prover/rocq/issues/12755>`_
  and `#18392 <https://github.com/rocq-prover/rocq/issues/18392>`_,
  by Hugo Herbelin).

Notations
^^^^^^^^^

- **Changed:**
  More informative message when a notation cannot be intepreted as a reference
  (`#18104 <https://github.com/rocq-prover/rocq/pull/18104>`_,
  addresses `#18096 <https://github.com/rocq-prover/rocq/issues/18096>`_,
  by Hugo Herbelin).
- **Changed:**
  In casts like :g:`term : t` where :g:`t` is bound to some
  scope :g:`t_scope`, via :cmd:`Bind Scope`, the :g:`term` is now
  interpreted in scope :g:`t_scope`. In particular when :g:`t`
  is :g:`Type` the :g:`term` is interpreted in :g:`type_scope`
  and when :g:`t` is a product the :g:`term` is interpreted
  in :g:`fun_scope`
  (`#6134 <https://github.com/rocq-prover/rocq/pull/6134>`_,
  fixes `#14959 <https://github.com/rocq-prover/rocq/issues/14959>`_,
  by Hugo Herbelin, reviewed by Maxime Dénès, Jim Fehrle, Emilio Gallego, Gaëtan Gilbert, Jason Gross, Pierre-Marie Pédrot, Pierre Roux, Bas Spitters and Théo Zimmermann).
- **Added:**
  the notation :g:`term%_scope` to set a scope only temporarily
  (in addition to :g:`term%scope` for opening a
  scope applying to all subterms)
  (`#14928 <https://github.com/rocq-prover/rocq/pull/14928>`_,
  fixes `#11486 <https://github.com/rocq-prover/rocq/issues/11486>`_
  and `#12157 <https://github.com/rocq-prover/rocq/issues/12157>`_
  and `#14305 <https://github.com/rocq-prover/rocq/issues/14305>`_,
  by Hugo Herbelin, reviewed by Pierre Roux).
- **Removed**
  the ability to declare scopes whose name starts with `_`
  (would be ambiguous with the new :g:`%_scope` notation)
  (`#14928 <https://github.com/rocq-prover/rocq/pull/14928>`_,
  by Pierre Roux, reviewed by Hugo Herbelin).
- **Deprecated**
  the notation :n:`term%scope` in :cmd:`Arguments` command.
  In a few version, we'll make it an error and in next version give it
  the same semantics as in terms (i.e., deep scope opening for all
  subterms rather than just temporary opening)
  (`#14928 <https://github.com/rocq-prover/rocq/pull/14928>`_,
  fixes `#11486 <https://github.com/rocq-prover/rocq/issues/11486>`_
  and `#12157 <https://github.com/rocq-prover/rocq/issues/12157>`_
  and `#14305 <https://github.com/rocq-prover/rocq/issues/14305>`_,
  by Hugo Herbelin, reviewed by Pierre Roux).
- **Added:**
  Quoted strings can be used as tokens in notations; double quotes can be
  used in symbols in :g:`only printing` notations; see :ref:`Basic notations <BasicNotations>`
  for details (`#17123 <https://github.com/rocq-prover/rocq/pull/17123>`_, by Hugo
  Herbelin).
- **Added:**
  Parsing support for notations with recursive binders involving not only
  variables bound by :n:`fun` or :n:`forall` but also by :n:`let` or
  :n:`match`
  (`#17856 <https://github.com/rocq-prover/rocq/pull/17856>`_,
  fixes `#17845 <https://github.com/rocq-prover/rocq/issues/17845>`_,
  by Hugo Herbelin).
- **Added:**
  Declaring more than once the level of a notation variable is now an error
  (`#17988 <https://github.com/rocq-prover/rocq/pull/17988>`_,
  fixes `#17985 <https://github.com/rocq-prover/rocq/issues/17985>`_,
  by Hugo Herbelin).
- **Fixed:**
  Various bugs and limitations to using custom binders in non-recursive and recursive notations
  (`#17115 <https://github.com/rocq-prover/rocq/pull/17115>`_,
  fixes parts of `#17094 <https://github.com/rocq-prover/rocq/issues/17094>`_,
  by Hugo Herbelin).
- **Fixed:**
  An invalid case of eta-expansion in notation pretty-printer
  (`#17841 <https://github.com/rocq-prover/rocq/pull/17841>`_,
  fixes `#15221 <https://github.com/rocq-prover/rocq/issues/15221>`_,
  by Hugo Herbelin).
- **Fixed:**
  :flag:`Printing Parentheses` now works also when an explicit level is
  set for the right-hand side of a right-open notation
  (`#17844 <https://github.com/rocq-prover/rocq/pull/17844>`_,
  fixes `#15322 <https://github.com/rocq-prover/rocq/issues/15322>`_,
  by Hugo Herbelin).
- **Fixed:**
  anomaly when a notation variable denoting a binder occurs nested
  more than once in a recursive pattern (`#17861
  <https://github.com/rocq-prover/rocq/pull/17861>`_, fixes `#17860
  <https://github.com/rocq-prover/rocq/issues/17860>`_, by Hugo Herbelin).
- **Fixed:**
  Anomaly when trying to disable a non-existent custom notation
  (`#17891 <https://github.com/rocq-prover/rocq/pull/17891>`_,
  fixes `#17782 <https://github.com/rocq-prover/rocq/issues/17782>`_,
  by Hugo Herbelin).
- **Fixed:**
  appropriate error instead of anomaly in the presence of notations
  with constructors applied to too many arguments in pattern-matching
  (`#17892 <https://github.com/rocq-prover/rocq/pull/17892>`_,
  fixes `#17071 <https://github.com/rocq-prover/rocq/issues/17071>`_,
  by Hugo Herbelin).
- **Fixed:**
  support constructors with parameters in number or string notations for patterns
  (`#17902 <https://github.com/rocq-prover/rocq/pull/17902>`_,
  fixes `#11237 <https://github.com/rocq-prover/rocq/issues/11237>`_,
  by Hugo Herbelin).
- **Fixed:**
  Chains of entry coercions possibly printed in the wrong order depending
  on the order in which they were declared
  (`#18230 <https://github.com/rocq-prover/rocq/pull/18230>`_,
  fixes `#18223 <https://github.com/rocq-prover/rocq/issues/18223>`_,
  by Hugo Herbelin).

Tactics
^^^^^^^

- **Changed:**
  `open_constr` in Ltac1 and Ltac2 does not perform evar normalization.
  Normalization may be recovered using `let c := open_constr:(...) in constr:(c)`
  if necessary for performance
  (`#17704 <https://github.com/rocq-prover/rocq/pull/17704>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :tacn:`abstract` now supports existential variables
  (`#17745 <https://github.com/rocq-prover/rocq/pull/17745>`_,
  by Gaëtan Gilbert).
- **Changed:**
  instances declared with :flag:`Typeclasses Unique Instances` do not allow backtracking even when the goal contains evars
  (`#17789 <https://github.com/rocq-prover/rocq/pull/17789>`_,
  fixes `#6714 <https://github.com/rocq-prover/rocq/issues/6714>`_,
  by Jan-Oliver Kaiser).
- **Changed:**
  In :tacn:`rewrite_strat`, the syntax for the :g:`choice` strategy has
  changed slightly.  You may need to add parentheses around its arguments
  (one such case found in our continuous integration tests)
  (`#17832 <https://github.com/rocq-prover/rocq/pull/17832>`_,
  by Hugo Herbelin, Jim Fehrle and Jason Gross).
- **Changed:**
  :tacn:`replace` with `by tac` does not automatically attempt to solve
  the generated equality subgoal using the hypotheses.
  Use `by first [assumption | symmetry;assumption | tac]`
  if you need the previous behaviour
  (`#17964 <https://github.com/rocq-prover/rocq/pull/17964>`_,
  fixes `#17959 <https://github.com/rocq-prover/rocq/issues/17959>`_,
  by Gaëtan Gilbert).
- **Changed:**
  ``Z.euclidean_division_equations_cleanup`` now breaks up hypotheses of the
  form `0 <= _ < _` for better cleanup in ``zify``
  (`#17984 <https://github.com/rocq-prover/rocq/pull/17984>`_,
  by Jason Gross).
- **Changed:**
  :tacn:`simpl` now refolds applied constants unfolding to reducible
  fixpoints into the original constant even when this constant
  would become partially applied
  (`#17991 <https://github.com/rocq-prover/rocq/pull/17991>`_,
  by Hugo Herbelin).
- **Added:**
  Ltac2 tactic `Std.resolve_tc` to resolve typeclass evars appearing in a given term
  (`#13071 <https://github.com/rocq-prover/rocq/pull/13071>`_,
  by Gaëtan Gilbert and Maxime Dénès).
- **Added:**
  :tacn:`lazy`, :tacn:`simpl`, :tacn:`cbn` and :tacn:`cbv` and the associated :cmd:`Eval`
  and :tacn:`eval` reductions learned to do head reduction when given flag `head`
  (eg `Eval lazy head in (fun x => Some ((fun y => y) x)) 0` produces `Some ((fun y => y) 0)`)
  (`#17503 <https://github.com/rocq-prover/rocq/pull/17503>`_,
  by Gaëtan Gilbert; :tacn:`cbv` case added in `#18190 <https://github.com/rocq-prover/rocq/pull/18190>`_,
  by Hugo Herbelin).
- **Fixed:**
  ensure that opaque primitive projections are correctly handled by "Evarconv"
  unification
  (`#17788 <https://github.com/rocq-prover/rocq/pull/17788>`_,
  fixes `#17774 <https://github.com/rocq-prover/rocq/issues/17774>`_,
  by Rodolphe Lepigre).
- **Fixed:**
  Useless duplications with :cmd:`Hint Cut` and :cmd:`Hint Mode`
  (`#17887 <https://github.com/rocq-prover/rocq/pull/17887>`_,
  fixes `#17417 <https://github.com/rocq-prover/rocq/issues/17417>`_,
  by Hugo Herbelin).
- **Fixed:**
  `zify` / `Z.euclidean_division_equations_cleanup` now no longer instantiates
  dependent hypotheses.  This will by necessity make
  `Z.to_euclidean_division_equations` a bit weaker, but the previous behavior
  was overly sensitive to hypothesis ordering.  See `#17935
  <https://github.com/rocq-prover/rocq/pull/17935>`_ for a recipe to recapture the power
  of the previous behavior in a more robust albeit slower way (`#17935
  <https://github.com/rocq-prover/rocq/pull/17935>`_, fixes `#17936
  <https://github.com/rocq-prover/rocq/issues/17936>`_, by Jason Gross).
- **Fixed:**
  :tacn:`simpl` now working on reducible named mutual fixpoints with parameters
  (`#17993 <https://github.com/rocq-prover/rocq/pull/17993>`_,
  fixes `#12521 <https://github.com/rocq-prover/rocq/issues/12521>`_
  and part of `#3488 <https://github.com/rocq-prover/rocq/issues/3488>`_,
  by Hugo Herbelin).
- **Fixed:**
  support for reasoning up to polymorphic universe variables in
  :tacn:`congruence` and :tacn:`f_equal`
  (`#18106 <https://github.com/rocq-prover/rocq/pull/18106>`_,
  fixes `#5481 <https://github.com/rocq-prover/rocq/issues/5481>`_
  and `#9979 <https://github.com/rocq-prover/rocq/issues/9979>`_,
  by Hugo Herbelin).
- **Fixed:**
  Only run zify saturation on existing hypotheses of the goal
  (`#18152 <https://github.com/rocq-prover/rocq/pull/18152>`_,
  fixes `#18151 <https://github.com/rocq-prover/rocq/issues/18151>`_,
  by Frédéric Besson and Rodolphe Lepigre).
- **Fixed:**
  A stack overflow due to a non-tail recursive function in `lia`
  (`#18159 <https://github.com/rocq-prover/rocq/pull/18159>`_,
  fixes `#18158 <https://github.com/rocq-prover/rocq/issues/18158>`_,
  by Jan-Oliver Kaiser and Rodolphe Lepigre).
- **Fixed:**
  Apply substitution in Case stack node for cbv reify
  (`#18195 <https://github.com/rocq-prover/rocq/pull/18195>`_,
  fixes `#18194 <https://github.com/rocq-prover/rocq/issues/18194>`_,
  by Yann Leray).
- **Fixed:**
  Anomaly of :tacn:`simpl` on partially applied named mutual fixpoints
  (`#18243 <https://github.com/rocq-prover/rocq/pull/18243>`_,
  fixes `#18239 <https://github.com/rocq-prover/rocq/issues/18239>`_,
  by Hugo Herbelin).

- **Changed:**
  :tacn:`simpl` tries to reduce named mutual fixpoints also when they return functions
  (`#18243 <https://github.com/rocq-prover/rocq/pull/18243>`_,
  by Hugo Herbelin).

Ltac language
^^^^^^^^^^^^^
- **Fixed:**
  Fix broken "r <num>" and "r <string>" commands in the coqtop
  Ltac debugger, which also affected the Proof General Ltac debugger
  (`#18068 <https://github.com/rocq-prover/rocq/pull/18068>`_,
  fixes `#18067 <https://github.com/rocq-prover/rocq/issues/18067>`_,
  by Jim Fehrle).

.. _819Ltac2:

Ltac2 language
^^^^^^^^^^^^^^
- **Changed:**
  `Array.empty`, `Message.Format.stop` and `Pattern.empty_context` are not thunked
  (`#17534 <https://github.com/rocq-prover/rocq/pull/17534>`_,
  by Gaëtan Gilbert).
- **Changed:**
  Ltac2 `exact` and `eexact` elaborate their argument using the type of the goal as expected type,
  instead of elaborating with no expected type then unifying the resulting type with the goal
  (`#18157 <https://github.com/rocq-prover/rocq/pull/18157>`_,
  fixes `#12827 <https://github.com/rocq-prover/rocq/issues/12827>`_,
  by Gaëtan Gilbert).
- **Changed:**
  argument order for the Ltac2 combinators `List.fold_left` `List.fold_right`
  and `Array.fold_right` changed to be the same as in OCaml
  (`#18197 <https://github.com/rocq-prover/rocq/pull/18197>`_,
  fixes `#16485 <https://github.com/rocq-prover/rocq/issues/16485>`_,
  by Gaëtan Gilbert).
- **Changed:**
  `Ltac2.Std.red_flags` added field `rStrength` to support head-only reduction
  (`#18273 <https://github.com/rocq-prover/rocq/pull/18273>`_,
  fixes `#18209 <https://github.com/rocq-prover/rocq/issues/18209>`_,
  by Gaëtan Gilbert).
- **Added:**
  Ltac2 supports pattern quotations when building `pattern` values.
  This allows building dynamic patterns, eg `Ltac2 eq_pattern a b := pattern:($pattern:a = $pattern:b)`
  (`#17667 <https://github.com/rocq-prover/rocq/pull/17667>`_,
  by Gaëtan Gilbert).
- **Added:**
  new standard library modules `Ltac2.Unification` and `Ltac2.TransparentState`
  providing access to "Evarconv" unification, including the configuration of the
  transparency state
  (`#17777 <https://github.com/rocq-prover/rocq/pull/17777>`_,
  by Rodolphe Lepigre).
- **Added:**
  ``Ltac2.Constr.is_float``, ``Ltac2.Constr.is_uint63``, ``Ltac2.Constr.is_array``
  (`#17894 <https://github.com/rocq-prover/rocq/pull/17894>`_,
  by Jason Gross).
- **Added:**
  new Ltac2 standard library modules `Ltac2.Ref`, `Ltac2.Lazy` and `Ltac2.RedFlags`
- **Added:**
  new Ltac2 standard library functions to `Ltac2.Control`, `Ltac2.Array`, and
  `Ltac2.List`
  (`#18095 <https://github.com/rocq-prover/rocq/pull/18095>`_,
  fixes `#10112 <https://github.com/rocq-prover/rocq/issues/10112>`_,
  by Rodolphe Lepigre).
- **Added:**
  Support for the ``setoid_rewrite`` tactic
  (`#18102 <https://github.com/rocq-prover/rocq/pull/18102>`_,
  by quarkcool).
- **Added:**
  :cmd:`Ltac2 Globalize` and :cmd:`Ltac2 Check` useful to investigate the expansion of Ltac2 notations
  (`#18139 <https://github.com/rocq-prover/rocq/pull/18139>`_,
  by Gaëtan Gilbert).
- **Added:**
  A new flag :flag:`Ltac2 In Ltac1 Profiling` (unset by default) to control
  whether Ltac2 stack frames are included in Ltac profiles
  (`#18293 <https://github.com/rocq-prover/rocq/pull/18293>`_,
  by Rodolphe Lepigre).
- **Added:**
  `Ltac2.Message.Format.ikfprintf` useful to implement conditional printing
  efficiently (i.e. without building an unused message when not printing)
  (`#18311 <https://github.com/rocq-prover/rocq/pull/18311>`_,
  fixes `#18292 <https://github.com/rocq-prover/rocq/issues/18292>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Ltac2 mutable references are not considered values anymore
  (`#18082 <https://github.com/rocq-prover/rocq/pull/18082>`_,
  by Gaëtan Gilbert).

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  :cmd:`Let` with :cmd:`Qed` produces an opaque side definition
  instead of being treated as a transparent `let` after the section is closed.
  The previous behaviour can be recovered using :attr:`clearbody` and :cmd:`Defined`
  (`#17576 <https://github.com/rocq-prover/rocq/pull/17576>`_,
  by Gaëtan Gilbert).
- **Changed:**
  automatic lowering of record types to `Prop` now matches the behavior for inductives:
  no lowering when universe polymorphism is on, more lowering with recursive records
  (`#17795 <https://github.com/rocq-prover/rocq/pull/17795>`_,
  fixes `#17801 <https://github.com/rocq-prover/rocq/issues/17801>`_
  and `#17796 <https://github.com/rocq-prover/rocq/issues/17796>`_
  and `#17801 <https://github.com/rocq-prover/rocq/issues/17801>`_
  and `#17805 <https://github.com/rocq-prover/rocq/issues/17805>`_,
  by Gaëtan Gilbert).
- **Added:**
  :opt:`Extraction Output Directory` option for specifying the
  directory in which extracted files are written
  (`#16126 <https://github.com/rocq-prover/rocq/pull/16126>`_,
  fixes `#9148 <https://github.com/rocq-prover/rocq/issues/9148>`_,
  by Ali Caglayan).
- **Added:**
  `-profile` command line argument and `PROFILE` variable in `coq_makefile` to control a new :ref:`profiling` system
  (`#17702 <https://github.com/rocq-prover/rocq/pull/17702>`_,
  by Gaëtan Gilbert).
- **Added:**
  new command modifier :cmd:`Instructions` that executes the given command and
  displays the number of CPU instructions it took to execute it. This command
  is currently only supported on Linux systems, but it does not fail on other
  systems, where it simply shows an error message instead of the count.
  (`#17744 <https://github.com/rocq-prover/rocq/pull/17744>`_,
  by Rodolphe Lepigre).
- **Added:**
  support for instruction counts to the `-profile` option.
  (`#17744 <https://github.com/rocq-prover/rocq/pull/17744>`_,
  by Rodolphe Lepigre).
- **Added:**
  New command :cmd:`Attributes` to assign attributes such as
  :attr:`deprecated` to a library file
  (`#18193 <https://github.com/rocq-prover/rocq/pull/18193>`_,
  fixes `#8032 <https://github.com/rocq-prover/rocq/issues/8032>`_,
  by Hugo Herbelin).
- **Fixed:**
  Anomaly with :cmd:`Search` in the context of a goal
  (`#17987 <https://github.com/rocq-prover/rocq/pull/17987>`_,
  fixes `#17963 <https://github.com/rocq-prover/rocq/issues/17963>`_,
  by Hugo Herbelin).
- **Fixed:**
  The printer for :cmd:`Guarded` was possibly raising an anomaly
  in the presence of existential variables
  (`#18008 <https://github.com/rocq-prover/rocq/pull/18008>`_,
  fixes `#18006 <https://github.com/rocq-prover/rocq/issues/18006>`_,
  by Hugo Herbelin).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Changed:**
  Add a `coqdep` option `-w` to adjust warnings and allow turning then into
  errors like the corresponding `coqc` option
  (`#17946 <https://github.com/rocq-prover/rocq/pull/17946>`_,
  fixes `#10156 <https://github.com/rocq-prover/rocq/issues/10156>`_,
  by David Swasey and Rodolphe Lepigre).
- **Fixed:**
  properly delayed variable expansion when `coq_makefile` uses
  the combined rule for `.vo` and `.glob` targets,
  i.e. on GNU Make 4.4 and later.
  (`#18077 <https://github.com/rocq-prover/rocq/pull/18077>`_,
  fixes `#18076 <https://github.com/rocq-prover/rocq/issues/18076>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Spurious `coqdep` warnings due to missing path normalization for plugins
  (`#18165 <https://github.com/rocq-prover/rocq/pull/18165>`_,
  by Rodolphe Lepigre).
- **Fixed:**
  Regression in option :g:`--external` of `coqdoc`, whose two arguments
  were inadvertently swapped
  (`#18448 <https://github.com/rocq-prover/rocq/pull/18448>`_,
  fixes `#18434 <https://github.com/rocq-prover/rocq/issues/18434>`_,
  by Hugo Herbelin).

.. _819Stdlib:

Standard library
^^^^^^^^^^^^^^^^

- **Changed:**
  reimplemented `Ncring_tac` reification (used by :tacn:`nsatz`, `cring`, but not :tacn:`ring`)
  in Ltac instead of typeclasses
  (`#18325 <https://github.com/rocq-prover/rocq/pull/18325>`_,
  by Gaëtan Gilbert).
- **Removed:** :g:`Numbers.Cyclic.ZModulo` from the standard library. This
  file was deprecated in 8.17 and has no known use cases. It is retained in
  the test suite to ensure consistency of :g:`CyclicAxioms`
  (`#17258 <https://github.com/rocq-prover/rocq/pull/17258>`_,
  by Andres Erbsen).
- **Removed:** :g:`ZArith.Zdigits` in favor of :g:`Z.testbit`
  (`#18025 <https://github.com/rocq-prover/rocq/pull/18025>`_,
  by Andres Erbsen).
- **Removed:**
  long deprecated files in `Arith`: `Div2.v`, `Even.v`, `Gt.v`,
  `Le.v`, `Lt.v`, `Max.v`, `Minus.v`, `Min.v`, `Mult.v`, `Plus.v`,
  `Arith_prebase.v`
  (`#18164 <https://github.com/rocq-prover/rocq/pull/18164>`_,
  by Pierre Rousselin).
- **Deprecated:** :g:`NArith.Ndigits` and :g:`NArith.Ndist` due to disuse.
  For most uses of `Ndigits`, `N.testbit` and similar functions seem more
  desirable. If you would like to continue using these files, please consider
  volunteering to maintain them, within stdlib or otherwise
  (`#17732 <https://github.com/rocq-prover/rocq/pull/17732>`_,
  by Andres Erbsen).
- **Deprecated:** :g:`Strings.ByteVector` in favor of :g:`Init.Byte`
  (`#18022 <https://github.com/rocq-prover/rocq/pull/18022>`_,
  by Andres Erbsen).
- **Deprecated:** :g:`Numbers.NaryFunctions` due to disuse. If you are
  interested in continuting to use this module, please consider volunteering to
  maintain it, in stdlib or otherwise
  (`#18026 <https://github.com/rocq-prover/rocq/pull/18026>`_,
  by Andres Erbsen).
- **Added:**
  Lemma `cardinal_Add_In` says that inserting an existing key with a new
  value doesn't change the size of a map, lemma `Add_transpose_neqkey` says
  that unequal keys can be inserted into a map in any order
  (`#12096 <https://github.com/rocq-prover/rocq/pull/12096>`_,
  by Isaac van Bakel and Jean-Christophe Léchenet).
- **Added:**
  lemmas :g:`app_eq_cons`, :g:`app_inj_pivot` and :g:`rev_inj`
  (`#17787 <https://github.com/rocq-prover/rocq/pull/17787>`_,
  by Stefan Haan, with help of Olivier Laurent).
- **Added:**
  ``unfold_nth_error``, ``nth_error_nil``, ``nth_error_cons``, ``nth_error_O``,
  ``nth_error_S`` to ``Coq.Lists.List``
  (`#17998 <https://github.com/rocq-prover/rocq/pull/17998>`_,
  by Jason Gross).
- **Added:**
  ``Reflexive``, ``Symmetric``, ``Transitive``, ``Antisymmetric``,
  ``Asymmetric`` instances for ``Rle``, ``Rge``, ``Rlt``, ``Rgt``
  (`#18059 <https://github.com/rocq-prover/rocq/pull/18059>`_,
  by Jason Gross).

Extraction
^^^^^^^^^^

- **Fixed:**
  In the error message about extraction of sort-polymorphic
  singleton inductive types, do not specifically refer to OCaml as
  other languages are also concerned
  (`#17889 <https://github.com/rocq-prover/rocq/pull/17889>`_,
  fixes `#17817 <https://github.com/rocq-prover/rocq/issues/17817>`_,
  by Hugo Herbelin).

Changes in 8.19.1
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

- **Fixed:**
  incorrect abstraction of sort variables for opaque constants
  leading to an inconsistency
  (`#18596 <https://github.com/rocq-prover/rocq/pull/18596>`_
  and `#18630 <https://github.com/rocq-prover/rocq/pull/18630>`_,
  fixes `#18594 <https://github.com/rocq-prover/rocq/issues/18594>`_,
  by Gaëtan Gilbert).

- **Fixed:**
  memory corruption with :tacn:`vm_compute` (rare but more likely with OCaml 5.1)
  (`#18599 <https://github.com/rocq-prover/rocq/pull/18599>`_,
  by Guillaume Melquiond).

Notations
^^^^^^^^^

- **Changed:**
  :warn:`Found no matching notation to enable or disable` is a warning instead of an error
  (`#18670 <https://github.com/rocq-prover/rocq/pull/18670>`_,
  by Pierre Roux).

Tactics
^^^^^^^

- **Fixed:**
  undeclared universe with multiple uses of :tacn:`abstract`
  (`#18640 <https://github.com/rocq-prover/rocq/pull/18640>`_,
  fixes `#18636 <https://github.com/rocq-prover/rocq/issues/18636>`_,
  by Gaëtan Gilbert).

Ltac2 language
^^^^^^^^^^^^^^

- **Fixed:**
  incorrect printing of constructor values with multiple arguments,
  and over-parenthesizing of constructor printing
  (`#18560 <https://github.com/rocq-prover/rocq/pull/18560>`_,
  fixes `#18556 <https://github.com/rocq-prover/rocq/issues/18556>`_,
  by Gaëtan Gilbert).

- **Fixed:**
  incorrect declared type for `Ltac2.FMap.fold`
  (`#18649 <https://github.com/rocq-prover/rocq/pull/18649>`_,
  fixes `#18635 <https://github.com/rocq-prover/rocq/issues/18635>`_,
  by Gaëtan Gilbert).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Fixed:**
  missing `conf-` dependencies of the opam packages:
  `coq-core` depends on `conf-linux-libc-dev` when compiled on linux,
  and `coq` depends on `conf-python-3` and `conf-time` to run the test suite
  (`#18565 <https://github.com/rocq-prover/rocq/pull/18565>`_,
  by Gaëtan Gilbert).

- **Fixed:**
  avoid comitting symlinks to git which caused build failures on some Windows setups
  (`#18550 <https://github.com/rocq-prover/rocq/pull/18550>`_,
  fixes `#18548 <https://github.com/rocq-prover/rocq/issues/18548>`_,
  by Gaëtan Gilbert).

Changes in 8.19.2
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Fixed:**
  Regression from Coq 8.18 in the presence of a defined field in
  a primitive :n:`Record`
  (`#19088 <https://github.com/rocq-prover/rocq/pull/19088>`_,
  fixes `#19082 <https://github.com/rocq-prover/rocq/issues/19082>`_,
  by Hugo Herbelin).

Notations
^^^^^^^^^

- **Fixed:**
  Printer sometimes failing to use a prefix or infix custom notation
  whose right-hand side refers to a different custom entry
  (`#18089 <https://github.com/rocq-prover/rocq/pull/18089>`_,
  fixes `#18914 <https://github.com/rocq-prover/rocq/issues/18914>`_,
  by Hugo Herbelin).

Tactics
^^^^^^^

- **Fixed:**
  :tacn:`abstract` failing in the presence of admitted goals in the surrounding proof
  (`#18945 <https://github.com/rocq-prover/rocq/pull/18944>`_,
  fixes `#18942 <https://github.com/rocq-prover/rocq/issues/18942>`_,
  by Gaëtan Gilbert).

Ltac2 language
^^^^^^^^^^^^^^

- **Fixed:**
  anomalies when using Ltac2 in VsCoq due to incorrect state handling of Ltac2 notations
  (`#19096 <https://github.com/rocq-prover/rocq/pull/19096>`_,
  fixes `coq-community/vscoq#772 <https://github.com/coq-community/vscoq/issues/772>`_,
  by Gaëtan Gilbert)

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Fixed:**
  anomaly when using :cmd:`Include` on a module containing a record
  declared with :flag:`Primitive Projections`
  (`#18772 <https://github.com/rocq-prover/rocq/pull/18772>`_,
  fixes `#18769 <https://github.com/rocq-prover/rocq/issues/18769>`_,
  by Jan-Oliver Kaiser)

- **Fixed:**
  anomaly from :cmd:`Fixpoint` with no arguments
  (`#18741 <https://github.com/rocq-prover/rocq/pull/18741>`_,
  by Hugo Herbelin)

CoqIDE
^^^^^^

- **Fixed:**
  Position error/warning tooltips correctly when multibyte UTF-8 characters are present
  (`#19137 <https://github.com/rocq-prover/rocq/pull/19137>`_,
  fixes `#19136 <https://github.com/rocq-prover/rocq/issues/19136>`_,
  by Jim Fehrle).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Fixed:**
  compatibility with OCaml versions where `effect` is a keyword
  (`#18863 <https://github.com/rocq-prover/rocq/pull/18863>`_,
  by Remy Seassau)

- **Added:**
  Coq is now compatible with `memprof-limits` interruption
  methods. This means that Coq will be recompiled when the library is
  installed / removed from an OPAM switch.
  (`#18906 <https://github.com/rocq-prover/rocq/pull/18906>`_,
  fixes `#17760 <https://github.com/rocq-prover/rocq/issues/17760>`_,
  by Emilio Jesus Gallego Arias).

Version 8.18
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.18 integrates two soundness fixes to the Coq kernel along
with a host of improvements. We highlight a few impactful changes:

  - the default :ref:`locality <818HintLocality>` of `Hint` and :cmd:`Instance`
    commands was switched to :attr:`export`.
  - the universe unification algorithm can now delay the commitment to a
    sort (the algorithm used to pick `Type`). Thanks to this feature many `Prop`
    and `SProp` annotations can be now omitted.
  - Ltac2 supports array literals, maps and sets of primitive datatypes such
    as names (of constants, inductive types, etc) and fine-grained
    control over profiling.
  - The warning system offers new categories, enabling finer (de)activation of specific warnings.
    This should be particularly useful to handle deprecations.
  - Many new lemmas useful for teaching analysis with Coq are now part of
    the standard library about real numbers.
  - The `#[deprecated]` attribute can now be applied to definitions.

The 41 contributors to the 8.18 version are:
Reynald Affeldt, Tanaka Akira, Matthieu Baty, Yves Bertot,
Lasse Blaauwbroek, Ana Borges, Kate Deplaix, Ali Caglayan, Cyril Cohen, Maxime Dénès,
Andrej Dudenhefner, Andres Erbsen, Jim Fehrle, Yannick Forster,
Paolo G. Giarrusso, Gaëtan Gilbert, Jason Gross, Samuel Gruetter,
Stefan Haan, Hugo Herbelin, Yoshihiro Imai, Emilio Jesús Gallego Arias,
Olivier Laurent, Meven Lennon-Bertrand, Rodolphe Lepigre, Yishuai Li,
Guillaume Melquiond, Karl Palmskog, Pierre-Marie Pédrot, Stefan Radziuk,
Ramkumar Ramachandra, Pierre Rousselin, Pierre Roux, Julin Shaji,
Kazuhiko Sakaguchi, Weng Shiwei, Michael Soegtrop, Matthieu Sozeau,
Enrico Tassi, Hao Yang, Théo Zimmermann.

We are very grateful to the Coq community for their help in creating 8.18
in the 6 months since the release of
Coq 8.17.0. Maxime Dénès and Enrico Tassi were the release managers.

| Sophia-Antipolis, September 2023,
| Enrico Tassi for the Coq development team

Changes in 8.18.0
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

- **Changed:**
  the `bad-relevance` warning is now an error by default
  (`#17172 <https://github.com/rocq-prover/rocq/pull/17172>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  the kernel now checks that case elimination of private inductive types (cf :attr:`private(matching)`) is not used outside their defining module.
  Previously this was only checked in elaboration and the check could be avoided through some tactics, breaking consistency in the presence of axioms which rely on the elimination restriction to be consistent
  (`#17452 <https://github.com/rocq-prover/rocq/pull/17452>`_,
  fixes `#9608 <https://github.com/rocq-prover/rocq/issues/9608>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  a bug enabling :tacn:`native_compute` to yield arbitrary floating-point values
  (`#17872 <https://github.com/rocq-prover/rocq/pull/17872>`_,
  fixes `#17871 <https://github.com/rocq-prover/rocq/issues/17871>`_,
  by Guillaume Melquiond and Pierre Roux, bug found by Jason Gross).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  enhance the universe unification algorithm, which is now
  able to delay the definition of a sort. This allows omitting
  some explicit `Prop` and `SProp` annotations when writing terms.
  Some minor backwards compatibility issues can arise in rare cases,
  which can be solved with more explicit sort annotations
  (`#16903 <https://github.com/rocq-prover/rocq/pull/16903>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  match compilation for primitive record avoids producing an encoding overhead for matches that are equivalent to a primitive projection
  (`#17008 <https://github.com/rocq-prover/rocq/pull/17008>`_,
  by Gaëtan Gilbert).
- **Added:**
  volatile casts :n:`@term :> @type` which do not leave a trace in the elaborated term.
  They are used by :flag:`Printing Match All Subterms` to display otherwise hidden subterms of match constructs
  (`#16992 <https://github.com/rocq-prover/rocq/pull/16992>`_,
  fixes `#16918 <https://github.com/rocq-prover/rocq/issues/16918>`_,
  by Gaëtan Gilbert).
- **Added:**
  when printing uninterpreted terms (for instance through :cmd:`Print Ltac` on `Ltac foo := exact some_term`),
  extensions to the term language (for instance :ref:`tactics-in-terms`) are now printed correctly instead of as holes (`_`)
  (`#17221 <https://github.com/rocq-prover/rocq/pull/17221>`_,
  by Gaëtan Gilbert).
- **Added:**
  Support for the :attr:`local`, :attr:`global` and :attr:`export`
  locality attributes for the single "field" of :ref:`definitional
  typeclasses <singleton-class>` when using the ``:>`` and ``::``
  syntaxes for coercion and substructures
  (`#17754 <https://github.com/rocq-prover/rocq/pull/17754>`_,
  fixes `#17451 <https://github.com/rocq-prover/rocq/issues/17451>`_,
  by Pierre Roux).
- **Added:**
  a hook in the coercion mechanism to enable programming coercions in
  external metalanguages such as Ltac, Ltac2, Elpi or OCaml plugins
  (`#17794 <https://github.com/rocq-prover/rocq/pull/17794>`_,
  by Pierre Roux).
- **Fixed:**
  canonical instance matching `match` terms
  (`#17206 <https://github.com/rocq-prover/rocq/pull/17206>`_,
  fixes `#17079 <https://github.com/rocq-prover/rocq/issues/17079>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  universe constraint inference in module subtyping can trigger constant unfoldings
  (`#17305 <https://github.com/rocq-prover/rocq/pull/17305>`_,
  fixes `#17303 <https://github.com/rocq-prover/rocq/issues/17303>`_,
  by Gaëtan Gilbert).

Notations
^^^^^^^^^

- **Removed:**
  The `\'[=\'` keyword. `\'[=\'`
  tokens in notation definitions should be replaced with the pair of
  tokens `\'[\' \'=\'`. If compatibility with Coq < 8.18
  is needed, replace `[=` in uses of the notation with
  an added space (`[ =`)
  (`#16788 <https://github.com/rocq-prover/rocq/pull/16788>`_,
  fixes `#16785 <https://github.com/rocq-prover/rocq/issues/16785>`_,
  by Pierre Roux).
- **Added:**
  Support for :flag:`Printing Parentheses` in custom notations
  (`#17117 <https://github.com/rocq-prover/rocq/pull/17117>`_, by Hugo
  Herbelin).
- **Added:**
  Improve printing of reverse coercions. When a term :g:`x`
  is elaborated to :g:`x'` through a reverse coercion,
  return the term :g:`reverse_coercion x' x` that is convertible
  to :g:`x'` but displayed :g:`x` thanks to the coercion
  :g:`reverse_coercion`
  (`#17484 <https://github.com/rocq-prover/rocq/pull/17484>`_,
  by Pierre Roux).
- **Fixed:**
  Add support to parse a recursive pattern as a sequence of terms in a
  recursive notation even when this recursive pattern is used in
  position of binders; it was formerly raising an anomaly (`#16937
  <https://github.com/rocq-prover/rocq/pull/16937>`_, fixes `#12467
  <https://github.com/rocq-prover/rocq/issues/12467>`_, by Hugo Herbelin).
- **Fixed:**
  Improved ability to print notations involving anonymous binders
  (`#17050 <https://github.com/rocq-prover/rocq/pull/17050>`_,
  by Hugo Herbelin).
- **Fixed:**
  anomaly with notations abbreviating a local variable or record field name
  (`#17217 <https://github.com/rocq-prover/rocq/pull/17217>`_,
  fixes `#14975 <https://github.com/rocq-prover/rocq/issues/14975>`_,
  by Hugo Herbelin).
- **Fixed:**
  Ensure in all cases that a parsing rule is declared when the :n:`only parsing` flag is given
  (`#17318 <https://github.com/rocq-prover/rocq/pull/17317>`_,
  fixes `#17316 <https://github.com/rocq-prover/rocq/issues/17316>`_,
  by Hugo Herbelin).
- **Fixed:**
  In :cmd:`Number Notation`, "abstract after N" was applied when number >= N.
  Now it is applied when number > N
  (`#17478 <https://github.com/rocq-prover/rocq/pull/17478>`_,
  by Jim Fehrle).

Tactics
^^^^^^^

- **Changed:**
  in the fringe case where the ``with`` clause of a call to :tacn:`specialize`
  depends on a variable bound in the type, the tactic will now fail instead of
  silently producing a shelved evar
  (`#17322 <https://github.com/rocq-prover/rocq/pull/17322>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  extensions to the term syntax through generic arguments (typically `ltac:()`, `ltac2:()` or ltac2's `$`)
  produce errors when used in term patterns (for instance patterns used to filter hints) instead of being treated as holes (`_`)
  (`#17352 <https://github.com/rocq-prover/rocq/pull/17352>`_,
  by Gaëtan Gilbert).
- **Changed:**
  the :tacn:`case` tactic and its variants always generate a
  pattern-matching node, regardless of their argument. In
  particular, they are now guaranteed to generate as many goals
  as there are constructors in the inductive type. Previously,
  they used to reduce to the corresponding branch when the argument
  βι-normalized to a constructor, resulting in a single goal
  (`#17541 <https://github.com/rocq-prover/rocq/pull/17541>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  :tacn:`injection` continues working using sigma types when `Eqdep_dec` has not been required even if an equality scheme was found, instead of failing
  (`#17670 <https://github.com/rocq-prover/rocq/pull/17670>`_,
  by Gaëtan Gilbert).
- **Changed:**
  the unification heuristics for implicit arguments of the :tacn:`case` tactic.
  We unconditionally recommend using :tacn:`destruct` instead, and even more so
  in case of incompatibility
  (`#17564 <https://github.com/rocq-prover/rocq/pull/17564>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  the no-argument form of the :tacn:`instantiate` tactic, deprecated since 8.16
  (`#16910 <https://github.com/rocq-prover/rocq/pull/16910>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  undocumented tactics `hresolve_core` and `hget_evar`
  (`#17035 <https://github.com/rocq-prover/rocq/pull/17035>`_,
  by Gaëtan Gilbert).
- **Deprecated:**
  the `elimtype` and `casetype` tactics
  (`#16904 <https://github.com/rocq-prover/rocq/pull/16904>`_,
  by Pierre-Marie Pédrot).
- **Deprecated:**
  `revert dependent`, which is a misleadingly named alias of :tacn:`generalize dependent`
  (`#17669 <https://github.com/rocq-prover/rocq/pull/17669>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  The :tacn:`simpl` tactic now respects the :n:`simpl never` flag even
  when the subject function is referred to through another definition
  (`#13448 <https://github.com/rocq-prover/rocq/pull/13448>`_,
  fixes `#13428 <https://github.com/rocq-prover/rocq/issues/13428>`_,
  by Yves Bertot).
- **Fixed:**
  unification is less sensitive to whether a subterm is
  an indirection through a defined existential variable or a direct term node.
  This results in less constant unfoldings in rare cases
  (`#16960 <https://github.com/rocq-prover/rocq/pull/16960>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  untypable proof states generated by setoid_rewrite, which may cause some backwards-incompatibilities
  (`#17304 <https://github.com/rocq-prover/rocq/pull/17304>`_,
  fixes `#17295 <https://github.com/rocq-prover/rocq/issues/17295>`_,
  by Lasse Blaauwbroek).
- **Fixed:**
  intropatterns destructing a term whose type is a product
  cannot silently create shelved evars anymore. Instead, it
  fails with an unsolvable variable. This can be fixed in a
  backwards compatible way by using the e-variant of the parent
  tactic
  (`#17564 <https://github.com/rocq-prover/rocq/pull/17564>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  the :tacn:`field_simplify` tactic, so that it no longer
  introduces side-conditions when working on a hypothesis
  (`#17591 <https://github.com/rocq-prover/rocq/pull/17591>`_,
  by Guillaume Melquiond).
- **Fixed:**
  the :tacn:`tauto` tactic and its variants now try to match types
  up to universe unification. This makes them compatible with
  universe-polymorphic code
  (`#8905 <https://github.com/rocq-prover/rocq/pull/8905>`_,
  fixes `#4721 <https://github.com/rocq-prover/rocq/issues/4721>`_
  and `#5351 <https://github.com/rocq-prover/rocq/issues/5351>`_,
  by Pierre-Marie Pédrot).

Ltac2 language
^^^^^^^^^^^^^^
- **Added:**
  Support for parsing Ltac2 array literals ``[| ... |]``
  (`#16859 <https://github.com/rocq-prover/rocq/pull/16859>`_,
  fixes `#13976 <https://github.com/rocq-prover/rocq/issues/13976>`_,
  by Samuel Gruetter).
- **Added:**
  Finite set and map APIs for identifier, string, int, constant, inductive and constructor keys
  (`#17347 <https://github.com/rocq-prover/rocq/pull/17347>`_,
  c.f. `#16409 <https://github.com/rocq-prover/rocq/issues/16409>`_,
  by Gaëtan Gilbert).
- **Added:**
  Ltac2 preterm antiquotation `$preterm:`
  (`#17359 <https://github.com/rocq-prover/rocq/pull/17359>`_,
  fixes `#13977 <https://github.com/rocq-prover/rocq/issues/13977>`_,
  by Gaëtan Gilbert).
- **Added:**
  :flag:`Ltac Profiling` also profiles Ltac2 tactics.
  Ltac2 also provides tactics `start_profiling` `stop_profiling` and `show_profile` for finer grained control
  (`#17371 <https://github.com/rocq-prover/rocq/pull/17371>`_,
  fixes `#10111 <https://github.com/rocq-prover/rocq/issues/10111>`_,
  by Gaëtan Gilbert).
- **Added:**
  primitives to build and compare values in `Ltac2.Init.cast`
  (`#17468 <https://github.com/rocq-prover/rocq/pull/17468>`_,
  by Gaëtan Gilbert).
- **Added:**
  It is possible to define 0-argument externals
  (`#17475 <https://github.com/rocq-prover/rocq/pull/17475>`_,
  by Gaëtan Gilbert).
- **Added:**
  Ltac2 quotations :ref:`ltac2val:(ltac2 tactic) <ltac2in1>` in Ltac1 which produce Ltac1 values
  (as opposed to `ltac2:()` quotations which are only useful for their side effects)
  (`#17575 <https://github.com/rocq-prover/rocq/pull/17575>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  nested notations involving :ref:`term-antiquotations`
  (`#17232 <https://github.com/rocq-prover/rocq/pull/17232>`_,
  fixes `#15864 <https://github.com/rocq-prover/rocq/issues/15864>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Parsing level of :g:`by` clause of Ltac2's :g:`assert`
  (`#17508 <https://github.com/rocq-prover/rocq/pull/17508>`_,
  fixes `#17491 <https://github.com/rocq-prover/rocq/issues/17491>`_,
  by Samuel Gruetter).
- **Fixed:**
  `multi_match!`, `multi_match! goal` and the underlying
  `Ltac2.Pattern.multi_match0` and `Ltac2.Pattern.multi_goal_match0`
  now preserve exceptions from backtracking after a branch succeeded
  instead of replacing them with `Match_failure`
  (e.g. `multi_match! constr:(tt) with tt => () end; Control.zero Not_found`
  now fails with `Not_found` instead of `Match_failure`)
  (`#17597 <https://github.com/rocq-prover/rocq/pull/17597>`_,
  fixes `#17594 <https://github.com/rocq-prover/rocq/issues/17594>`_,
  by Gaëtan Gilbert).

Commands and options
^^^^^^^^^^^^^^^^^^^^

 .. _818HintLocality:

- **Changed:**
  the default locality of `Hint` and :cmd:`Instance` commands was
  switched to :attr:`export`
  (`#16258 <https://github.com/rocq-prover/rocq/pull/16258>`_,
  by Pierre-Marie Pédrot).
- **Changed:** warning `non-primitive-record` is now in category
  `records` instead of `record`. This was the only use of `record` but
  the plural version is also used by `cannot-define-projection`
  `future-coercion-class-constructor` and
  `future-coercion-class-field`. (`#16989
  <https://github.com/rocq-prover/rocq/pull/16989>`_, by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Eval` prints information about existential variables like :cmd:`Check`
  (`#17274 <https://github.com/rocq-prover/rocq/pull/17274>`_,
  by Gaëtan Gilbert).
- **Changed:**
  The names of deprecation warnings now depend on the version
  in which they were introduced, using their "since" field.
  This enables deprecation warnings to be selectively enabled,
  disabled, or treated as an error, according to the version number
  provided in the :attr:`deprecated` attribute
  (`#17489 <https://github.com/rocq-prover/rocq/pull/17489>`_,
  fixes `#16287 <https://github.com/rocq-prover/rocq/issues/16287>`_,
  by Pierre Roux, reviewed by Ali Caglayan, Théo Zimmermann and Gaëtan Gilbert).
- **Changed:**
  warnings can now have multiple categories allowing for finer user control on which warning to enable, disable or treat as an error
  (`#17585 <https://github.com/rocq-prover/rocq/pull/17585>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :attr:`Template polymorphic <universes(template)>` inductive types are
  not implicitly added to the :table:`Keep Equalities` table anymore when
  defined. This may change the behavior of equality-related tactics on
  such types
  (`#17718 <https://github.com/rocq-prover/rocq/pull/17718>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  :opt:`Warnings` and :attr:`warnings` now emit a warning when trying
  to enable an unknown warning (there is still no warning when
  disabling an unknown warning as this behavior is useful for
  compatibility, or when enabling an unknown warning through the
  command line `-w` as the warning may be in a yet to be loaded
  plugin) (`#17747 <https://github.com/rocq-prover/rocq/pull/17747>`_, by
  Gaëtan Gilbert).
- **Removed:**
  the flag `Apply With Renaming` which was deprecated
  since 8.15
  (`#16909 <https://github.com/rocq-prover/rocq/pull/16909>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  the `Typeclasses Filtered Unification` flag, deprecated
  since 8.16
  (`#16911 <https://github.com/rocq-prover/rocq/pull/16911>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  :attr:`program` attribute is not accepted anymore with commands
  :cmd:`Add Relation`, :cmd:`Add Parametric Relation`, :cmd:`Add
  Setoid`, :cmd:`Add Parametric Setoid`, :cmd:`Add Morphism`,
  :cmd:`Add Parametric Morphism`, :cmd:`Declare Morphism`. Previously,
  it was accepted but ignored
  (`#17042 <https://github.com/rocq-prover/rocq/pull/17042>`_,
  by Théo Zimmermann).
- **Removed:**
  the `Elaboration StrictProp Cumulativity` and
  `Cumulative SProp` flags. These flags became
  counterproductive after the introduction of sort variables
  in unification
  (`#17114 <https://github.com/rocq-prover/rocq/pull/17114>`_,
  fixes `#17108 <https://github.com/rocq-prover/rocq/issues/17108>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  The ``Add LoadPath``, ``Add Rec LoadPath``, ``Add ML Path``, and
  ``Remove LoadPath`` commands have been removed following deprecation. Users
  are encouraged to use the existing mechanisms in ``coq_makefile`` or
  ``dune`` to configure workspaces of Coq theories
  (`#17394 <https://github.com/rocq-prover/rocq/pull/17394>`_,
  by Emilio Jesus Gallego Arias).
- **Deprecated:**
  `Export` modifier for :cmd:`Set`. Use attribute :attr:`export` instead
  (`#17333 <https://github.com/rocq-prover/rocq/pull/17333>`_,
  by Gaëtan Gilbert).
- **Deprecated:**
  the :attr:`nonuniform` attribute,
  now subsumed by :attr:`warnings` with "-uniform-inheritance"
  (`#17716 <https://github.com/rocq-prover/rocq/pull/17716>`_,
  by Pierre Roux).
- **Deprecated:**
  Using :cmd:`Qed` with :cmd:`Let`. End the proof with :cmd:`Defined` and use :attr:`clearbody`
  instead to get the same behavior
  (`#17544 <https://github.com/rocq-prover/rocq/pull/17544>`_,
  by Gaëtan Gilbert).
- **Added:**
  :cmd:`About` now prints information when a constant or inductive is syntactically equal to another through module aliasing
  (`#16796 <https://github.com/rocq-prover/rocq/pull/16796>`_,
  by Gaëtan Gilbert).
- **Added:**
  :cmd:`Final Obligation` command
  (`#16817 <https://github.com/rocq-prover/rocq/pull/16817>`_,
  by Gaëtan Gilbert).
- **Added:**
  The :attr:`deprecated` attribute is now supported for definition-like constructions
  (`#16890 <https://github.com/rocq-prover/rocq/pull/16890>`_,
  fixes `#12266 <https://github.com/rocq-prover/rocq/issues/12266>`_,
  by Maxime Dénès and Gaëtan Gilbert).
- **Added:**
  attributes :attr:`warnings` and alias :attr:`warning` to set warnings locally for a command
  (`#16902 <https://github.com/rocq-prover/rocq/pull/16902>`_,
  fixes `#15893 <https://github.com/rocq-prover/rocq/issues/15893>`_,
  by Gaëtan Gilbert).
- **Added:**
  flag :flag:`Printing Unfolded Projection As Match` (off by default) to be able to distinguish unfolded and folded primitive projections
  (`#16994 <https://github.com/rocq-prover/rocq/pull/16994>`_,
  by Gaëtan Gilbert).
- **Added:**
  option `-time-file`, like `time` but outputting to a file
  (`#17430 <https://github.com/rocq-prover/rocq/pull/17430>`_,
  by Gaëtan Gilbert).
- **Added:**
  :cmd:`Validate Proof` runs the type checker on the current proof,
  complementary with :cmd:`Guarded` which runs the guard checker
  (`#17467 <https://github.com/rocq-prover/rocq/pull/17467>`_,
  by Gaëtan Gilbert).
- **Added:**
  :attr:`clearbody` for :cmd:`Let` to clear the body of a let-in in an interactive
  proof without kernel enforcement.  (This is the behavior that was previously
  provided by using :cmd:`Qed`, which is now deprecated for `Let`\s.)
  (`#17544 <https://github.com/rocq-prover/rocq/pull/17544>`_,
  by Gaëtan Gilbert).
- **Added:**
  option `-time-file`, like `time` but outputting to a file
  (`#17430 <https://github.com/rocq-prover/rocq/pull/17430>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  universe monomorphic inductives and records do not ignore :flag:`Universe Minimization ToSet`
  (`#17285 <https://github.com/rocq-prover/rocq/pull/17285>`_,
  fixes `#13927 <https://github.com/rocq-prover/rocq/issues/13927>`_,
  by Gaëtan Gilbert).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Changed:**
  Do not pass the ``-rectypes`` flag by default in
  ``coq_makefile`` when compiling OCaml code, since
  it is no longer required by Coq. To re-enable passing
  the flag, put ``CAMLFLAGS+=-rectypes`` in the local makefile,
  e.g., ``CoqMakefile.local`` (see :ref:`rocqmakefilelocal`)
  (`#17038 <https://github.com/rocq-prover/rocq/pull/17038>`_,
  by Karl Palmskog with help from Gaëtan Gilbert).
- **Changed:**
  disable inclusion of variable binders in coqdoc indexes by default,
  and provide a new coqdoc option `--binder-index` for including them
  (`#17045 <https://github.com/rocq-prover/rocq/pull/17045>`_,
  fixes `#13155 <https://github.com/rocq-prover/rocq/issues/13155>`_,
  by Karl Palmskog).
- **Added:**
  `coqdoc` handles multiple links to the same source. For
  example when declaring an inductive type `t` all occurences
  of `t` itself and its elimination principles like `t_ind`
  point to its declaration
  (`#17118 <https://github.com/rocq-prover/rocq/pull/17118>`_,
  by Enrico Tassi).
- **Added:**
  Command line options :n:`-require lib` (replacing
  :n:`-load-vernac-object lib`) and :n:`-require-from root lib`
  respectively equivalent to vernacular commands :n:`Require lib` and
  :n:`From root Require lib`
  (`#17364 <https://github.com/rocq-prover/rocq/pull/17364>`_, by Hugo Herbelin).
- **Added:**
  `coqtimelog2html` command-line tool used to render the timing files produced with `-time`
  (which is passed by `coq_makefile` when environment variable `TIMING` is defined)
  (`#17411 <https://github.com/rocq-prover/rocq/pull/17411>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  `coq_makefile` avoids generating a command containing all files to install in a make rule,
  which could surpass the maximum single argument size in some developments
  (`#17697 <https://github.com/rocq-prover/rocq/pull/17697>`_,
  fixes `#17721 <https://github.com/rocq-prover/rocq/issues/17721>`_,
  by Gaëtan Gilbert).

CoqIDE
^^^^^^

- **Changed:**
  XML Protocol now sends (and expects) full Coq locations, including
  line and column information. This makes some IDE operations (such as
  UTF-8 decoding) more efficient. Clients of the XML protocol can just
  ignore the new fields if they are not useful for them
  (`#17382 <https://github.com/rocq-prover/rocq/pull/17382>`_,
  fixes `#17023 <https://github.com/rocq-prover/rocq/issues/17023>`_,
  by Emilio Jesus Gallego Arias).

Standard library
^^^^^^^^^^^^^^^^

- **Changed:**
  implementation of :g:`Vector.nth` to follow OCaml and compute strict subterms
  (`#16731 <https://github.com/rocq-prover/rocq/pull/16731>`_,
  fixes `#16738 <https://github.com/rocq-prover/rocq/issues/16738>`_,
  by Andrej Dudenhefner).
- **Changed:**
  drop the unnecessary second assumption :g:`NoDup l'` from :g:`set_diff_nodup` in ``ListSet.v``,
  with `-compat 8.17` providing the old version of :g:`set_diff_nodup` for compatibility
  (`#16926 <https://github.com/rocq-prover/rocq/pull/16926>`_,
  by Karl Palmskog with help from Traian Florin Şerbănuţă and Andres Erbsen).
- **Changed:** Moved instances from :g:`DecidableClass` to files that prove
  the relevant decidability facts: :g:`Bool`, :g:`PeanoNat`, and :g:`BinInt`
  (`#17021 <https://github.com/rocq-prover/rocq/pull/17021>`_,
  by Andres Erbsen).
- **Changed:** `Hint Extern` `btauto.Algebra.bool` locality from :attr:`global` to :attr:`export`
  (`#17281 <https://github.com/rocq-prover/rocq/pull/17281>`_,
  by Andres Erbsen).
- **Changed:**
  :g:`xorb` to a simpler definition
  (`#17427 <https://github.com/rocq-prover/rocq/pull/17427>`_,
  by Guillaume Melquiond).
- **Changed** lemmas in `Reals/RIneq.v`

  - :g:`completeness_weak` renamed as :g:`upper_bound_thm`,
  - :g:`le_epsilon` renamed as :g:`Rle_epsilon`,
  - :g:`Rplus_eq_R0` renamed as :g:`Rplus_eq_0`,
  - :g:`Req_EM_T` renamed as :g:`Req_dec_T`,
  - :g:`Rinv_r_simpl_m` renamed as :g:`Rmult_inv_r_id_m`,
  - :g:`Rinv_r_simpl_l` renamed as :g:`Rmult_inv_r_id_l`,
  - :g:`Rinv_r_simpl_r` renamed as :g:`Rmult_inv_m_id_r`,
  - :g:`tech_Rgt_minus` renamed as :g:`Rgt_minus_pos`,
  - :g:`tech_Rplus` renamed as :g:`Rplus_le_lt_0_neq_0`,
  - :g:`IZR_POS_xI` modified with `2` instead of `1 + 1`,
  - :g:`IZR_POS_xO` modified with `2` instead of `1 + 1`,
  - :g:`Rge_refl` modified with `>=` instead of `<=`

  (`#17036 <https://github.com/rocq-prover/rocq/pull/17036>`_,
  by Pierre Rousselin, reviewer Laurent Théry).

- **Removed:**
  :g:`Datatypes.prod_curry`, :g:`Datatypes.prod_uncurry`, :g:`Datatypes.prodT_curry`, :g:`Datatypes.prodT_uncurry`, :g:`Combinators.prod_curry_uncurry`, :g:`Combinators.prod_uncurry_curry`,
  :g:`Bool.leb`, :g:`Bool.leb_implb`,
  :g:`List.skipn_none`,
  :g:`Zdiv.Z_div_mod_eq`, :g:`Zdiv.div_Zdiv`, :g:`Zdiv.mod_Zmod`,
  :g:`FloatOps.frexp`, :g:`FloatOps.ldexp`, :g:`FloatLemmas.frexp_spec`, :g:`FloatLemmas.ldexp_spec`,
  :g:`RList.Rlist`, :g:`Rlist.cons`, :g:`Rlist.nil`, :g:`RList.Rlength`,
  :g:`Rtrigo_calc.cos3PI4`, :g:`Rtrigo_calc.sin3PI4`,
  :g:`MSetRBT.filter_app`
  after deprecation for at least two Coq versions
  (`#16920 <https://github.com/rocq-prover/rocq/pull/16920>`_,
  by Olivier Laurent).
- **Deprecated:**
  :g:`List.app_nil_end`, :g:`List.app_assoc_reverse`, :g:`List.ass_app`, :g:`List.app_ass`
  (`#16920 <https://github.com/rocq-prover/rocq/pull/16920>`_,
  by Olivier Laurent).
- **Deprecated:**
  `Coq.Lists.List.Forall2_refl` (`Coq.Lists.List.Forall2_nil` has the same type)
  (`#17646 <https://github.com/rocq-prover/rocq/pull/17646>`_,
  by Gaëtan Gilbert).
- **Deprecated:** :g:`ZArith.Zdigits` in favor of :g:`Z.testbit`. If you are
  aware of a use case of this module and would be interested in a drop-in
  replacement, please comment on the PR with information about the context that
  would benefit from such functinality
  (`#17733 <https://github.com/rocq-prover/rocq/pull/17733>`_,
  by Andres Erbsen).
- **Deprecated:** Deprecation warnings are now generated for
  :g:`Numbers.Cyclic.Int31.Cyclic31`, :g:`NNumbers.Cyclic.Int31.Int31`, and
  :g:`NNumbers.Cyclic.Int31.Ring31`. These modules have been deprecated since
  Coq 8.10. The modules under :g:`Numbers.Cyclic.Int63` remain available
  (`#17734 <https://github.com/rocq-prover/rocq/pull/17734>`_,
  by Andres Erbsen).
- **Deprecated**
  lemmas in `Reals/RIneq.v`

  :g:`inser_trans_R`,
  :g:`IZR_neq`,
  :g:`double`,
  :g:`double_var`,
  :g:`Rinv_mult_simpl`,
  :g:`Rle_Rinv`,
  :g:`Rlt_Rminus`,
  :g:`Rminus_eq_0`,
  :g:`Rminus_gt_0_lt`,
  :g:`Ropp_div`,
  :g:`Ropp_minus_distr'`,
  :g:`Rplus_sqr_eq_0_l`,
  :g:`sum_inequa_Rle_lt_depr`,
  :g:`S_O_plus_INR_depr`,
  :g:`single_z_r_R1_depr`,
  :g:`tech_single_z_r_R1_depr`,

  (`#17036 <https://github.com/rocq-prover/rocq/pull/17036>`_,
  by Pierre Rousselin, reviewer Laurent Théry).
- **Added:**
  lemmas :g:`L_inj`, :g:`R_inj`, :g:`L_R_neq`, :g:`case_L_R`, :g:`case_L_R'` to ``Fin.v``,
  and :g:`nil_spec`, :g:`nth_append_L`, :g:`nth_append_R`, :g:`In_nth`, :g:`nth_replace_eq`, :g:`nth_replace_neq`,
  :g:`replace_append_L`, :g:`replace_append_R`, :g:`append_const`, :g:`map_append`, :g:`map2_ext`, :g:`append_inj`,
  :g:`In_cons_iff`, :g:`Forall_cons_iff`, :g:`Forall_map`, :g:`Forall_append`, :g:`Forall_nth`, :g:`Forall2_nth`, :g:`Forall2_append`,
  :g:`map_shiftin`, :g:`fold_right_shiftin`, :g:`In_shiftin`, :g:`Forall_shiftin`, :g:`rev_nil`, :g:`rev_cons`, :g:`rev_shiftin`,
  :g:`rev_rev`, :g:`map_rev`, :g:`fold_left_rev_right`, :g:`In_rev`, :g:`Forall_rev` to ``VectorSpec.v``
  (`#16765 <https://github.com/rocq-prover/rocq/pull/16765>`_,
  closes `#6459 <https://github.com/rocq-prover/rocq/issues/6459>`_,
  by Andrej Dudenhefner).
- **Added:**
  lemmas :g:`iter_swap_gen`, :g:`iter_swap`, :g:`iter_succ`, :g:`iter_succ_r`,
  :g:`iter_add`, :g:`iter_ind`, :g:`iter_rect`, :g:`iter_invariant` for `Nat.iter`
  (`#17013 <https://github.com/rocq-prover/rocq/pull/17013>`_,
  by Stefan Haan with help from Jason Gross).
- **Added:** module :g:`Zbitwise` with basic relationships between bitwise and
  arithmetic operations on integers
  (`#17022 <https://github.com/rocq-prover/rocq/pull/17022>`_,
  by Andres Erbsen).
- **Added:**
  lemmas :g:`forallb_filter`, :g:`forallb_filter_id`, :g:`partition_as_filter`,
  :g:`filter_length`, :g:`filter_length_le` and :g:`filter_length_forallb`
  (`#17027 <https://github.com/rocq-prover/rocq/pull/17027>`_,
  by Stefan Haan with help from Olivier Laurent and Andres Erbsen).
- **Added:**
  lemmas in `Reals/RIneq.v`:

  :g:`eq_IZR_contrapositive`,
  :g:`INR_0`,
  :g:`INR_1`,
  :g:`INR_archimed`,
  :g:`INR_unbounded`,
  :g:`IPR_2_xH`,
  :g:`IPR_2_xI`,
  :g:`IPR_2_xO`,
  :g:`IPR_eq`,
  :g:`IPR_ge_1`,
  :g:`IPR_gt_0`,
  :g:`IPR_IPR_2`,
  :g:`IPR_le`,
  :g:`IPR_lt`,
  :g:`IPR_not_1`,
  :g:`IPR_xH`,
  :g:`IPR_xI`,
  :g:`IPR_xO`,
  :g:`le_IPR`,
  :g:`lt_1_IPR`,
  :g:`lt_IPR`,
  :g:`minus_IPR`,
  :g:`mult_IPR`,
  :g:`not_1_IPR`,
  :g:`not_IPR`,
  :g:`plus_IPR`,
  :g:`pow_IPR`,
  :g:`Rdiv_0_l`,
  :g:`Rdiv_0_r`,
  :g:`Rdiv_1_l`,
  :g:`Rdiv_1_r`,
  :g:`Rdiv_def`,
  :g:`Rdiv_diag_eq`,
  :g:`Rdiv_diag`,
  :g:`Rdiv_diag_uniq`,
  :g:`Rdiv_eq_compat_l`,
  :g:`Rdiv_eq_compat_r`,
  :g:`Rdiv_eq_reg_l`,
  :g:`Rdiv_eq_reg_r`,
  :g:`Rdiv_mult_distr`,
  :g:`Rdiv_mult_l_l`,
  :g:`Rdiv_mult_l_r`,
  :g:`Rdiv_mult_r_l`,
  :g:`Rdiv_mult_r_r`,
  :g:`Rdiv_neg_neg`,
  :g:`Rdiv_neg_pos`,
  :g:`Rdiv_opp_l`,
  :g:`Rdiv_pos_cases`,
  :g:`Rdiv_pos_neg`,
  :g:`Rdiv_pos_pos`,
  :g:`Rexists_between`,
  :g:`Rge_gt_or_eq_dec`,
  :g:`Rge_gt_or_eq`,
  :g:`Rge_lt_dec`,
  :g:`Rge_lt_dec`,
  :g:`Rgt_le_dec`,
  :g:`Rgt_minus_pos`,
  :g:`Rgt_or_le`,
  :g:`Rgt_or_not_gt`,
  :g:`Rinv_0_lt_contravar`,
  :g:`Rinv_eq_compat`,
  :g:`Rinv_eq_reg`,
  :g:`Rinv_lt_0_contravar`,
  :g:`Rinv_neg`,
  :g:`Rinv_pos`,
  :g:`Rle_gt_dec`,
  :g:`Rle_half_plus`,
  :g:`Rle_lt_or_eq`,
  :g:`Rle_or_gt`,
  :g:`Rle_or_not_le`,
  :g:`Rlt_0_2`,
  :g:`Rlt_0_minus`,
  :g:`Rlt_ge_dec`,
  :g:`Rlt_half_plus`,
  :g:`Rlt_minus_0`,
  :g:`Rlt_or_ge`,
  :g:`Rlt_or_not_lt`,
  :g:`Rminus_def`,
  :g:`Rminus_diag`,
  :g:`Rminus_eq_compat_l`,
  :g:`Rminus_eq_compat_r`,
  :g:`Rminus_plus_distr`,
  :g:`Rminus_plus_l_l`,
  :g:`Rminus_plus_l_r`,
  :g:`Rminus_plus_r_l`,
  :g:`Rminus_plus_r_r`,
  :g:`Rmult_div_assoc`,
  :g:`Rmult_div_l`,
  :g:`Rmult_div_r`,
  :g:`Rmult_div_swap`,
  :g:`Rmult_gt_reg_r`,
  :g:`Rmult_inv_l`,
  :g:`Rmult_inv_m_id_r`,
  :g:`Rmult_inv_r`,
  :g:`Rmult_inv_r_id_l`,
  :g:`Rmult_inv_r_id_m`,
  :g:`Rmult_inv_r_uniq`,
  :g:`Rmult_neg_cases`,
  :g:`Rmult_neg_neg`,
  :g:`Rmult_neg_pos`,
  :g:`Rmult_pos_cases`,
  :g:`Rmult_pos_neg`,
  :g:`Rmult_pos_pos`,
  :g:`Ropp_div_distr_l`,
  :g:`Ropp_eq_reg`,
  :g:`Ropp_neg`,
  :g:`Ropp_pos`,
  :g:`Rplus_0_l_uniq`,
  :g:`Rplus_eq_0`,
  :g:`Rplus_ge_reg_r`,
  :g:`Rplus_gt_reg_r`,
  :g:`Rplus_minus_assoc`,
  :g:`Rplus_minus_l`,
  :g:`Rplus_minus_r`,
  :g:`Rplus_minus_swap`,
  :g:`Rplus_neg_lt`,
  :g:`Rplus_neg_neg`,
  :g:`Rplus_neg_npos`,
  :g:`Rplus_nneg_ge`,
  :g:`Rplus_nneg_nneg`,
  :g:`Rplus_nneg_pos`,
  :g:`Rplus_npos_le`,
  :g:`Rplus_npos_neg`,
  :g:`Rplus_npos_npos`,
  :g:`Rplus_pos_gt`,
  :g:`Rplus_pos_nneg`,
  :g:`Rplus_pos_pos`,
  :g:`Rsqr_def`

  lemmas in `Reals/R_Ifp.v`:
  :g:`Int_part_spec`,
  :g:`Rplus_Int_part_frac_part`,
  :g:`Int_part_frac_part_spec`

  (`#17036 <https://github.com/rocq-prover/rocq/pull/17036>`_,
  by Pierre Rousselin, reviewer Laurent Théry).

- **Added:** lemmas :g:`concat_length`, :g:`flat_map_length`,
  :g:`flat_map_constant_length`, :g:`list_power_length` to `Lists.List`
  (`#17082 <https://github.com/rocq-prover/rocq/pull/17082>`_,
  by Stefan Haan with help from Olivier Laurent).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  Sphinx 4.5.0 or above is now required to build the reference manual, so now /
  can be used as a quick search shortcut and Esc as a shortcut to remove search
  highlighting
  (`#17772 <https://github.com/rocq-prover/rocq/pull/17772>`_,
  fixes `#15778 <https://github.com/rocq-prover/rocq/issues/15778>`_,
  by Ana Borges).

Extraction
^^^^^^^^^^

- **Fixed:**
  Anomaly when extracting within a module or module type
  (`#17344 <https://github.com/rocq-prover/rocq/pull/17344>`_,
  fixes `#10739 <https://github.com/rocq-prover/rocq/issues/10739>`_,
  by Hugo Herbelin).


Version 8.17
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.17 integrates a soundness fix to the Coq kernel along
with a few new features and a host of improvements to the Ltac2 language
and libraries. We highlight some of the most impactful changes here:

  - :ref:`Fixed <817VmCompute>` a logical inconsistency due to :tacn:`vm_compute` in
    presence of side-effects in the enviroment (e.g. using `Back` or `Fail`).

  - It is now possible to dynamically :ref:`enable or disable <817Notations>` notations.

  - Support :ref:`multiple scopes <817Scopes>` in :cmd:`Arguments` and :cmd:`Bind Scope`.

  - The tactics chapter of the manual has :ref:`many improvements <817TacticsRefman>`
    in presentation and wording.  The documented grammar is semi-automatically checked
    for consistency with the implementation.

  - :ref:`Fixes <817Eauto>` to the :tacn:`auto` and :tacn:`eauto` tactics, to respect hint priorities and the documented use
    of :tacn:`simple apply`. This is a potentially breaking change.

  - :ref:`New Ltac2 <817Ltac2>` APIs, deep pattern-matching with ``as`` clauses and handling of literals,
    support for record types and preterms.

  - :ref:`Move <817ClassFieldSyntax>` from :g:`:>` to :g:`::` syntax for declaring typeclass fields as instances, fixing
    a confusion with declaration of coercions.

  - :ref:`Standard library <817Stdlib>` improvements.

  - While Coq supports OCaml 5, users are likely to experience slowdowns ranging from +10% to +50% compared to OCaml 4.
    Moreover, the :tacn:`native_compute` machinery is not available when Coq is compiled with OCaml 5.
    Therefore, OCaml 5 support should still be considered experimental and not production-ready.

See the `Changes in 8.17.0`_ section below for the detailed list of changes,
including potentially breaking changes marked with **Changed**.
Coq's `reference manual for 8.17 <https://coq.github.io/doc/v8.17/refman>`_,
`documentation of the 8.17 standard library <https://coq.github.io/doc/v8.17/stdlib>`_
and `developer documentation of the 8.17 ML API <https://coq.github.io/doc/v8.17/api>`_
are also available.

Ali Caglayan, Emilio Jesús Gallego Arias, Gaëtan Gilbert
and Théo Zimmermann worked on maintaining and improving the
continuous integration system and package building infrastructure.

Erik Martin-Dorel has maintained the `Coq Docker images
<https://hub.docker.com/r/coqorg/coq>`_ that are used in many Coq
projects for continuous integration.

Maxime Dénès, Paolo G. Giarrusso, Huỳnh Trần Khanh, and Laurent Théry have
maintained the VsCoq extension for VS Code.

The opam repository for Coq packages has been maintained by
Guillaume Claret, Karl Palmskog, Matthieu Sozeau and Enrico Tassi with
contributions from many users. A list of packages is available at
https://coq.inria.fr/opam/www/.

The `Coq Platform <https://github.com/coq/platform>`_ has been maintained
by Michael Soegtrop, with help from Karl Palmskog, Pierre Roux, Enrico Tassi and
Théo Zimmermann.

Our current maintainers are Yves Bertot, Frédéric Besson, Ana Borges,
Ali Caglayan, Tej Chajed, Cyril Cohen, Pierre Corbineau, Pierre Courtieu, Maxime Dénès,
Andres Erbsen, Jim Fehrle, Julien Forest, Emilio Jesús Gallego Arias, Gaëtan Gilbert,
Georges Gonthier, Benjamin Grégoire, Jason Gross, Hugo Herbelin,
Vincent Laporte, Olivier Laurent, Assia Mahboubi, Kenji Maillard,
Guillaume Melquiond, Pierre-Marie Pédrot, Clément Pit-Claudel, Pierre Roux,
Kazuhiko Sakaguchi, Vincent Semeria, Michael Soegtrop, Arnaud Spiwack,
Matthieu Sozeau, Enrico Tassi, Laurent Théry, Anton Trunov, Li-yao Xia
and Théo Zimmermann. See the `Coq Team face book <https://coq.inria.fr/coq-team.html>`_
page for more details.

The 45 contributors to the 8.17 version are:
Reynald Affeldt, Tanaka Akira, Lasse Blaauwbroek, Stephan Boyer, Ali Caglayan, Cyril Cohen, Maxime Dénès, Andrej Dudenhefner, Andres Erbsen, František Farka, Jim Fehrle, Paolo G. Giarrusso, Gaëtan Gilbert, Jason Gross, Alban Gruin, Stefan Haan, Hugo Herbelin, Wolf Honore, Bodo Igler, Jerry James, Emilio Jesús Gallego Arias, Ralf Jung, Jan-Oliver Kaiser, Wojciech Karpiel, Chantal Keller, Thomas Klausner, Olivier Laurent, Yishuai Li, Guillaume Melquiond, Karl Palmskog, Sudha Parimala, Pierre-Marie Pédrot, Valentin Robert, Pierre Roux, Julin S, Dmitry Shachnev, Michael Soegtrop, Matthieu Sozeau, Naveen Srinivasan, Sergei Stepanenko, Karolina Surma, Enrico Tassi, Li-yao Xia
and Théo Zimmermann.

The Coq community at large helped improve this new version via
the GitHub issue and pull request system, the coq-club@inria.fr mailing list,
the `Discourse forum <https://coq.discourse.group/>`_ and the
`Coq Zulip chat <https://coq.zulipchat.com>`_.

Version 8.17's development spanned 5 months from the release of
Coq 8.16.0. Théo Zimmermann is the release manager of Coq 8.17.
This release is the result of 414 merged PRs, closing 105 issues.

| Nantes, February 2023,
| Matthieu Sozeau for the Coq development team

Changes in 8.17.0
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

 .. _817VmCompute:

- **Fixed:**
  inconsistency linked to :tacn:`vm_compute`. The fix removes a vulnerable cache, thus it may result in slowdowns when :tacn:`vm_compute` is used repeatedly, if you encounter such slowdowns please report your use case
  (`#16958 <https://github.com/rocq-prover/rocq/pull/16958>`_,
  fixes `#16957 <https://github.com/rocq-prover/rocq/issues/16957>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Unexpected anomaly when checking termination of fixpoints
  containing :g:`match` expressions with inaccessible branches
  (`#17116 <https://github.com/rocq-prover/rocq/pull/17116>`_,
  fixes `#17073 <https://github.com/rocq-prover/rocq/issues/17073>`_,
  by Hugo Herbelin).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  :warn:`Unused variable <Unused variable ‘ident’ might be a misspelled constructor. Use _ or _‘ident’ to silence this warning.>` warning
  triggers even when catching a single case. This warning used to be
  triggered only when the unused variable was catching at least
  two cases (`#16135 <https://github.com/rocq-prover/rocq/pull/16135>`_,
  by Pierre Roux).
- **Fixed:**
  Pattern-matching clauses were possibly lost when matching over a
  constructor from a singleton inductive type in the presence of
  implicit coercions (`#17138 <https://github.com/rocq-prover/rocq/pull/17138>`_,
  fixes `#17137 <https://github.com/rocq-prover/rocq/issues/17137>`_, by Hugo
  Herbelin).
- **Fixed:**
  Possible anomaly when using syntax :g:`term.(proj)` with projections defined in sections
  (`#17174 <https://github.com/rocq-prover/rocq/pull/17174>`_,
  fixes `#17173 <https://github.com/rocq-prover/rocq/issues/17173>`_,
  by Hugo Herbelin).

Notations
^^^^^^^^^

- **Changed:**
  When multiple tokens match the beginning of a sequence of characters,
  the longest matching token not cutting a subsequence of contiguous
  letters in the middle is used. Previously, this was only the longest
  matching token. See :ref:`lexical conventions <lexing-unseparated-keywords>`
  for details and examples
  (`#16322 <https://github.com/rocq-prover/rocq/pull/16322>`_,
  fixes `#4712 <https://github.com/rocq-prover/rocq/issues/4712>`_,
  by Hugo Herbelin).

  .. _817Notations:

- **Added:**
  :cmd:`Enable Notation` and :cmd:`Disable Notation` commands
  to enable or disable previously defined notations
  (`#12324 <https://github.com/rocq-prover/rocq/pull/12324>`_ and `#16945 <https://github.com/rocq-prover/rocq/pull/16945>`_,
  by Hugo Herbelin and Pierre Roux, extending previous work by Lionel Rieg,
  review by Jim Fehrle).

  .. _817Scopes:

- **Added:**
  Support for multiple scopes in the :cmd:`Arguments` command
  (`#16472 <https://github.com/rocq-prover/rocq/pull/16472>`_,
  by Pierre Roux, review by Jim Fehrle, Hugo Herbelin and Enrico Tassi).
- **Added:**
  Attributes :attr:`add_top` and :attr:`add_bottom` to bind
  multiple scopes through the :cmd:`Bind Scope` command
  (`#16472 <https://github.com/rocq-prover/rocq/pull/16472>`_,
  by Pierre Roux, review by Jim Fehrle, Hugo Herbelin and Enrico Tassi).

Tactics
^^^^^^^

 .. _817TacticsRefman:

- **Changed:**
  Documentation in the tactics chapter to give the current correct syntax,
  consolidate tactic variants for each tactic into a single,
  unified description for each tactic and many wording improvements.
  With this change, following similar changes to other chapters
  in previous releases, the correctness of documented syntax is
  assured by semi-automated tooling in all chapters except SSReflect
  (`#15015 <https://github.com/rocq-prover/rocq/pull/15015>`_,
  `#16498 <https://github.com/rocq-prover/rocq/pull/16498>`_, and
  `#16659 <https://github.com/rocq-prover/rocq/pull/16659>`_,
  by Jim Fehrle, reviewed by Théo Zimmermann, with help from many others).

  .. _817Eauto:

- **Changed:**
  :tacn:`eauto` respects priorities of :cmd:`Extern <Hint Extern>` hints
  (`#16289 <https://github.com/rocq-prover/rocq/pull/16289>`_,
  fixes `#5163 <https://github.com/rocq-prover/rocq/issues/5163>`_
  and `#16282 <https://github.com/rocq-prover/rocq/issues/16282>`_,
  by Andrej Dudenhefner).

  .. warning:: Code that relies on eager evaluation of :cmd:`Extern <Hint Extern>` hints
     with high assigned cost by :tacn:`eauto` will change its performance
     profile or potentially break.
     To approximate prior behavior, set to zero the cost of :cmd:`Extern <Hint Extern>` hints,
     which may solve the goal in one step.
- **Changed:**
  less discrepancies between :tacn:`auto` hint evaluation and :tacn:`simple apply`, :tacn:`exact` tactics
  (`#16293 <https://github.com/rocq-prover/rocq/pull/16293>`_,
  fixes `#16062 <https://github.com/rocq-prover/rocq/issues/16062>`_
  and `#16323 <https://github.com/rocq-prover/rocq/issues/16323>`_,
  by Andrej Dudenhefner).

  .. warning:: :tacn:`auto` may solve more goals.
     As a result, non-monotone use of :tacn:`auto` such as :g:`tac1; auto. tac2.` may break.
     For backwards compatibility use explicit goal management.
- **Removed:** `absurd_hyp` tactic, that was marked as obsolete 15
  years ago. Use :tacn:`contradict` instead (`#16670
  <https://github.com/rocq-prover/rocq/pull/16670>`_, by Théo Zimmermann).
- **Removed:**
  the undocumented `progress_evars` tactical
  (`#16843 <https://github.com/rocq-prover/rocq/pull/16842>`_,
  by Théo Zimmermann).
- **Deprecated:** the default ``intuition_solver`` (see
  :tacn:`intuition`) now outputs warning ``intuition-auto-with-star``
  if it solves a goal with ``auto with *`` that was not solved with
  just :tacn:`auto`. In a future version it will be changed to just
  :tacn:`auto`. Use ``intuition tac`` locally or ``Ltac
  Tauto.intuition_solver ::= tac`` globally to silence the warning in
  a forward-compatible way with your choice of tactic ``tac``
  (``auto``, ``auto with *``, ``auto with`` your prefered databases,
  or any other tactic) (`#16026
  <https://github.com/rocq-prover/rocq/pull/16026>`_, by Gaëtan Gilbert).
- **Deprecated:**
  `>` clear modifier that could be used in some tactics like
  :tacn:`apply` and :tacn:`rewrite` but was never documented.
  Open an issue if you actually depend on this feature
  (`#16407 <https://github.com/rocq-prover/rocq/pull/16407>`_,
  by Théo Zimmermann).
- **Fixed:**
  :tacn:`auto` now properly updates local hypotheses after hint application
  (`#16302 <https://github.com/rocq-prover/rocq/pull/16302>`_,
  fixes `#15814 <https://github.com/rocq-prover/rocq/issues/15814>`_
  and `#6332 <https://github.com/rocq-prover/rocq/issues/6332>`_,
  by Andrej Dudenhefner).
- **Fixed:**
  Make the behavior of :tacn:`destruct ... using ... <destruct>` more powerful and more similar to :tacn:`destruct ... <destruct>`
  (`#16605 <https://github.com/rocq-prover/rocq/pull/16605>`_,
  by Lasse Blaauwbroek).
- **Fixed:**
  typeclass inference sometimes caused remaining holes to fail to be detected
  (`#16743 <https://github.com/rocq-prover/rocq/pull/16743>`_,
  fixes `#5239 <https://github.com/rocq-prover/rocq/issues/5239>`_,
  by Gaëtan Gilbert).

Ltac language
^^^^^^^^^^^^^
- **Changed:**
  :cmd:`Ltac` redefinitions (with ``::=``) now respect :attr:`local`
  (`#16106 <https://github.com/rocq-prover/rocq/pull/16106>`_,
  by Gaëtan Gilbert).
- **Changed:**
  In :tacn:`match goal`, ``match goal with hyp := body : typ |- _``
  is syntax sugar for  ``match goal with hyp := [ body ] : typ |- _``
  i.e. it matches ``typ`` with the type of the hypothesis
  rather than matching the body as a cast term.
  This transformation used to be done with any kind of cast (e.g. VM cast ``<:``)
  and is now done only for default casts ``:``
  (`#16764 <https://github.com/rocq-prover/rocq/pull/16764>`_,
  by Gaëtan Gilbert).

 .. _817Ltac2:

Ltac2 language
^^^^^^^^^^^^^^
- **Changed:**
  ``Ltac2.Bool`` notations are now in a module ``Ltac2.Bool.BoolNotations``
  (exported by default), so that these notations can be imported separately
  (`#16536 <https://github.com/rocq-prover/rocq/pull/16536>`_,
  by Jason Gross).
- **Changed:**
  ``Constr.in_context`` enforces that the ``constr`` passed to it is a type
  (`#16547 <https://github.com/rocq-prover/rocq/pull/16547>`_,
  fixes `#16540 <https://github.com/rocq-prover/rocq/issues/16540>`_,
  by Gaëtan Gilbert).
- **Changed:**
  goal matching functions from ``Ltac2.Pattern`` (``matches_goal``, ``lazy_goal_match0``, ``multi_goal_match0`` and ``one_goal_match0``) have changed types to support matching hypothesis bodies
  (`#16655 <https://github.com/rocq-prover/rocq/pull/16655>`_,
  by Gaëtan Gilbert).
- **Added:**
  Deep :ref:`pattern matching <ltac2_match_on_values>` for Ltac2
  (`#16023 <https://github.com/rocq-prover/rocq/pull/16023>`_,
  by Gaëtan Gilbert).
- **Added:**
  patterns for Ltac2 matches: ``as``, records and literal integers and strings
  (`#16179 <https://github.com/rocq-prover/rocq/pull/16179>`_,
  by Gaëtan Gilbert).
- **Added:**
  APIs for working with strings: `Message.to_string`, `String.concat`, `cat`, `equal`, `compare`, `is_empty`
  (`#16217 <https://github.com/rocq-prover/rocq/pull/16217>`_,
  by Gaëtan Gilbert).
- **Added:**
  ``Ltac2.Constr.Unsafe.liftn``
  (`#16413 <https://github.com/rocq-prover/rocq/pull/16413>`_,
  by Jason Gross).
- **Added:**
  ``Ltac2.Constr.Unsafe.closedn``,
  ``Ltac2.Constr.Unsafe.is_closed``,
  ``Ltac2.Constr.Unsafe.occur_between``,
  ``Ltac2.Constr.Unsafe.occurn`` (`#16414
  <https://github.com/rocq-prover/rocq/pull/16414>`_, by Jason Gross).
- **Added:**
  `Ltac2.List.equal`
  (`#16429 <https://github.com/rocq-prover/rocq/pull/16429>`_,
  by Jason Gross).
- **Added:**
  :cmd:`Print Ltac2`, :cmd:`Print Ltac2 Signatures` and :cmd:`Locate` can now find Ltac2 definitions
  (`#16466 <https://github.com/rocq-prover/rocq/pull/16466>`_,
  fixes `#16418 <https://github.com/rocq-prover/rocq/issues/16418>`_
  and `#16415 <https://github.com/rocq-prover/rocq/issues/16415>`_,
  by Gaëtan Gilbert).
- **Added:**
  ``Ltac2.Array.for_all2`` and ``Ltac2.Array.equal``
  (`#16535 <https://github.com/rocq-prover/rocq/pull/16535>`_,
  by Jason Gross).
- **Added:**
  ``Ltac2.Constant.equal``, ``Ltac2.Constant.t``, ``Ltac2.Constructor.equal``,
  ``Ltac2.Constructor.t``, ``Ltac2.Evar.equal``, ``Ltac2.Evar.t``,
  ``Ltac2.Float.equal``, ``Ltac2.Float.t``, ``Ltac2.Meta.equal``,
  ``Ltac2.Meta.t``, ``Ltac2.Proj.equal``, ``Ltac2.Proj.t``,
  ``Ltac2.Uint63.equal``, ``Ltac2.Uint63.t``, ``Ltac2.Char.equal``,
  ``Ltac2.Char.compare``, ``Ltac2.Constr.Unsafe.Case.equal``
  (`#16537 <https://github.com/rocq-prover/rocq/pull/16537>`_,
  by Jason Gross).
- **Added:**
  ``Ltac2.Option.equal``
  (`#16539 <https://github.com/rocq-prover/rocq/pull/16539>`_,
  by Jason Gross).
- **Added:**
  syntax for Ltac2 record update ``{ foo with field := bar }``
  (`#16552 <https://github.com/rocq-prover/rocq/pull/16552>`_,
  fixes `#10117 <https://github.com/rocq-prover/rocq/issues/10117>`_,
  by Gaëtan Gilbert).
- **Added:**
  Ltac2 record expressions support punning, i.e. ``{ foo; M.bar }`` is equivalent to ``{ foo := foo; M.bar := bar }``
  (`#16556 <https://github.com/rocq-prover/rocq/pull/16556>`_,
  by Gaëtan Gilbert).
- **Added:**
  :tacn:`match! goal` support for matching hypothesis bodies
  (`#16655 <https://github.com/rocq-prover/rocq/pull/16655>`_,
  fixes `#12803 <https://github.com/rocq-prover/rocq/issues/12803>`_,
  by Gaëtan Gilbert).
- **Added:**
  quotation and syntax class for :ref:`preterms <preterm>`
  (`#16740 <https://github.com/rocq-prover/rocq/pull/16740>`_,
  by Gaëtan Gilbert).

SSReflect
^^^^^^^^^

- **Added:**
  port the additions made to `ssrfun.v` and `ssrbool.v` in math-comp
  `PR #872 <https://github.com/math-comp/math-comp/pull/872>`_
  and  `PR #874 <https://github.com/math-comp/math-comp/pull/874>`_,
  namely definitions `olift` and `pred_oapp` as well as lemmas
  `all_sig2_cond`, `compA`, `obindEapp`, `omapEbind`, `omapEapp`,
  `omap_comp`, `oapp_comp`, `olift_comp`, `ocan_comp`, `eqbLR`,
  `eqbRL`, `can_in_pcan`, `pcan_in_inj`, `in_inj_comp`, `can_in_comp`,
  `pcan_in_comp` and `ocan_in_comp`
  (`#16158 <https://github.com/rocq-prover/rocq/pull/16158>`_,
  by Pierre Roux).

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Changed:** commands which set tactic options (currently
  :opt:`Firstorder Solver` and :cmd:`Obligation Tactic`, as well as any
  defined by third party plugins) now support :attr:`export` locality.
  Note that such commands using :attr:`global` without :attr:`export`
  or using no explicit locality outside sections apply their effects
  when any module containing it (recursively) is imported. This will
  change in a future version. (`#15274
  <https://github.com/rocq-prover/rocq/pull/15274>`_, fixes `#15072
  <https://github.com/rocq-prover/rocq/issues/15072>`_, by Gaëtan Gilbert).
- **Changed:**
  `Hint` and :cmd:`Instance` commands with no locality attribute are deprecated.
  Previous versions generated a warning, but this version generates an error by
  default. This includes all `Hint` commands described in :ref:`creating_hints`,
  :cmd:`Hint Rewrite`, and :cmd:`Instance`. As mentioned in the error, please
  add an explicit locality to the hint command. The default was
  #[:attr:`global`], but we recommend using #[:attr:`export`] where possible
  (`#16004 <https://github.com/rocq-prover/rocq/pull/16004>`_,
  fixes `#13394 <https://github.com/rocq-prover/rocq/issues/13394>`_,
  by Ali Caglayan).
- **Changed:**
  Transparent obligations generated by :attr:`Program <program>`
  do not produce an implicit :cmd:`Hint Unfold` anymore
  (`#16340 <https://github.com/rocq-prover/rocq/pull/16340>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  :cmd:`Print Typeclasses` replaces the undocumented `Print TypeClasses` command
  which displays the list of typeclasses
  (`#16690 <https://github.com/rocq-prover/rocq/pull/16690>`_,
  fixes `#16686 <https://github.com/rocq-prover/rocq/issues/16686>`_,
  by Ali Caglayan).
- **Changed:**
  The -async-proofs-tac-j command line option now accepts
  the argument 0, which makes `par` block interpreted
  without spawning any new process
  (`#16837 <https://github.com/rocq-prover/rocq/pull/16837>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  the ``Program Naming`` flag, which was introduced as an
  immediately deprecated option in Coq 8.16
  (`#16519 <https://github.com/rocq-prover/rocq/pull/16519>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  undocumented and broken `Solve Obligation` command
  (the :cmd:`Solve Obligations` command is untouched)
  (`#16842 <https://github.com/rocq-prover/rocq/pull/16842>`_,
  by Théo Zimmermann).

  .. _817ClassFieldSyntax:

- **Deprecated**
  :g:`:>` syntax, to declare fields of :ref:`typeclasses` as instances,
  since it is now replaced by :g:`::` (see :n:`@of_type_inst`).
  This will allow, in a future release, making :g:`:>` declare :ref:`coercions`
  as it does in :ref:`record <records>` definitions
  (`#16230 <https://github.com/rocq-prover/rocq/pull/16230>`_,
  fixes `#16224 <https://github.com/rocq-prover/rocq/issues/16224>`_,
  by Pierre Roux, reviewed by Ali Caglayan, Jim Fehrle, Gaëtan Gilbert
  and Pierre-Marie Pédrot).
- **Added:**
  An improved description of :cmd:`Proof using` and section variables
  (`#16168 <https://github.com/rocq-prover/rocq/pull/16168>`_,
  by Jim Fehrle).
- **Added:**
  :g:`::` syntax (see :n:`@of_type_inst`) to declare fields of records as :ref:`typeclass <typeclasses>` instances
  (`#16230 <https://github.com/rocq-prover/rocq/pull/16230>`_,
  fixes `#16224 <https://github.com/rocq-prover/rocq/issues/16224>`_,
  by Pierre Roux, reviewed by Ali Caglayan, Jim Fehrle, Gaëtan Gilbert
  and Pierre-Marie Pédrot).
- **Added:**
  The :cmd:`Print Keywords` command, which prints all the currently-defined parser keywords and tokens
  (`#16438 <https://github.com//pull/16438>`_,
  fixes `#16375 <https://github.com/rocq-prover/rocq/issues/16375>`_,
  by Gaëtan Gilbert).
- **Added:**
  :cmd:`Print Grammar` can print arbitrary nonterminals or the whole grammar instead of a small adhoc list of nonterminals
  (`#16440 <https://github.com/rocq-prover/rocq/pull/16440>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  :flag:`Fast Name Printing` flag no longer causes
  variable name capture when displaying a goal
  (`#16395 <https://github.com/rocq-prover/rocq/pull/16395>`_,
  fixes `#14141 <https://github.com/rocq-prover/rocq/issues/14141>`_,
  by Wojciech Karpiel).
- **Fixed:**
  :tacn:`vm_compute` ignored the ``bytecode-compiler`` command line flag
  (`#16931 <https://github.com/rocq-prover/rocq/pull/16931>`_,
  fixes `#16929 <https://github.com/rocq-prover/rocq/issues/16929>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  The :cmd:`Proof Mode` command now gives an error if the
  specified proof mode doesn't exist.  The command was not
  previously documented
  (`#16981 <https://github.com/rocq-prover/rocq/pull/16981>`_,
  fixes `#16602 <https://github.com/rocq-prover/rocq/issues/16602>`_,
  by Jim Fehrle).
- **Fixed:**
  Backtracking over grammar modifications from plugins (such as added commands)
  (`#17069 <https://github.com/rocq-prover/rocq/pull/17069>`_,
  fixes `#12575 <https://github.com/rocq-prover/rocq/issues/12575>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Anomaly instead of regular error on unsupported applied :g:`fix` in :cmd:`Function`
  (`#17113 <https://github.com/rocq-prover/rocq/pull/17113>`_,
  fixes `#17110 <https://github.com/rocq-prover/rocq/issues/17110>`_,
  by Hugo Herbelin).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Added:**
  New documentation section :ref:`configuration_basics` covering use cases such
  as setting up Coq with opam, where/how to set up source code for your projects
  and use of _CoqProject
  (`#15888 <https://github.com/rocq-prover/rocq/pull/15888>`_,
  by Jim Fehrle).
- **Added:**
  In _CoqProject files, expand paths that are directories
  to include appropriate files in (sub)directories
  (`#16308 <https://github.com/rocq-prover/rocq/pull/16308>`_,
  by Jim Fehrle).
- **Fixed:** issues when using ``coq_makefile`` to build targets
  requiring both ``.vo`` and ``.glob`` files (typically documentation
  targets), where ``make`` would run multiple ``coqc`` processes on
  the same source file with racy behaviour (only fixed when using a
  ``make`` supporting "grouped targets" such as GNU Make 4.3) (`#16757
  <https://github.com/rocq-prover/rocq/pull/16757>`_, by Gaëtan Gilbert).
- **Fixed:**
  Properly process legacy attributes such as ``Global``
  and ``Polymorphic`` in coqdoc to avoid omissions
  when using the ``-g`` (Gallina only) option
  (`#17090 <https://github.com/rocq-prover/rocq/pull/17090>`_,
  fixes `#15933 <https://github.com/rocq-prover/rocq/issues/15933>`_,
  by Karl Palmskog).

 .. _817Stdlib:

Standard library
^^^^^^^^^^^^^^^^

- **Changed:**
  Class :g:`Saturate` in ``ZifyCLasses.v``, :g:`PRes` now also takes operands
  (`#16355 <https://github.com/rocq-prover/rocq/pull/16355>`_,
  by František Farka on behalf of BedRock Systems, Inc.).
- **Changed:**
  For uniformity of naming and ease of remembering, `R_dist` and
  theorems mentioning `R_dist` in their name become available with spelling `Rdist`
  (`#16874 <https://github.com/rocq-prover/rocq/pull/16874>`_,
  by Hugo Herbelin).
- **Removed:**
  from :g:`Nat` and :g:`N` superfluous lemmas :g:`rs_rs'`, :g:`rs'_rs''`, :g:`rbase`, :g:`A'A_right`,
  :g:`ls_ls'`, :g:`ls'_ls''`, :g:`rs'_rs''`, :g:`lbase`, :g:`A'A_left`, and also
  redundant non-negativity assumptions in :g:`gcd_unique`, :g:`gcd_unique_alt`,
  :g:`divide_gcd_iff`, and :g:`gcd_mul_diag_l`
  (`#16203 <https://github.com/rocq-prover/rocq/pull/16203>`_,
  by Andrej Dudenhefner).
- **Deprecated:**
  notation ``_ ~= _`` for ``JMeq`` in
  ``Coq.Program.Equality`` (`#16436
  <https://github.com/rocq-prover/rocq/pull/16436>`_, by Gaëtan Gilbert).
- **Deprecated:**
  lemma :g:`Finite_alt` in ``FinFun.v``, which is a weaker version of
  the newly added lemma :g:`Finite_dec`
  (`#16489 <https://github.com/rocq-prover/rocq/pull/16489>`_,
  fixes `#16479 <https://github.com/rocq-prover/rocq/issues/16479>`_,
  by Bodo Igler, with help from Olivier Laurent).
- **Deprecated:**
  :g:`Zmod`,
  :g:`Zdiv_eucl_POS`,
  :g:`Zmod_POS_bound`,
  :g:`Zmod_pos_bound`,
  and :g:`Zmod_neg_bound`
  in `ZArith.Zdiv`
  (`#16892 <https://github.com/rocq-prover/rocq/pull/16892>`_,
  by Andres Erbsen).
- **Deprecated:** :g:`Cyclic.ZModulo.ZModulo` because there have been no known
  use cases for this module and because it does not implement `Z/nZ` for
  arbitrary `n` as one might expect based on the name. The same construction
  will remain a part of the Coq test suite to ensure consistency of
  `CyclicAxioms`
  (`#16914 <https://github.com/rocq-prover/rocq/pull/16914>`_,
  by Andres Erbsen).
- **Added:**
  lemmas :g:`Permutation_incl_cons_inv_r`, :g:`Permutation_pigeonhole`, :g:`Permutation_pigeonhole_rel` to ``Permutation.v``, and :g:`Forall2_cons_iff`, :g:`Forall2_length`, :g:`Forall2_impl`, :g:`Forall2_flip`, :g:`Forall_Exists_exists_Forall2` to ``List.v``
  (`#15986 <https://github.com/rocq-prover/rocq/pull/15986>`_,
  by Andrej Dudenhefner, with help from Dominique Larchey-Wendling and Olivier Laurent).
- **Added:**
  modules :g:`Nat.Div0` and :g:`Nat.Lcm0` in :g:`PeanoNat`, and :g:`N.Div0` and :g:`N.Lcm0` in :g:`BinNat`
  containing lemmas regarding :g:`div` and :g:`mod`, which take into account `n div 0 = 0` and `n mod 0 = n`.
  Strictly weaker lemmas are deprecated, and will be removed in the future.
  After the weaker lemmas are removed, the modules :g:`Div0` and :g:`Lcm0` will be deprecated,
  and their contents included directly into :g:`Nat` and :g:`N`.
  Locally, you can use :g:`Module Nat := Nat.Div0.` or :g:`Module Nat := Nat.Lcm0.` to approximate this inclusion
  (`#16203 <https://github.com/rocq-prover/rocq/pull/16203>`_,
  fixes `#16186 <https://github.com/rocq-prover/rocq/issues/16186>`_,
  by Andrej Dudenhefner).
- **Added:**
  lemma :g:`measure_induction` in :g:`Nat` and :g:`N` analogous to :g:`Wf_nat.induction_ltof1`,
  which is compatible with the `using` clause for the :tacn:`induction` tactic
  (`#16203 <https://github.com/rocq-prover/rocq/pull/16203>`_,
  by Andrej Dudenhefner).
- **Added:**
  three lemmata related to finiteness and decidability of equality:
  :g:`Listing_decidable_eq`, :g:`Finite_dec`
  to ``FinFun.v`` and lemma :g:`NoDup_list_decidable` to ``ListDec.v``
  (`#16489 <https://github.com/rocq-prover/rocq/pull/16489>`_,
  fixes `#16479 <https://github.com/rocq-prover/rocq/issues/16479>`_,
  by Bodo Igler, with help from Olivier Laurent and Andrej Dudenhefner).
- **Added:**
  lemma :g:`not_NoDup` to ``ListDec.v`` and :g:`NoDup_app_remove_l`, :g:`NoDup_app_remove_r` to ``List.v``
  (`#16588 <https://github.com/rocq-prover/rocq/pull/16588>`_,
  by Stefan Haan with a lot of help from Olivier Laurent and Ali Caglayan).
- **Added:**
  the `skipn_skipn` lemma in `Lists/List.v`
  (`#16632 <https://github.com/rocq-prover/rocq/pull/16632>`_,
  by Stephan Boyer).
- **Added:**
  lemmas :g:`nth_error_ext`, :g:`map_repeat`, :g:`rev_repeat` to ``List.v``,
  and :g:`to_list_nil_iff`, :g:`to_list_inj` to ``VectorSpec.v``
  (`#16756 <https://github.com/rocq-prover/rocq/pull/16756>`_,
  by Stefan Haan).
- **Added:** transparent :g:`extgcd` to replace opaque :g:`euclid`,
  :g:`euclid_rec`, :g:`Euclid`, and :g:`Euclid_intro` in :g:`Znumtheory`.
  Deprecated compatibility wrappers are provided
  (`#16915 <https://github.com/rocq-prover/rocq/pull/16915>`_,
  by Andres Erbsen).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  Coq is now built entirely using the Dune build system. Packagers and
  users that build Coq manually must use the new build
  instructions in the documentation
  (`#15560 <https://github.com/rocq-prover/rocq/pull/15560>`_,
  by Ali Caglayan, Emilio Jesus Gallego Arias, and Rudi Grinberg).
- **Changed:**
  Coq is not compiled with OCaml's ``-rectypes`` option anymore.
  This means plugins which do not exploit it can also stop passing it to OCaml
  (`#16007 <https://github.com/rocq-prover/rocq/pull/16007>`_,
  by Gaëtan Gilbert).
- **Changed:**
  Building Coq now requires Dune >= 2.9
  (`#16118 <https://github.com/rocq-prover/rocq/pull/16118>`_,
  by Emilio Jesus Gallego Arias).
- **Changed:**
  Coq Makefile targets `pretty-timed`, `make-pretty-timed`,
  `make-pretty-timed-before`, `make-pretty-timed-after`, `print-pretty-timed`,
  `print-pretty-timed-diff`, `print-pretty-single-time-diff` now generate more
  readable timing tables when absolute paths are used in `_CoqProject` / the
  arguments to `coq_makefile`, by stripping off the absolute prefix
  (`#16268 <https://github.com/rocq-prover/rocq/pull/16268>`_,
  by Jason Gross).
- **Changed:**
  Coq's configure script now defaults to `-native-compiler no`.
  Previously, the default was `-native-compiler ondemand`, except on
  Windows. The behavior for users installing through opam does not change,
  i.e., it is `-native-compiler no` if the `coq-native` package is not
  installed, and `-native-compiler yes` otherwise
  (`#16997 <https://github.com/rocq-prover/rocq/pull/16997>`_,
  by Théo Zimmermann).
- **Removed:**
  the ``-coqide`` switch to ``configure`` in Coq's build infrastructure
  (it stopped controlling what got compiled in the move to dune)
  (`#16512 <https://github.com/rocq-prover/rocq/pull/16512>`_,
  by Gaëtan Gilbert).
- **Removed:**
  the ``-nomacintegration`` configure flag for CoqIDE.
  Now CoqIDE will always build with the proper
  platform-specific integration if available
  (`#16531 <https://github.com/rocq-prover/rocq/pull/16531>`_,
  by Emilio Jesus Gallego Arias).
- **Added:**
  Coq now supports OCaml 5; note that OCaml 5 is not compatible with
  Coq's native reduction machine
  (`#15494 <https://github.com/rocq-prover/rocq/pull/15494>`_,
  `#16925 <https://github.com/rocq-prover/rocq/pull/16925>`_,
  `#16947 <https://github.com/rocq-prover/rocq/pull/16947>`_,
  `#16959 <https://github.com/rocq-prover/rocq/pull/16959>`_,
  `#16988 <https://github.com/rocq-prover/rocq/pull/16988>`_,
  `#16991 <https://github.com/rocq-prover/rocq/pull/16991>`_,
  `#16996 <https://github.com/rocq-prover/rocq/pull/16996>`_,
  `#16997 <https://github.com/rocq-prover/rocq/pull/16997>`_,
  `#16999 <https://github.com/rocq-prover/rocq/pull/16999>`_,
  `#17010 <https://github.com/rocq-prover/rocq/pull/17010>`_, and
  `#17015 <https://github.com/rocq-prover/rocq/pull/17015>`_
  by Emilio Jesus Gallego Arias, Gaëtan Gilbert, Guillaume Melquiond,
  Pierre-Marie Pédrot, and others).
- **Added:**
  OCaml 4.14 is now officially supported
  (`#15867 <https://github.com/rocq-prover/rocq/pull/15867>`_,
  by Gaëtan Gilbert).

Miscellaneous
^^^^^^^^^^^^^

- **Changed:**
  Module names are now added to the loadpath in
  alphabetical order for each (sub-)directory.
  Previously they were added in the order of
  the directory entries (as shown by "ls -U")
  (`#16725 <https://github.com/rocq-prover/rocq/pull/16725>`_,
  by Jim Fehrle).

Changes in 8.17.1
~~~~~~~~~~~~~~~~~

A variety of bug fixes and improvements to error messages, including:

- **Fixed:**
  in some cases, coqdep emitted incorrect paths for META files which prevented dune builds for plugins from working correctly
  (`#17270 <https://github.com/rocq-prover/rocq/pull/17270>`_,
  fixes `#16571 <https://github.com/rocq-prover/rocq/issues/16571>`_,
  by Rodolphe Lepigre).
- **Fixed:**
  Shadowing of record fields in extraction to OCaml
  (`#17324 <https://github.com/rocq-prover/rocq/pull/17324>`_,
  fixes `#12813 <https://github.com/rocq-prover/rocq/issues/12813>`_
  and `#14843 <https://github.com/rocq-prover/rocq/issues/14843>`_
  and `#16677 <https://github.com/rocq-prover/rocq/issues/16677>`_,
  by Hugo Herbelin).
- **Fixed:**
  an impossible to turn off debug message "backtracking and redoing byextend on ..."
  (`#17495 <https://github.com/rocq-prover/rocq/pull/17495>`_,
  fixes `#17488 <https://github.com/rocq-prover/rocq/issues/17488>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  major memory regression affecting MathComp 2
  (`#17743 <https://github.com/rocq-prover/rocq/pull/17743>`_,
  by Enrico Tassi and Pierre Roux).

Version 8.16
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.16 integrates changes to the Coq kernel and performance improvements along
with a few new features. We highlight some of the most impactful changes here:

  - The guard checker (see :cmd:`Guarded`) now ensures strong :ref:`normalization <816Normalization>`
    under any reduction strategy.

  - Irrelevant terms (in the ``SProp`` sort) are now squashed to a dummy
    value during :ref:`conversion <816SPropConversion>`, fixing a subject reduction issue and making proof
    conversion faster.

  - Introduction of :ref:`reversible coercions <816ReversibleCoercions>`, which
    allow coercions relying on meta-level resolution such as type-classes or canonical
    structures. Also :ref:`allow coercions <816UniformInh>` that do not fullfill the :term:`uniform inheritance condition`.

  - :ref:`Generalized rewriting <816GeneralizeRew>` support for rewriting with ``Type``-valued relations and in
    ``Type`` contexts, using the ``Classes.CMorphisms`` library.

  - Added the :ref:`boolean equality <816BooleanEquality>` scheme command for decidable inductive types.

  - Added a :ref:`Print Notation <816PrintNotation>` command.

  - Incompatibilities in :ref:`name generation <816ProgramObls>` for Program obligations,
    :tacn:`eauto` treatment of :ref:`tactic failure levels <816EautoLevels>`, use of ``ident``
    :ref:`in notations <816IdentNotations>`, parsing of :ref:`module expressions <816ModuleExprs>`.

  - Standard library :ref:`reorganization and deprecations <816Stdlib>`.

  - Improve the treatment of standard library numbers by :cmd:`Extraction`.

See the `Changes in 8.16.0`_ section below for the detailed list of changes,
including potentially breaking changes marked with **Changed**.
Coq's `reference manual for 8.16 <https://coq.github.io/doc/v8.16/refman>`_,
`documentation of the 8.16 standard library <https://coq.github.io/doc/v8.16/stdlib>`_
and `developer documentation of the 8.16 ML API <https://coq.github.io/doc/v8.16/api>`_
are also available.

Ali Caglayan, Emilio Jesús Gallego Arias, Gaëtan Gilbert
and Théo Zimmermann worked on maintaining and improving the
continuous integration system and package building infrastructure.

Erik Martin-Dorel has maintained the `Coq Docker images
<https://hub.docker.com/r/coqorg/coq>`_ that are used in many Coq
projects for continuous integration.

The opam repository for Coq packages has been maintained by
Guillaume Claret, Karl Palmskog, Matthieu Sozeau and Enrico Tassi with
contributions from many users. A list of packages is available at
https://coq.inria.fr/opam/www/.

The `Coq Platform <https://github.com/coq/platform>`_ has been maintained
by Michael Soegtrop, with help from Karl Palmskog, Enrico Tassi and
Théo Zimmermann.

Our current maintainers are Yves Bertot, Frédéric Besson, Ana Borges,
Ali Caglayan, Tej Chajed, Cyril Cohen, Pierre Corbineau, Pierre Courtieu, Maxime Dénès,
Jim Fehrle, Julien Forest, Emilio Jesús Gallego Arias, Gaëtan Gilbert,
Georges Gonthier, Benjamin Grégoire, Jason Gross, Hugo Herbelin,
Vincent Laporte, Olivier Laurent, Assia Mahboubi, Kenji Maillard,
Guillaume Melquiond, Pierre-Marie Pédrot, Clément Pit-Claudel, Pierre Roux,
Kazuhiko Sakaguchi, Vincent Semeria, Michael Soegtrop, Arnaud Spiwack,
Matthieu Sozeau, Enrico Tassi, Laurent Théry, Anton Trunov, Li-yao Xia
and Théo Zimmermann. See the `Coq Team face book <https://coq.inria.fr/coq-team.html>`_
page for more details.

The 57 contributors to the 8.16 versions are Tanaka Akira, Frédéric Besson, Martin Bodin, Ana Borges,
Ali Caglayan, Minki Cho, Cyril Cohen, Juan Conejero, "stop-cran", Adrian Dapprich, Maxime Dénès,
Stéphane Desarzens, Christian Doczkal, Andrej Dudenhefner, Andres Erbsen, Jim Fehrle,
Emilio Jesús Gallego Arias, Attila Gáspár, Paolo G. Giarrusso, Gaëtan Gilbert, Rudi Grinberg, Jason Gross, Hugo Herbelin,
Wolf Honore, Jasper Hugunin, Bart Jacobs, Pierre Jouvelot,
Ralf Jung, Grant Jurgensen, Jan-Oliver Kaiser, Wojciech Karpiel, Thomas Klausner,
Ethan Kuefner, Fabian Kunze, Olivier Laurent, Yishuai Li, Erik Martin-Dorel, Guillaume Melquiond,
Jean-Francois Monin, Pierre-Marie Pédrot, Rudy Peterson, Clément Pit-Claudel, Seth Poulsen,
Ramkumar Ramachandra, Pierre Roux, Takafumi Saikawa, Kazuhiko Sakaguchi, Gabriel Scherer,
Vincent Semeria, Kartik Singhal, Michael Soegtrop, Matthieu Sozeau, Enrico Tassi, Laurent Théry,
Anton Trunov, Li-yao Xia and Théo Zimmermann.

The Coq community at large helped improve this new version via
the GitHub issue and pull request system, the coq-club@inria.fr mailing list,
the `Discourse forum <https://coq.discourse.group/>`_ and the
`Coq Zulip chat <https://coq.zulipchat.com>`_.

Version 8.16's development spanned 6 months from the release of
Coq 8.15.0. Pierre-Marie Pédrot is the release manager of Coq 8.16.
This release is the result of 356 merged PRs, closing 99 issues.

| Nantes, June 2022,
| Matthieu Sozeau for the Coq development team

Changes in 8.16.0
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

 .. _816Normalization:

- **Changed:**
  Fixpoints are now expected to be guarded even in subterms erasable
  by reduction, thus getting rid of an artificial obstacle
  preventing to lift the assumption of weak normalization of Coq to an
  assumption of strong normalization; for instance (barring
  implementation bugs) termination of the type-checking algorithm of
  Coq is now restored (of course, as usual, up to the assumption of
  the consistency of set theory and type theory, i.e., equivalently,
  up to the weak normalization of type theory, a "physical"
  assumption, which has not been contradicted for decades and which
  specialists commonly believe to be a truth)
  (`#15434 <https://github.com/rocq-prover/rocq/pull/15434>`_, incidentally
  fixes the complexity issue `#5702
  <https://github.com/rocq-prover/rocq/issues/5702>`_, by Hugo Herbelin).
- **Changed:**
  Flag :n:`Unset Guard Checking` nevertheless requires fixpoints to
  have an argument marked as decreasing in a type which is inductive
  (`#15668 <https://github.com/rocq-prover/rocq/pull/15668>`_,
  fixes `#15621 <https://github.com/rocq-prover/rocq/issues/15621>`_,
  by Hugo Herbelin).
- **Removed:**
  :ref:`Template-polymorphism` is now forbidden for mutual inductive types
  (`#15965 <https://github.com/rocq-prover/rocq/pull/15965>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Inlining of non-logical objects (notations, hints, ...) was missing
  when applying a functor returning one of its arguments as e.g. in
  :n:`Module F (E:T) := E`
  (`#15412 <https://github.com/rocq-prover/rocq/pull/15412>`_,
  fixes `#15403 <https://github.com/rocq-prover/rocq/issues/15403>`_,
  by Hugo Herbelin).

  .. _816SPropConversion:

- **Fixed:**
  We introduce a new irrelevant term in the reduction machine.
  It is used to shortcut computation of terms living in a strict
  proposition, and behaves as an exception. This restores subject
  reduction, and also makes conversion of large terms in SProp
  cheap
  (`#15575 <https://github.com/rocq-prover/rocq/pull/15575>`_,
  fixes `#14015 <https://github.com/rocq-prover/rocq/issues/14015>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  performance blowups while inferring variance information for :ref:`cumulative` inductive types
  (`#15662 <https://github.com/rocq-prover/rocq/pull/15662>`_,
  fixes `#11741 <https://github.com/rocq-prover/rocq/issues/11741>`_,
  by Gaëtan Gilbert).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Added:**
  New clause :n:`as @ident` to the :cmd:`Record` command to specify
  the name of the main argument to use by default in the type of
  projections
  (`#14563 <https://github.com/rocq-prover/rocq/pull/14563>`_,
  by Hugo Herbelin).

  .. _816ReversibleCoercions:

- **Added:**
  :term:`Reversible coercions <reversible coercion>` are coercions which cannot be
  represented by a regular coercion (a Gallina function)
  but rather a meta procedure, such as type class inference
  or canonical structure resolution
  (`#15693 <https://github.com/rocq-prover/rocq/pull/15693>`_,
  by Cyril Cohen, Pierre Roux, Enrico Tassi,
  reviewed by Ali Caglayan, Jim Fehrle and Gaëtan Gilbert).

  .. _816UniformInh:

- **Added:**
  support for coercions not fulfilling
  the uniform inheritance condition,
  allowing more freedom for the parameters that are now inferred
  using unification, canonical structures or typeclasses
  (`#15789 <https://github.com/rocq-prover/rocq/pull/15789>`_,
  fixes `#2828 <https://github.com/rocq-prover/rocq/issues/2828>`_,
  `#4593 <https://github.com/rocq-prover/rocq/issues/4593>`_,
  `#3115 <https://github.com/rocq-prover/rocq/issues/3115>`_,
  `#5222 <https://github.com/rocq-prover/rocq/issues/5222>`_,
  `#9696 <https://github.com/rocq-prover/rocq/issues/9696>`_
  and `#8540 <https://github.com/rocq-prover/rocq/issues/8540>`_,
  by Pierre Roux, reviewed by Ali Caglayan, Enrico Tassi, Kazuhiko Sakaguchi and Jim Fehrle).
- **Fixed:**
  interpretation of `{struct}` fixpoint annotations when the principal argument comes from an implicit generalization
  (`#15581 <https://github.com/rocq-prover/rocq/pull/15581>`_,
  fixes `#13157 <https://github.com/rocq-prover/rocq/issues/13157>`_,
  by Gaëtan Gilbert).

Notations
^^^^^^^^^

 .. _816IdentNotations:

- **Removed:**
  ``_`` in ``ident`` entries in notations, which was deprecated
  in favor of ``name`` in 8.13. When you see messages like

  .. code::

     Error: Notation "[ rel _ _ : _ | _ ]" is already defined at level 0
     with arguments name, name, constr, constr while it is now required to be
     at level 0 with arguments ident, ident, constr, constr.

  replace ``ident`` with ``name`` in the :cmd:`Notation` command.
  To ease the change, you can fix the ``deprecated-ident-entry`` warnings
  in Coq 8.15 (or 8.14 or 8.13). The warning can be turned into an error with
  ``-arg -w -arg +deprecated-ident-entry`` in the ``_CoqProject`` file
  (`#15754 <https://github.com/rocq-prover/rocq/pull/15754>`_,
  by Pierre Roux).
- **Added:**
  When defining a recursive notation referring to another recursive
  notation, expressions of the form :n:`x .. y` can be used where a
  sequence of binders is expected
  (`#15291 <https://github.com/rocq-prover/rocq/pull/15291>`_,
  grants `#7911 <https://github.com/rocq-prover/rocq/issues/7911>`_,
  by Hugo Herbelin).
- **Fixed:**
  Coercions are disabled when typechecking parsers and printers
  of :cmd:`Number Notation`
  (`#15884 <https://github.com/rocq-prover/rocq/pull/15884>`_,
  fixes `#15843 <https://github.com/rocq-prover/rocq/issues/15843>`_,
  by Pierre Roux).

Tactics
^^^^^^^

- **Changed:**
  The ``RewriteRelation`` type class is now used to declare relations
  inferable by the :tacn:`setoid_rewrite` tactic to construct
  ``Proper`` instances. This can break developments that relied on
  existing ``Reflexive`` instances to infer relations. The fix is
  to simply add a (backwards compatible) ``RewriteRelation`` declaration
  for the relation. This change allows to set stricter modes on the
  relation type classes ``Reflexive``, ``Symmetric``, etc.
  (`#13969 <https://github.com/rocq-prover/rocq/pull/13969>`_,
  fixes `#7916 <https://github.com/rocq-prover/rocq/issues/7916>`_,
  by Matthieu Sozeau).
- **Changed:**
  The :tacn:`setoid_rewrite` tactic can now properly recognize
  homogeneous relations applied to types in different universes
  (`#14138 <https://github.com/rocq-prover/rocq/pull/14138>`_,
  fixes `#13618 <https://github.com/rocq-prover/rocq/issues/13618>`_,
  by Matthieu Sozeau).

  .. _816EautoLevels:

- **Changed:**
  The :tacn:`eauto` tactic does not propagate internal Ltac failures
  with level > 0 anymore. Any failure caused by a hint now behaves as if it
  were a level 0 error
  (`#15215 <https://github.com/rocq-prover/rocq/pull/15215>`_,
  fixes `#15214 <https://github.com/rocq-prover/rocq/issues/15214>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  :tacn:`rewrite` when used to rewrite in multiple hypotheses (eg `rewrite foo in H,H'`) requires that the term (`foo`) does not depend on the hypotheses it rewrites.
  When using `rewrite in *`, this means we only rewrite in hypotheses which do not appear in the term
  (`#15426 <https://github.com/rocq-prover/rocq/pull/15426>`_,
  fixes `#3051 <https://github.com/rocq-prover/rocq/issues/3051>`_
  and `#15448 <https://github.com/rocq-prover/rocq/issues/15448>`_,
  by Gaëtan Gilbert).
- **Changed:**
  When it fails, :tacn:`assert_succeeds` fails with the argument tactic's original error instead of ``Tactic failure: <tactic closure> fails.``
  (`#15728 <https://github.com/rocq-prover/rocq/pull/15728>`_,
  fixes `#10970 <https://github.com/rocq-prover/rocq/issues/10970>`_,
  by Gaëtan Gilbert).
- **Deprecated:**
  the :tacn:`instantiate` tactic without arguments. Since the move to
  the monadic tactic engine in 8.5, it was behaving as the identity
  (`#15277 <https://github.com/rocq-prover/rocq/pull/15277>`_,
  by Pierre-Marie Pédrot).

  .. _816GeneralizeRew:

- **Added:**
  generalized rewriting now supports rewriting with (possibly polymorphic)
  relations valued in ``Type``. Use ``Classes.CMorphisms`` instead of
  ``Classes.Morphisms`` to declare ``Proper`` instances for :tacn:`rewrite`
  (or :tacn:`setoid_rewrite`) to use when rewriting with ``Type`` valued
  relations
  (`#14137 <https://github.com/rocq-prover/rocq/pull/14137>`_,
  fixes `#4632 <https://github.com/rocq-prover/rocq/issues/4632>`_,
  `#5384 <https://github.com/rocq-prover/rocq/issues/5384>`_,
  `#5521 <https://github.com/rocq-prover/rocq/issues/5521>`_,
  `#6278 <https://github.com/rocq-prover/rocq/issues/6278>`_,
  `#7675 <https://github.com/rocq-prover/rocq/issues/7675>`_,
  `#8739 <https://github.com/rocq-prover/rocq/issues/8739>`_,
  `#11011 <https://github.com/rocq-prover/rocq/issues/11011>`_,
  `#12240 <https://github.com/rocq-prover/rocq/issues/12240>`_,
  and `#15279 <https://github.com/rocq-prover/rocq/issues/15279>`_,
  by Matthieu Sozeau helped by Ali Caglayan).
- **Added:**
  Tactics to obtain a micromega :term:`cone expression` (aka witness)
  from an already reified goal.
  Using those tactics, the user can develop their own micromega tactics
  for their own types, using their own parsers
  (`#15921 <https://github.com/rocq-prover/rocq/pull/15921>`_,
  by Pierre Roux, reviewed by Frédéric Besson and Jim Fehrle).
- **Fixed:**
  :tacn:`typeclasses eauto` used with multiple hint databases respects priority differences for hints from separate databases
  (`#15289 <https://github.com/rocq-prover/rocq/pull/15289>`_,
  fixes `#5304 <https://github.com/rocq-prover/rocq/issues/5304>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  :tacn:`cbn` has better support for combining `simpl nomatch`, `!` and `/` specifiers (c.f. :cmd:`Arguments`)
  (`#15657 <https://github.com/rocq-prover/rocq/pull/15657>`_,
  fixes `#3989 <https://github.com/rocq-prover/rocq/issues/3989>`_
  and `#15206 <https://github.com/rocq-prover/rocq/issues/15206>`_,
  by Gaëtan Gilbert).

Tactic language
^^^^^^^^^^^^^^^

- **Changed:**
  Ltac `match` does not fail when the term to match contains an unfolded primitive projection
  (`#15559 <https://github.com/rocq-prover/rocq/pull/15559>`_,
  fixes `#15554 <https://github.com/rocq-prover/rocq/issues/15554>`_,
  by Gaëtan Gilbert).
- **Added:**
  ``Ltac2`` understands :token:`toplevel_selector` and obeys :opt:`Default Goal Selector`.
  Note that ``par:`` is buggy when combined with :tacn:`abstract`. Unlike ``Ltac1`` even ``par: abstract tac`` is not properly treated
  (`#15378 <https://github.com/rocq-prover/rocq/pull/15378>`_,
  by Gaëtan Gilbert).
- **Added:**
  Ltac2 `Int` functions `div`, `mod`, `asr`, `lsl`, `lsr`, `land`, `lor` , `lxor` and `lnot`
  (`#15637 <https://github.com/rocq-prover/rocq/pull/15637>`_,
  by Michael Soegtrop).
- **Fixed:**
  Ltac2 `apply` and `eapply` not unifying with implicit arguments;
  unification inconsistent with `exact` and `eexact`
  (`#15741 <https://github.com/rocq-prover/rocq/pull/15741>`_,
  by Ramkumar Ramachandra).

SSReflect
^^^^^^^^^

- **Fixed:**
  :tacn:`have`, :tacn:`suff` and :tacn:`wlog` support goals in `SProp`
  (`#15121 <https://github.com/rocq-prover/rocq/pull/15121>`_,
  by Enrico Tassi).

Commands and options
^^^^^^^^^^^^^^^^^^^^

 .. _816ModuleExprs:

- **Changed:**
  :cmd:`Module` now only allows parentheses around module arguments. For instance, ``Module M := (F X).`` is now a parsing error
  (`#15355 <https://github.com/rocq-prover/rocq/pull/15355>`_,
  by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Fail` no longer catches anomalies, which it has done since Coq version 8.11.
  Now it only catches user errors
  (`#15366 <https://github.com/rocq-prover/rocq/pull/15366>`_,
  by Hugo Herbelin).
- **Changed:**
  :ref:`program_definition` in universe monomorphic mode does not accept non-extensible universe declarations
  (`#15424 <https://github.com/rocq-prover/rocq/pull/15424>`_,
  fixes `#15410 <https://github.com/rocq-prover/rocq/issues/15410>`_,
  by Gaëtan Gilbert).

  .. _816ProgramObls:

- **Changed:**
  The algorithm for name generation of anonymous variables
  for ``Program`` subproofs is now the same as the one
  used in the general case. This can create incompatibilities
  in scripts relying on such autogenerated names. The old
  scheme can be reactivated using the deprecated flag
  ``Program Naming``
  (`#15442 <https://github.com/rocq-prover/rocq/pull/15442>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  `Universal Lemma Under Conjunction` flag, that was deprecated in 8.15
  (`#15268 <https://github.com/rocq-prover/rocq/pull/15268>`_,
  by Théo Zimmermann).
- **Removed:**
  :cmd:`Abort` no longer takes an :n:`@ident` as an argument (it has been ignored since 8.5)
  (`#15669 <https://github.com/rocq-prover/rocq/pull/15669>`_,
  by Gaëtan Gilbert).
- **Removed:**
  `Simplex` flag, that was deprecated in 8.14.
  :tacn:`lia` and :tacn:`lra` will always use the simplex solver (that was already the default behaviour)
  (`#15690 <https://github.com/rocq-prover/rocq/pull/15690>`_,
  by Frédéric Besson).
- **Deprecated:**
  ``Add LoadPath`` and ``Add Rec LoadPath``. If this command is an
  important feature for you, please open an issue on `GitHub <https://github.com/rocq-prover/rocq/issues>`
  and explain your workflow
  (`#15652 <https://github.com/rocq-prover/rocq/pull/15652>`_,
  by Gaëtan Gilbert).
- **Deprecated:**
  the `Typeclasses Filtered Unification` flag. Due to
  a buggy implementation, it is unlikely this is used in the wild
  (`#15752 <https://github.com/rocq-prover/rocq/pull/15752>`_,
  by Pierre-Marie Pédrot).

  .. _816BooleanEquality:

- **Added:**
  :cmd:`Scheme Boolean Equality` command to generate the boolean
  equality for an inductive type whose equality is
  decidable.  It is useful when Coq is able to generate the boolean
  equality but isn't powerful enough to prove the decidability of
  equality (unlike :cmd:`Scheme Equality`, which tries to
  prove the decidability of the type)
  (`#15526 <https://github.com/rocq-prover/rocq/pull/15526>`_,
  by Hugo Herbelin).
- **Added:**
  New more extensive algorithm based on the "parametricity"
  translation for canonically generating Boolean equalities associated
  to a decidable inductive type
  (`#15527 <https://github.com/rocq-prover/rocq/pull/15527>`_,
  by Hugo Herbelin).
- **Added:**
  :cmd:`From … Dependency` command to
  declare a dependency of a ``.v`` file on an external file.
  The ``coqdep`` tool generates build dependencies accordingly
  (`#15650 <https://github.com/rocq-prover/rocq/pull/15650>`_,
  fixes `#15600 <https://github.com/rocq-prover/rocq/issues/15600>`_,
  by Enrico Tassi).

  .. _816PrintNotation:

- **Added:**
  :cmd:`Print Notation` command that prints the level and
  associativity of a given notation definition string
  (`#15683 <https://github.com/rocq-prover/rocq/pull/15683>`_,
  fixes `#14907 <https://github.com/rocq-prover/rocq/issues/14907>`_
  and `#4436 <https://github.com/rocq-prover/rocq/issues/4436>`_
  and `#7730 <https://github.com/rocq-prover/rocq/issues/7730>`_,
  by Ali Caglayan and Ana Borges, with help from Emilio Jesus Gallego Arias).
- **Added:**
  a warning when trying to deprecate a definition
  (`#15760 <https://github.com/rocq-prover/rocq/pull/15760>`_,
  by Pierre Roux).
- **Added:**
  A deprecation warning that the :g:`Class >` syntax, which currently
  does nothing, will in the future declare :ref:`coercions <coercions>`
  as it does when used in :cmd:`Record` commands
  (`#15802 <https://github.com/rocq-prover/rocq/pull/15802>`_,
  by Pierre Roux, reviewed by Gaëtan Gilbert, Ali Caglayan,
  Jason Gross, Jim Fehrle and Théo Zimmermann).
- **Added:**
  the :attr:`nonuniform` boolean attribute that silences the
  non-uniform-inheritance warning when user needs to declare such a
  coercion on purpose
  (`#15853 <https://github.com/rocq-prover/rocq/pull/15853>`_,
  by Pierre Roux, reviewed by Gaëtan Gilbert and Jim Fehrle).
- **Added:** All commands which can import modules (e.g. ``Module
  Import M.``, ``Module F (Import X : T).``, ``Require Import M.``,
  etc) now support :token:`import_categories`. :cmd:`Require Import`
  and :cmd:`Require Export` also support :token:`filtered_import`
  (`#15945 <https://github.com/rocq-prover/rocq/pull/15945>`_, fixes `#14872
  <https://github.com/rocq-prover/rocq/issues/14872>`_, by Gaëtan Gilbert).
- **Fixed:**
  Make `Require Import M.` equivalent to `Require M. Import M.`
  (`#15347 <https://github.com/rocq-prover/rocq/pull/15347>`_,
  fixes `#3556 <https://github.com/rocq-prover/rocq/issues/3556>`_,
  by Maxime Dénès).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Added:**
  coq_makefile variable `COQPLUGININSTALL` to configure the installation of ML plugins
  (`#15788 <https://github.com/rocq-prover/rocq/pull/15788>`_,
  by Cyril Cohen and Enrico Tassi).
- **Added:**
  Added :n:`-bytecode-compiler {| yes | no }` flag for ``coqchk`` enabling
  :tacn:`vm_compute` during checks, which is off by default
  (`#15886 <https://github.com/rocq-prover/rocq/pull/15886>`_,
  by Ali Caglayan).
- **Fixed:**
  ``coqdoc`` confused by the presence of command :cmd:`Load` in a file
  (`#15511 <https://github.com/rocq-prover/rocq/pull/15511>`_,
  fixes `#15497 <https://github.com/rocq-prover/rocq/issues/15497>`_,
  by Hugo Herbelin).

CoqIDE
^^^^^^

- **Added:**
  Documentation of editing failed async mode proofs,
  how to configure key bindings and various previously
  undocumented details
  (`#16070 <https://github.com/rocq-prover/rocq/pull/16070>`_,
  by Jim Fehrle).

Standard library
^^^^^^^^^^^^^^^^

  .. _816Stdlib:

- **Changed:**
  the ``signature`` scope of ``Classes.CMorphisms`` into ``signatureT``
  (`#15446 <https://github.com/rocq-prover/rocq/pull/15446>`_,
  by Olivier Laurent).
- **Changed:**
  the locality of typeclass instances `Permutation_app'` and `Permutation_cons` from :attr:`global` to :attr:`export`
  (`#15597 <https://github.com/rocq-prover/rocq/pull/15597>`_,
  fixes `#15596 <https://github.com/rocq-prover/rocq/issues/15596>`_,
  by Gaëtan Gilbert).
- **Removed:**
  ``Int63``, which was deprecated in favor of ``Uint63`` in 8.14
  (`#15754 <https://github.com/rocq-prover/rocq/pull/15754>`_,
  by Pierre Roux).
- **Deprecated:**
  some obsolete files from the ``Arith`` part of the standard library
  (``Div2``, ``Even``, ``Gt``, ``Le``, ``Lt``, ``Max``, ``Min``, ``Minus``, ``Mult``, ``NPeano``, ``Plus``).
  Import ``Arith_base`` instead of these files.  References to items in the deprecated files should be replaced
  with references to ``PeanoNat.Nat`` as suggested by the warning messages.
  Concerning the definitions of parity properties (even and odd), it is recommended to use ``Nat.Even`` and ``Nat.Odd``.
  If an inductive definition of parity is required, the mutually inductive ``Nat.Even_alt`` and ``Nat.Odd_alt`` can be used. However, induction principles for ``Nat.Odd`` and ``Nat.Even`` are available as ``Nat.Even_Odd_ind`` and ``Nat.Odd_Even_ind``.
  The equivalence between the non-inductive and mutually inductive definitions of parity can be found in ``Nat.Even_alt_Even`` and ``Nat.Odd_alt_Odd``.
  All ``Hint`` declarations in the ``arith`` database have been moved to ``Arith_prebase`` and
  ``Arith_base``.  To use the results about Peano arithmetic, we recommend importing
  ``PeanoNat`` (or ``Arith_base`` to base it on the ``arith`` hint database) and using the ``Nat`` module.
  ``Arith_prebase`` has been introduced temporarily to ensure compatibility, but it will be removed at the end of the
  deprecation phase, e.g. in 8.18.  Its use is thus discouraged
  (`#14736 <https://github.com/rocq-prover/rocq/pull/14736>`_, `#15411 <https://github.com/rocq-prover/rocq/pull/15411>`_,
  by Olivier Laurent, with help of Karl Palmskog).
- **Deprecated:**
  `identity` inductive (replaced by the equivalent `eq`).
  `Init.Logic_Type` is removed (the only remaining definition `notT` is moved
  to `Init.Logic`)
  (`#15256 <https://github.com/rocq-prover/rocq/pull/15256>`_,
  by Olivier Laurent).
- **Deprecated:**
  `P_Rmin`: use more general `Rmin_case` instead
  (`#15388 <https://github.com/rocq-prover/rocq/pull/15388>`_,
  fixes `#15382 <https://github.com/rocq-prover/rocq/issues/15382>`_,
  by Olivier Laurent).
- **Added:**
  lemma `count_occ_rev`
  (`#15397 <https://github.com/rocq-prover/rocq/pull/15397>`_,
  by Olivier Laurent).
- **Added:**
  ``Nat.EvenT`` and ``Nat.OddT`` (almost the same as ``Nat.Even`` and ``Nat.Odd`` but with output in ``Type``.
  Decidability of parity (with output ``Type``) is provided ``EvenT_OddT_dec`` as well as induction principles ``Nat.EvenT_OddT_rect`` and ``Nat.OddT_EvenT_rect`` (with output ``Type``)
  (`#15427 <https://github.com/rocq-prover/rocq/pull/15427>`_,
  by Olivier Laurent).
- **Added:**
  Added a proof of ``sin x < x`` for positive ``x`` and ``x < sin x`` for negative ``x``
  (`#15599 <https://github.com/rocq-prover/rocq/pull/15599>`_,
  by stop-cran).
- **Added:**
  decidability typeclass instances for Z.le, Z.lt, Z.ge and Z.gt, added lemmas Z.geb_ge and Z.gtb_gt
  (`#15620 <https://github.com/rocq-prover/rocq/pull/15620>`_,
  by Michael Soegtrop).
- **Added:**
  lemmas ``Rinv_inv``, ``Rinv_mult``, ``Rinv_opp``, ``Rinv_div``, ``Rdiv_opp_r``,
  ``Rsqr_div'``, ``Rsqr_inv'``, ``sqrt_inv``, ``Rabs_inv``, ``pow_inv``,
  ``powerRZ_inv'``, ``powerRZ_neg'``, ``powerRZ_mult``, ``cv_infty_cv_0``,
  which are variants of existing lemmas, but without any hypothesis
  (`#15644 <https://github.com/rocq-prover/rocq/pull/15644>`_,
  by Guillaume Melquiond).
- **Added:**
  a Leibniz equality test for primitive floats
  (`#15719 <https://github.com/rocq-prover/rocq/pull/15719>`_,
  by Pierre Roux, reviewed by Guillaume Melquiond).
- **Added:**
  support for primitive floats in Scheme Boolean Equality
  (`#15719 <https://github.com/rocq-prover/rocq/pull/15719>`_,
  by Pierre Roux, reviewed by Hugo Herbelin).
- **Added:**
  lemma :g:`le_add_l` to ``NAddOrder.v``. Use :g:`Nat.le_add_l` as replacement for the deprecated :g:`Plus.le_plus_r`
  (`#16184 <https://github.com/rocq-prover/rocq/pull/16184>`_,
  by Andrej Dudenhefner).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  Bumped lablgtk3 lower bound to 3.1.2
  (`#15947 <https://github.com/rocq-prover/rocq/pull/15947>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  Load plugins using `findlib <http://projects.camlcity.org/projects/findlib.html>`_.
  This requires projects built with ``coq_makefile`` to either provide a
  hand written ``META`` file or use the ``-generate-meta-for-package`` option
  when applicable. As a consequence :cmd:`Declare ML Module` now uses plugin
  names according to ``findlib``, e.g. `coq-aac-tactics.plugin`.
  ``coqdep`` accepts ``-m META`` and uses the file to resolve plugin names to
  actual file names
  (`#15220 <https://github.com/rocq-prover/rocq/pull/15220>`_,
  fixes `#7698 <https://github.com/rocq-prover/rocq/issues/7698>`_,
  by Enrico Tassi).
- **Changed:**
  Minimum supported zarith version is now 1.11
  (`#15483 <https://github.com/rocq-prover/rocq/pull/15483>`_
  and `#16005 <https://github.com/rocq-prover/rocq/pull/16005>`_
  and `#16030 <https://github.com/rocq-prover/rocq/pull/16030>`_,
  closes `#15496 <https://github.com/rocq-prover/rocq/issues/15496>`_,
  by Gaëtan Gilbert and Théo Zimmermann and Jason Gross).
- **Changed:**
  Bump the minimum OCaml version to 4.09.0.
  As a consequence the minimum supported ocamlfind version is now
  1.8.1 (`#15947 <https://github.com/rocq-prover/rocq/pull/15947>`_
  and `#16046 <https://github.com/rocq-prover/rocq/pull/16046>`_,
  fixes `#14260 <https://github.com/rocq-prover/rocq/issues/14260>`_
  and `#16015 <https://github.com/rocq-prover/rocq/pull/16015>`_,
  by Pierre-Marie Pédrot and Théo Zimmermann).

Extraction
^^^^^^^^^^

  .. _816Extraction:

- **Changed:**
  `ExtrOCamlInt63` no longer extracts `comparison` to `int` in OCaml;
  the extraction of `Uint63.compare` and `Sint63.compare` was also adapted accordingly
  (`#15294 <https://github.com/rocq-prover/rocq/pull/15294>`_,
  fixes `#15280 <https://github.com/rocq-prover/rocq/issues/15280>`_,
  by Li-yao Xia).
- **Changed:**
  Extraction from :g:`nat` to OCaml :g:`int` uses Stdlib instead of Pervasives
  (`#15333 <https://github.com/rocq-prover/rocq/pull/15333>`_,
  by Rudy Nicolo Peterson).
- **Changed:**
  The empty inductive type is now extracted to OCaml empty type
  available since OCaml 4.07
  (`#15967 <https://github.com/rocq-prover/rocq/pull/15967>`_,
  by Pierre Roux).
- **Added:**
  More extraction definitions for division and comparison of Z and N
  (`#15098 <https://github.com/rocq-prover/rocq/pull/15098>`_,
  by Li-yao Xia).
- **Fixed:**
  Type :n:`int` in files :n:`Number.v`, :n:`Decimal.v` and
  :n:`Hexadecimal.v` have been renamed to :n:`signed_int` (together
  with a compatibility alias :n:`int`) so that they can be used in
  extraction without conflicting with OCaml's :n:`int` type
  (`#13460 <https://github.com/rocq-prover/rocq/pull/13460>`_,
  fixes `#7017 <https://github.com/rocq-prover/rocq/issues/7017>`_
  and `#13288 <https://github.com/rocq-prover/rocq/issues/13288>`_,
  by Hugo Herbelin).

Changes in 8.16.1
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

- **Fixed:**
  conversion of Prod values in the native compiler
  (`#16651 <https://github.com/rocq-prover/rocq/pull/16651>`_,
  fixes `#16645 <https://github.com/rocq-prover/rocq/issues/16645>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  Coq 8.16.0 missed `SProp` check for opaque names in conversion
  (`#16768 <https://github.com/rocq-prover/rocq/pull/16768>`_,
  fixes `#16752 <https://github.com/rocq-prover/rocq/issues/16752>`_,
  by Hugo Herbelin).
- **Fixed:**
  Pass the correct environment to compute η-expansion of cofixpoints
  in VM and native compilation
  (`#16845 <https://github.com/rocq-prover/rocq/pull/16845>`_,
  fixes `#16831 <https://github.com/rocq-prover/rocq/issues/16831>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  inconsistency with conversion of primitive arrays, and associated incomplete strong normalization of primitive arrays with ``lazy``
  (`#16850 <https://github.com/rocq-prover/rocq/pull/16850>`_,
  fixes `#16829 <https://github.com/rocq-prover/rocq/issues/16829>`_,
  by Gaëtan Gilbert,
  reported by Maxime Buyse and Andres Erbsen).

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Fixed:**
  :cmd:`Print Assumptions` treats opaque definitions with missing proofs (as found in ``.vos`` files, see :ref:`compiled-interfaces`) as axioms instead of ignoring them
  (`#16434 <https://github.com/rocq-prover/rocq/pull/16434>`_,
  fixes `#16411 <https://github.com/rocq-prover/rocq/issues/16411>`_,
  by Gaëtan Gilbert).

CoqIDE
^^^^^^

- **Fixed:**
  "Interrupt computations" now works correctly on Windows—except
  if you start CoqIDE as a background process, e.g. with `coqide &` in `bash`,
  in which case it won't work at all
  (`#16142 <https://github.com/rocq-prover/rocq/pull/16142>`_,
  fixes `#13550 <https://github.com/rocq-prover/rocq/issues/13550>`_,
  by Jim Fehrle).

Version 8.15
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.15 integrates many bug fixes, deprecations and cleanups as well
as a few new features. We highlight some of the most impactful changes here:

  - The :tacn:`apply with <apply>` tactic :ref:`no longer renames arguments <815ApplyWith>`
    unless compatibility flag `Apply With Renaming` is set.

  - :ref:`Improvements <815Auto>` to the :tacn:`auto` tactic family,
    fixing the :cmd:`Hint Unfold` behavior, and generalizing the use
    of discrimination nets.

  - The :tacn:`typeclasses eauto` tactic has a new :ref:`best_effort <815BestEffort>`
    option allowing it to return *partial* solutions to a proof search problem,
    depending on the mode declarations associated to each constraint.
    This mode is used by typeclass resolution during type inference to
    provide more precise error messages.

  - Many :ref:`commands and options <815Commands>` were deprecated or removed
    after deprecation and more consistently support locality attributes.

  - The :cmd:`Import` command is extended with :token:`import_categories`
    to :ref:`select the components <815Import>` of a module to import or not, including
    features such as hints, coercions, and notations.

  - A :ref:`visual Ltac debugger <815LtacDebugger>` is now available in CoqIDE.

See the `Changes in 8.15.0`_ section below for the detailed list of changes,
including potentially breaking changes marked with **Changed**.
Coq's `reference manual for 8.15 <https://coq.github.io/doc/v8.15/refman>`_,
`documentation of the 8.15 standard library <https://coq.github.io/doc/v8.15/stdlib>`_
and `developer documentation of the 8.15 ML API <https://coq.github.io/doc/v8.15/api>`_
are also available.

Emilio Jesús Gallego Arias, Gaëtan Gilbert, Michael
Soegtrop and Théo Zimmermann worked on maintaining and improving the
continuous integration system and package building infrastructure.

Erik Martin-Dorel has maintained the `Coq Docker images
<https://hub.docker.com/r/coqorg/coq>`_ that are used in many Coq
projects for continuous integration.

The opam repository for Coq packages has been maintained by
Guillaume Claret, Karl Palmskog, Matthieu Sozeau and Enrico Tassi with
contributions from many users. A list of packages is available at
https://coq.inria.fr/opam/www/.

The `Coq Platform <https://github.com/coq/platform>`_ has been maintained
by Michael Soegtrop and Enrico Tassi.

Our current maintainers are Yves Bertot, Frédéric Besson, Ali Caglayan, Tej
Chajed, Cyril Cohen, Pierre Corbineau, Pierre Courtieu, Maxime Dénès,
Jim Fehrle, Julien Forest, Emilio Jesús Gallego Arias, Gaëtan Gilbert,
Georges Gonthier, Benjamin Grégoire, Jason Gross, Hugo Herbelin,
Vincent Laporte, Olivier Laurent, Assia Mahboubi, Kenji Maillard,
Guillaume Melquiond, Pierre-Marie Pédrot, Clément Pit-Claudel, Pierre Roux,
Kazuhiko Sakaguchi, Vincent Semeria, Michael Soegtrop, Arnaud Spiwack,
Matthieu Sozeau, Enrico Tassi, Laurent Théry, Anton Trunov, Li-yao Xia
and Théo Zimmermann. See the `Coq Team face book <https://coq.inria.fr/coq-team.html>`_
page for more details.

The 41 contributors to this version are
Tanaka Akira, Frédéric Besson, Juan Conejero, Ali Caglayan, Cyril Cohen, Adrian Dapprich, Maxime Dénès,
Stéphane Desarzens, Christian Doczkal, Andrej Dudenhefner, Jim Fehrle, Emilio Jesús Gallego Arias,
Attila Gáspár, Gaëtan Gilbert, Jason Gross, Hugo Herbelin, Jasper Hugunin, Bart Jacobs, Ralf Jung, Grant Jurgensen,
Jan-Oliver Kaiser, Wojciech Karpiel, Fabian Kunze, Olivier Laurent, Yishuai Li, Erik Martin-Dorel,
Guillaume Melquiond, Jean-Francois Monin, Pierre-Marie Pédrot, Rudy Peterson, Clément Pit-Claudel,
Seth Poulsen, Pierre Roux, Takafumi Saikawa, Kazuhiko Sakaguchi, Michael Soegtrop, Matthieu Sozeau,
Enrico Tassi, Laurent Théry, Anton Trunov and Théo Zimmerman.

The Coq community at large helped improve the design of this new version via
the GitHub issue and pull request system, the Coq development mailing list
coqdev@inria.fr, the coq-club@inria.fr mailing list, the `Discourse forum
<https://coq.discourse.group/>`_ and the `Coq Zulip chat <https://coq.zulipchat.com>`_.

Version 8.15's development spanned 3 months from the release of
Coq 8.14.0. Gaëtan Gilbert is the release manager of Coq 8.15.
This release is the result of 384 merged PRs, closing 143 issues.

| Nantes, January 2022,
| Matthieu Sozeau for the Coq development team

Changes in 8.15.0
~~~~~~~~~~~~~~~~~

.. contents::
   :local:


Kernel
^^^^^^

- **Fixed:**
  Name clash in a computation of the type of parameters of functorial
  module types; this computation was provided for the purpose of
  clients using the algebraic form of module types such as :cmd:`Print
  Module Type`
  (`#15385 <https://github.com/rocq-prover/rocq/pull/15385>`_,
  fixes `#9555 <https://github.com/rocq-prover/rocq/issues/9555>`_,
  by Hugo Herbelin).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  :cmd:`Instance` warns about the default locality immediately rather than waiting until the instance is ready to be defined.
  This changes which command warns when the instance has a separate proof: the :cmd:`Instance` command itself warns instead of the proof closing command (such as :cmd:`Defined`)
  (`#14705 <https://github.com/rocq-prover/rocq/pull/14705>`_,
  by Gaëtan Gilbert).
- **Removed:**
  Arguments of section variables may no longer be renamed with :cmd:`Arguments` (this was previously applied inconsistently)
  (`#14573 <https://github.com/rocq-prover/rocq/pull/14573>`_,
  by Gaëtan Gilbert).
- **Added:**
  Non-dependent implicit arguments can be provided explicitly using
  the syntax :n:`(@natural := @term)` where :token:`natural` is the index
  of the implicit argument among all non-dependent arguments of the
  function, starting from 1
  (`#11099 <https://github.com/rocq-prover/rocq/pull/11099>`_,
  by Hugo Herbelin).
- **Added:**
  :cmd:`Succeed`, a :n:`@control_command` that verifies that the given :n:`@sentence` succeeds without changing the proof state
  (`#14750 <https://github.com/rocq-prover/rocq/pull/14750>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  The :n:`@term.(@qualid {* @arg })` syntax now takes into account the position of
  the main argument :n:`@term` when computing the implicit arguments of
  :n:`@qualid`
  (`#14606 <https://github.com/rocq-prover/rocq/pull/14606>`_,
  fixes `#4167 <https://github.com/rocq-prover/rocq/issues/4167>`_,
  by Hugo Herbelin).
- **Fixed:**
  Source and target of coercions preserved by module instantiation
  (`#14668 <https://github.com/rocq-prover/rocq/pull/14668>`_,
  fixes `#3527 <https://github.com/rocq-prover/rocq/issues/3527>`_,
  by Hugo Herbelin).
- **Fixed:**
  Made reference manual consistent with the implementation regarding
  the role of recursively non-uniform parameters of inductive types in the nested
  positivity condition
  (`#14967 <https://github.com/rocq-prover/rocq/pull/14967>`_,
  fixes `#14938 <https://github.com/rocq-prover/rocq/issues/14938>`_,
  by Hugo Herbelin)

Notations
^^^^^^^^^

- **Changed:**
  Terms printed in error messages may be more verbose if syntactic sugar would make it appear that the obtained and expected terms only differ in existential variables
  (`#14672 <https://github.com/rocq-prover/rocq/pull/14672>`_,
  by Gaëtan Gilbert).
- **Removed:**
  the ``Numeral Notation`` command that was renamed to :cmd:`Number Notation` in 8.13
  (`#14819 <https://github.com/rocq-prover/rocq/pull/14819>`_,
  by Pierre Roux).
- **Removed:**
  primitive float notations ``<``, ``<=`` and ``==`` that were replaced by ``<?``, ``<=?`` and ``=?`` in 8.13
  (`#14819 <https://github.com/rocq-prover/rocq/pull/14819>`_,
  by Pierre Roux).
- **Removed:**
  primitive integer notations ``\%``, ``<``, ``<=`` and ``==`` that were replaced by ``mod``, ``<?``, ``<=?`` and ``=?`` in 8.13
  (`#14819 <https://github.com/rocq-prover/rocq/pull/14819>`_,
  by Pierre Roux).
- **Added:**
  Include floats in the number notation mechanism
  (`#14525 <https://github.com/rocq-prover/rocq/pull/14525>`_,
  by Pierre Roux).
- **Added:**
  Coercion entries and :n:`ident`/:n:`global` entries in custom notations now
  respect the :n:`only parsing` modifier
  (`#15340 <https://github.com/rocq-prover/rocq/pull/15340>`_,
  fixes `#15335 <https://github.com/rocq-prover/rocq/issues/15335>`_,
  by Hugo Herbelin).
- **Fixed:**
  :cmd:`Reserved Infix` now accept further parameters in the infix notation
  (`#14379 <https://github.com/rocq-prover/rocq/pull/14379>`_,
  fixes `#11402 <https://github.com/rocq-prover/rocq/issues/11402>`_,
  by Hugo Herbelin).
- **Fixed:**
  Useless self reference when printing abbreviations declared in nested modules
  (`#14493 <https://github.com/rocq-prover/rocq/pull/14493>`_,
  fixes one part of `#12777 <https://github.com/rocq-prover/rocq/issues/12777>`_
  and `#14486 <https://github.com/rocq-prover/rocq/issues/14486>`_,
  by Hugo Herbelin).
- **Fixed:**
  anomalies with notation applied in `match` patterns when the
  notation have a notation variable at head
  (`#14713 <https://github.com/rocq-prover/rocq/pull/14713>`_,
  fixes `#14708 <https://github.com/rocq-prover/rocq/issues/14708>`_,
  by Hugo Herbelin).
- **Fixed:**
  Regression in parsing error reporting in case of empty custom entry
  (`#15338 <https://github.com/rocq-prover/rocq/pull/15338>`_,
  fixes `#15334 <https://github.com/rocq-prover/rocq/issues/15334>`_,
  by Hugo Herbelin).

Tactics
^^^^^^^

  .. _815ApplyWith:

- **Changed:**
  ``apply with`` does not rename arguments unless using compatibility flag `Apply With Renaming`
  (`#13837 <https://github.com/rocq-prover/rocq/pull/13837>`_,
  fixes `#13759 <https://github.com/rocq-prover/rocq/issues/13759>`_,
  by Gaëtan Gilbert).

  Porting hint: if the renaming is because of a goal variable (eg
  ``intros x; apply foo with (x0 := bar)`` where ``About foo.`` says
  the argument is called ``x``) it is probably caused by an
  interaction with implicit arguments and ``apply @foo with (x :=
  bar)`` will usually be a backwards compatible fix.

  .. _815Auto:

- **Changed:**
  :cmd:`Hint Unfold` in discriminated databases now respects its
  specification, namely that a constant may be unfolded only when
  it is the head of the goal. The previous behavior was to perform
  unfolding on any goal, without any limitation.

  An unexpected side-effect of this was that a database that
  contained ``Unfold`` hints would sometimes trigger silent
  strong βι-normalization of the goal. Indeed, :tacn:`unfold`
  performs such a normalization regardless of the presence of its
  argument in the goal. This does introduce a bit of backwards
  incompatibility, but it occurs in very specific situations
  and is easily circumvented. Since by default hint bases
  are not discriminated, it means that incompatibilities are
  typically observed when adding unfold hints to the typeclass
  database.

  In order to recover the previous behavior, it is enough
  to replace instances of ``Hint Unfold foo.``
  with ``Hint Extern 4 => progress (unfold foo).``. A less compatible but
  finer-grained change can be achieved by only adding the missing normalization
  phase with ``Hint Extern 4 => progress (lazy beta iota).``
  (`#14679 <https://github.com/rocq-prover/rocq/pull/14679>`_,
  fixes `#14874 <https://github.com/rocq-prover/rocq/issues/14874>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  Correctly consider variables without a body to be rigid
  for the pattern recognition algorithm of discriminated
  hints
  (`#14722 <https://github.com/rocq-prover/rocq/pull/14722>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  Use discrimination nets for goals containing evars in all
  :tacn:`auto` tactics. It essentially makes the behavior of undiscriminated
  databases to be the one of discriminated databases where all constants are
  considered transparent. This may be incompatible with previous behavior in
  very rare cases (`#14848 <https://github.com/rocq-prover/rocq/pull/14848>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  The ``choice`` strategy for :tacn:`rewrite_strat` is now of arbitrary arity
  (`#14989 <https://github.com/rocq-prover/rocq/pull/14989>`_,
  fixes `#6109 <https://github.com/rocq-prover/rocq/issues/6109>`_,
  by Gaëtan Gilbert).
- **Changed:**
  The :tacn:`exact` tactic now takes a :g:`uconstr` as argument
  instead of an ad-hoc one. In very rare cases, this can change
  the order of resolution of dependent evars when used over
  several goals at once
  (`#15171 <https://github.com/rocq-prover/rocq/pull/15171>`_,
  by Pierre-Marie Pédrot).
- **Changed:** :tacn:`cbn` interprets the combination of the ``!`` and
  ``/`` modifiers (from :cmd:`Arguments`) to mean "unfold as soon as
  all arguments before the ``/`` are provided and all arguments marked
  with ``!`` reduce to a constructor". This makes it unfold more often
  than without the ``/`` when all arguments are provided. Previously
  adding ``/`` would only prevent unfolding when insufficient
  arguments are provided without adding new unfoldings.

  Note that this change only takes effect in default mode (as opposed
  to when ``simpl nomatch`` was used) (`#15204
  <https://github.com/rocq-prover/rocq/pull/15204>`_, fixes `#4555
  <https://github.com/rocq-prover/rocq/issues/4555>`_ and `#7674
  <https://github.com/rocq-prover/rocq/issues/7674>`_, by Gaëtan Gilbert).
- **Removed:**
  the deprecated new auto tactic
  (`#14527 <https://github.com/rocq-prover/rocq/pull/14527>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  deprecated syntax for :tacn:`instantiate` using capitalized ``Value`` or ``Type``
  (`#15193 <https://github.com/rocq-prover/rocq/pull/15193>`_,
  by Gaëtan Gilbert).
- **Removed:**
  deprecated ``autoapply ... using`` syntax for :tacn:`autoapply`
  (`#15194 <https://github.com/rocq-prover/rocq/pull/15194>`_,
  by Gaëtan Gilbert).
- **Deprecated:**
  the `bfs eauto` tactic. Since its introduction
  it has behaved exactly like the :tacn:`eauto` tactic.
  Use :tacn:`typeclasses eauto` with the `bfs` flag instead
  (`#15314 <https://github.com/rocq-prover/rocq/pull/15314>`_,
  fixes `#15300 <https://github.com/rocq-prover/rocq/issues/15300>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  The :tacn:`zify` tactic can now recognize `Pos.Nsucc_double`, `Pos.Ndouble`,
  `N.succ_double`, `N.double`, `N.succ_pos`, `N.div2`, `N.pow`, `N.square`, and
  `Z.to_pos`. Moreover, importing module `ZifyBool` lets it recognize `Pos.eqb`,
  `Pos.leb`, `Pos.ltb`, `N.eqb`, `N.leb`, and `N.ltb`
  (`#10998 <https://github.com/rocq-prover/rocq/pull/10998>`_,
  by Kazuhiko Sakaguchi).

  .. _815BestEffort:

- **Added:**
  :ref:`best_effort <TypeclassesEautoBestEffort>` option to :tacn:`typeclasses eauto`,
  to return a *partial* solution to its initial proof-search problem. The goals that
  can remain unsolved are determined according to the modes declared for their head
  (see :cmd:`Hint Mode`). This is used by typeclass resolution during type
  inference to provide more informative error messages
  (`#13952 <https://github.com/rocq-prover/rocq/pull/13952>`_,
  fixes `#13942 <https://github.com/rocq-prover/rocq/pull/13952>`_ and
  `#14125 <https://github.com/rocq-prover/rocq/pull/14125>`_, by Matthieu Sozeau).
- **Added:**
  A new :table:`Keep Equalities` table to selectively control the
  preservation of subterm equalities for the :tacn:`injection` tactic. It allows
  a finer control than the boolean flag :flag:`Keep Proof Equalities` that acts
  globally
  (`#14439 <https://github.com/rocq-prover/rocq/pull/14439>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  :tacn:`simple congruence` tactic which works like :tacn:`congruence`
  but does not unfold definitions
  (`#14657 <https://github.com/rocq-prover/rocq/pull/14657>`_,
  fixes `#13778 <https://github.com/rocq-prover/rocq/issues/13778>`_
  and `#5394 <https://github.com/rocq-prover/rocq/issues/5394>`_
  and `#13189 <https://github.com/rocq-prover/rocq/issues/13189>`_,
  by Andrej Dudenhefner).
- **Added:**
  Small enhancement of unification in the presence of local definitions
  (`#14673 <https://github.com/rocq-prover/rocq/pull/14673>`_,
  fixes `#4415 <https://github.com/rocq-prover/rocq/issues/4415>`_,
  by Hugo Herbelin).
- **Added:**
  `dfs` option in :tacn:`typeclasses eauto` to use depth-first search
  (`#14693 <https://github.com/rocq-prover/rocq/pull/14693>`_,
  fixes `#13859 <https://github.com/rocq-prover/rocq/issues/13859>`_,
  by Ali Caglayan).
- **Fixed:**
  More flexible hypothesis specialization in :tacn:`congruence`
  (`#14650 <https://github.com/rocq-prover/rocq/pull/14650>`_,
  fixes `#14651 <https://github.com/rocq-prover/rocq/issues/14651>`_
  and `#14662 <https://github.com/rocq-prover/rocq/issues/14662>`_,
  by Andrej Dudenhefner).
- **Fixed:**
  Added caching to congruence initialization to avoid quadratic runtime
  (`#14683 <https://github.com/rocq-prover/rocq/pull/14683>`_,
  fixes `#5548 <https://github.com/rocq-prover/rocq/issues/5548>`_,
  by Andrej Dudenhefner).
- **Fixed:**
  Correctly handle matching up to η-expansion in discriminated
  hints
  (`#14732 <https://github.com/rocq-prover/rocq/pull/14731>`_,
  fixes `#14731 <https://github.com/rocq-prover/rocq/issues/14731>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  Old unification understands some inductive cumulativity
  (`#14758 <https://github.com/rocq-prover/rocq/pull/14758>`_,
  fixes `#14734 <https://github.com/rocq-prover/rocq/issues/14734>`_
  and `#6976 <https://github.com/rocq-prover/rocq/issues/6976>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  The :tacn:`clear dependent <clear>` tactic now does not backtrack
  internally, preventing an exponential blowup
  (`#14984 <https://github.com/rocq-prover/rocq/pull/14984>`_,
  fixes `#11689 <https://github.com/rocq-prover/rocq/issues/11689>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  :tacn:`setoid_rewrite` now works when the rewriting lemma has non dependent arguments and rewriting under binders
  (`#14986 <https://github.com/rocq-prover/rocq/pull/14986>`_,
  fixes `#5369 <https://github.com/rocq-prover/rocq/issues/5369>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Regression in 8.14.0 and 8.14.1 with action pattern :n:`%` in
  :n:`as` clause of tactic :tacn:`specialize`
  (`#15245 <https://github.com/rocq-prover/rocq/pull/15245>`_,
  fixes `#15244 <https://github.com/rocq-prover/rocq/issues/15244>`_,
  by Hugo Herbelin).

Tactic language
^^^^^^^^^^^^^^^

- **Fixed:**
  the parsing level of the Ltac2 tactic :tacn:`now`
  was set to level 6 in order to behave as it did before
  8.14
  (`#15250 <https://github.com/rocq-prover/rocq/pull/15250>`_,
  fixes `#15122 <https://github.com/rocq-prover/rocq/issues/15122>`_,
  by Pierre-Marie Pédrot).

SSReflect
^^^^^^^^^

- **Changed:**
  rewrite generates subgoals in the expected order (side conditions first, by
  default) also when rewriting with a setoid relation
  (`#14314 <https://github.com/rocq-prover/rocq/pull/14314>`_,
  fixes `#5706 <https://github.com/rocq-prover/rocq/issues/5706>`_,
  by Enrico Tassi).
- **Removed:**
  The ssrsearch plugin and the ssr Search command
  (`#13760 <https://github.com/rocq-prover/rocq/pull/13760>`_,
  by Jim Fehrle).
- **Added:**
  port the additions made to `ssrbool.v` in math-comp `PR #757 <https://github.com/math-comp/math-comp/pull/757>`_,
  namely `reflect` combinators `negPP`, `orPP`, `andPP` and `implyPP`
  (`#15059 <https://github.com/rocq-prover/rocq/pull/15059>`_,
  by Christian Doczkal).
- **Fixed:**
  SSR patterns now work with primitive values such as ints, floats or arrays
  (`#14660 <https://github.com/rocq-prover/rocq/pull/14660>`_,
  fixes `#12770 <https://github.com/rocq-prover/rocq/issues/12770>`_,
  by Juan Conejero).
- **Fixed:**
  A bug where :tacn:`suff` would fail due to use of :tacn:`apply` under the hood
  (`#14687 <https://github.com/rocq-prover/rocq/pull/14687>`_,
  fixes `#14678 <https://github.com/rocq-prover/rocq/issues/14678>`_,
  by Ali Caglayan helped by Enrico Tassi).

Commands and options
^^^^^^^^^^^^^^^^^^^^

  .. _815Commands:

- **Changed:**
  :cmd:`About` and :cmd:`Print` now display all known argument names
  (`#14596 <https://github.com/rocq-prover/rocq/pull/14596>`_,
  grants `#13830 <https://github.com/rocq-prover/rocq/issues/13830>`_,
  by Hugo Herbelin).
- **Changed:**
  :cmd:`Typeclasses Transparent` and :cmd:`Typeclasses Opaque` support ``#[local]``, ``#[export]`` and ``#[global]`` attributes
  (`#14685 <https://github.com/rocq-prover/rocq/pull/14685>`_,
  fixes `#14513 <https://github.com/rocq-prover/rocq/issues/14513>`_,
  by Gaëtan Gilbert).
- **Changed:**
  In extraction to OCaml, empty types in :n:`Type` (such as
  :n:`Empty_set`) are now extracted to an abstract type (empty by
  construction) rather than to the OCaml's :n:`unit` type
  (`#14802 <https://github.com/rocq-prover/rocq/pull/14802>`_,
  fixes a remark at `#14801 <https://github.com/rocq-prover/rocq/issues/14801>`_,
  by Hugo Herbelin).
- **Changed:**
  Closed modules now live in a separate namespace from open modules and sections
  (`#15078 <https://github.com/rocq-prover/rocq/pull/15078>`_,
  fixes `#14529 <https://github.com/rocq-prover/rocq/issues/14529>`_,
  by Gaëtan Gilbert).
- **Removed:**
  boolean attributes ``monomorphic``, ``noncumulative`` and ``notemplate`` that were replaced by ``polymorphic=no``, ``cumulative=no`` and ``template=no`` in 8.13
  (`#14819 <https://github.com/rocq-prover/rocq/pull/14819>`_,
  by Pierre Roux).
- **Removed:**
  command ``Grab Existential Variables`` that was deprecated in 8.13. Use :cmd:`Unshelve` that is mostly equivalent, up to the reverse order of the resulting subgoals
  (`#14819 <https://github.com/rocq-prover/rocq/pull/14819>`_,
  by Pierre Roux).
- **Removed:**
  command ``Existential`` that was deprecated in 8.13. Use :cmd:`Unshelve` and :tacn:`exact`
  (`#14819 <https://github.com/rocq-prover/rocq/pull/14819>`_,
  by Pierre Roux).
- **Removed:**
  the `-outputstate` command line argument and the corresponding
  vernacular commands `Write State` and `Restore State`
  (`#14940 <https://github.com/rocq-prover/rocq/pull/14940>`_,
  by Pierre-Marie Pédrot)
- **Deprecated:** ambiguous :cmd:`Proof using` and :cmd:`Collection` usage
  (`#15056 <https://github.com/rocq-prover/rocq/pull/15056>`_,
  fixes `#13296 <https://github.com/rocq-prover/rocq/issues/13296>`_,
  by Wojciech Karpiel).
- **Deprecated:**
  `Universal Lemma Under Conjunction` flag that was introduced for
  compatibility with Coq versions prior to 8.4 (`#15272
  <https://github.com/rocq-prover/rocq/pull/15272>`_, by Théo Zimmermann).
- **Deprecated:** using :cmd:`Hint Cut`, :cmd:`Hint Mode`, :cmd:`Hint
  Transparent`, :cmd:`Hint Opaque`, :cmd:`Typeclasses Transparent` or
  :cmd:`Typeclasses Opaque` without an explicit locality outside
  sections. (`#14697 <https://github.com/rocq-prover/rocq/pull/14697>`_, by
  Pierre-Marie Pédrot, and `#14685
  <https://github.com/rocq-prover/rocq/pull/14685>`_, by Gaëtan Gilbert)
- **Added:**
  The :flag:`Mangle Names Light` flag, which changes the behavior of
  :flag:`Mangle Names`. For example, the name `foo` becomes `_0` with
  :flag:`Mangle Names`, but with :flag:`Mangle Names Light` set, it will
  become `_foo`
  (`#14695 <https://github.com/rocq-prover/rocq/pull/14695>`_,
  fixes `#14548 <https://github.com/rocq-prover/rocq/issues/14548>`_,
  by Ali Caglayan).
- **Added:** The :cmd:`Hint Cut`, :cmd:`Hint Mode`, :cmd:`Hint
  Transparent`, :cmd:`Hint Opaque`, :cmd:`Typeclasses Transparent` and
  :cmd:`Typeclasses Opaque` commands now accept the :attr:`local`,
  :attr:`export` and :attr:`global` locality attributes inside
  sections. With either attribute, the commands will trigger the
  `non-local-section-hint` warning if the arguments refer to local
  section variables (`#14697
  <https://github.com/rocq-prover/rocq/pull/14697>`_, by Pierre-Marie Pédrot,
  and `#14685 <https://github.com/rocq-prover/rocq/pull/14685>`_, fixes `#14513
  <https://github.com/rocq-prover/rocq/issues/14513>`_, by Gaëtan Gilbert).
- **Added:**
  :attr:`projections(primitive)` attribute to make a record use
  primitive projections
  (`#14699 <https://github.com/rocq-prover/rocq/pull/14699>`_,
  fixes `#13150 <https://github.com/rocq-prover/rocq/issues/13150>`_,
  by Ali Caglayan).

  .. _815Import:

- **Added:** Syntax for :token:`import_categories` providing selective
  import of module components (eg ``Import(notations) M`` (`#14892
  <https://github.com/rocq-prover/rocq/pull/14892>`_, by Gaëtan Gilbert).
- **Added:**
  :cmd:`Search` understands modifier ``in`` as an alias of ``inside``
  (`#15139 <https://github.com/rocq-prover/rocq/pull/15139>`_,
  fixes `#14930 <https://github.com/rocq-prover/rocq/issues/14930>`_,
  by Gaëtan Gilbert).
  This is intended to ease transition for ssreflect Search users.
- **Fixed:** interaction of Program's obligation state and modules and
  sections: obligations started in a parent module or section are not
  available to be solved until the submodules and subsections are
  closed (`#14780 <https://github.com/rocq-prover/rocq/pull/14780>`_, fixes
  `#14446 <https://github.com/rocq-prover/rocq/issues/14446>`_, by Gaëtan
  Gilbert).
- **Fixed:**
  :cmd:`Eval` and :cmd:`Compute` now beta-iota-simplify the type
  of the result, like :cmd:`Check` does
  (`#14901 <https://github.com/rocq-prover/rocq/pull/14901>`_,
  fixes `#14899 <https://github.com/rocq-prover/rocq/issues/14899>`_,
  by Hugo Herbelin)

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Changed:**
  Coqdoc options ``--coqlib`` and ``--coqlib_path`` have been renamed
  to ``--coqlib_url`` and ``--coqlib`` to make them more consistent with
  flags used by other Coq executables
  (`#14059 <https://github.com/rocq-prover/rocq/pull/14059>`_,
  by Emilio Jesus Gallego Arias).
- **Changed:**
  Syntax of `_CoqProject` files: `-arg` is now handled by :ref:`coq_makefile
  <rocq_makefile>` and not by `make`. Unquoted `#` now start line comments
  (`#14558 <https://github.com/rocq-prover/rocq/pull/14558>`_,
  by Stéphane Desarzens, with help from Jim Fehrle and Enrico Tassi).
- **Changed:**
  :cmd:`Require` now selects files whose logical name
  exactly matches the required name, making it possible to unambiguously select
  a given file: if several :n:`-Q` or :n:`-R` options bind the same
  logical name to a different file, the option appearing last on the
  command line takes precedence.  Moreover, it is now an error to
  require a file using a partial logical name which does not resolve
  to a non-ambiguous path (`#14718
  <https://github.com/rocq-prover/rocq/pull/14718>`_, by Hugo Herbelin).
- **Changed:** ``coq_makefile`` now declares variable ``COQBIN`` to avoid warnings in
  ``make --warn`` mode (`#14787 <https://github.com/rocq-prover/rocq/pull/14787>`_, by
  Clément Pit-Claudel).
- **Changed:**
  ``coqchk`` respects the :flag:`Kernel Term Sharing` flag instead of forcing it on
  (`#14957 <https://github.com/rocq-prover/rocq/pull/14957>`_,
  by Gaëtan Gilbert)
- **Removed:**
  These options of :ref:`coq_makefile <rocq_makefile>`: `-extra`, `-extra-phony`,
  `-custom`, `-no-install`, `-install`, `-no-opt`, `-byte`.
  Support for subdirectories is also removed
  (`#14558 <https://github.com/rocq-prover/rocq/pull/14558>`_,
  by Stéphane Desarzens, with help from Jim Fehrle and Enrico Tassi).
- **Added:**
  :ref:`coq_makefile <rocq_makefile>` now takes the `-docroot` option as alternative to the
  `INSTALLCOQDOCROOT` variable
  (`#14558 <https://github.com/rocq-prover/rocq/pull/14558>`_,
  by Stéphane Desarzens, with help from Jim Fehrle and Enrico Tassi).
- **Fixed:**
  Various `coqdep` issues with the `From` clause of :cmd:`Require` and
  a few inconsistencies between `coqdep` and `coqc` disambiguation
  of :cmd:`Require`
  (`#14718 <https://github.com/rocq-prover/rocq/pull/14718>`_,
  fixes `#11631 <https://github.com/rocq-prover/rocq/issues/11631>`_
  and `#14539 <https://github.com/rocq-prover/rocq/issues/14539>`_,
  by Hugo Herbelin).
- **Fixed:**
  ``coq_makefile`` has improved logic when dealing with incorrect ``_CoqProject`` files
  (`#13541 <https://github.com/rocq-prover/rocq/pull/13541>`_,
  fixes `#9319 <https://github.com/rocq-prover/rocq/issues/9319>`_,
  by Fabian Kunze).
- **Fixed:**
  ``coqdep`` was confusing periods occurring in comments with periods ending Coq sentences
  (`#14996 <https://github.com/rocq-prover/rocq/pull/14996>`_,
  fixes `#7393 <https://github.com/rocq-prover/rocq/issues/7393>`_,
  by Hugo Herbelin).

CoqIDE
^^^^^^

- **Changed:**
  CoqIDE unicode keys for brackets (e.g. `\langle`) now bind to unicode mathematical symbols rather than unicode CJK brackets
  (`#14452 <https://github.com/rocq-prover/rocq/pull/14452>`_,
  by Bart Jacobs).
- **Changed:**
  All occurrences of the name `CoqIde` to `CoqIDE`. This may cause issues with
  installing and uninstalling desktop icons, causing apparent duplicates
  (`#14696 <https://github.com/rocq-prover/rocq/pull/14696>`_, fixes `#14310
  <https://github.com/rocq-prover/rocq/issues/14310>`_, by Ali Caglayan).

  .. _815LtacDebugger:

- **Added:**
  Initial version of a visual debugger in CoqIDE.  Supports setting breakpoints
  visually and jumping to the stopping point plus continue, step over,
  step in and step out operations.  Displays the call stack and
  variable values for each stack frame.  Currently only for Ltac.
  See the documentation :ref:`here <rocqide-debugger>`
  (`#14644 <https://github.com/rocq-prover/rocq/pull/14644>`_,
  fixes `#13967 <https://github.com/rocq-prover/rocq/issues/13967>`_,
  by Jim Fehrle)
- **Fixed:**
  It is now possible to deactivate the unicode completion
  mechanism in CoqIDE
  (`#14863 <https://github.com/rocq-prover/rocq/pull/14863>`_,
  by Pierre-Marie Pédrot).

Standard library
^^^^^^^^^^^^^^^^

- **Changed:**
  Permutation-related Proper instances are now at default priority instead of priority ``10``
  (`#14574 <https://github.com/rocq-prover/rocq/pull/14574>`_,
  fixes `#14571 <https://github.com/rocq-prover/rocq/issues/14571>`_,
  by Gaëtan Gilbert).
- **Changed:**
  The new type of  `epsilon_smallest` is
  `(exists n : nat, P n) -> { n : nat | P n /\ forall k, P k -> n <= k }`.
  Here the minimality of `n` is expressed by `forall k, P k -> n <= k`
  corresponding to the intuitive meaning of minimality
  "the others are greater", whereas the previous version used
  the negative equivalent formulation `forall k, k < n -> ~P k`.
  Scripts using `epsilon_smallest` can easily be adapted using
  lemmas `le_not_lt` and `lt_not_le` from the standard library
  (`#14601 <https://github.com/rocq-prover/rocq/pull/14601>`_,
  by Jean-Francois Monin).
- **Changed:**
  ``ltb`` and ``leb`` functions for ``ascii``, into comparison-based definition
  (`#14234 <https://github.com/rocq-prover/rocq/pull/14234>`_,
  by Yishuai Li).
- **Removed:**
  the file ``Numeral.v`` that was replaced by ``Number.v`` in 8.13
  (`#14819 <https://github.com/rocq-prover/rocq/pull/14819>`_,
  by Pierre Roux).
- **Removed:**
  some ``*_invol`` functions that were renamed ``*_involutive`` for consistency with the remaining of the stdlib in 8.13
  (`#14819 <https://github.com/rocq-prover/rocq/pull/14819>`_,
  by Pierre Roux).
- **Deprecated:**
  ``frexp`` and ``ldexp`` in `FloatOps.v`, renamed ``Z.frexp`` and ``Z.ldexp``
  (`#15085 <https://github.com/rocq-prover/rocq/pull/15085>`_,
  by Pierre Roux).
- **Added:**
  A proof that incoherent equivalences can be adjusted to adjoint equivalences in ``Logic.Adjointification``
  (`#13408 <https://github.com/rocq-prover/rocq/pull/13408>`_,
  by Jasper Hugunin).
- **Added:**
  ``ltb`` and ``leb`` functions for ``string``, and some lemmas about them;
- **Added:**
  simple non dependent product ``slexprod`` in
  ``Relations/Relation_Operators.v`` and its proof of well-foundness
  ``wf_slexprod`` in ``Wellfounded/Lexicographic_Product.v``
  (`#14809 <https://github.com/rocq-prover/rocq/pull/14809>`_,
  by Laurent Thery).
- **Added:**
  The notations ``(x; y)``, ``x.1``, ``x.2`` for sigT are now exported and available  after ``Import SigTNotations.``
  (`#14813 <https://github.com/rocq-prover/rocq/pull/14813>`_, by Laurent Théry).
- **Added:**
  The function ``sigT_of_prod`` turns a pair ``A * B`` into ``{_ : A & B}``. Its inverse function is ``prod_of_sigT``. This is shown by theorems ``sigT_prod_sigT`` and ``prod_sigT_prod``
  (`#14813 <https://github.com/rocq-prover/rocq/pull/14813>`_, by Laurent Théry).
- **Fixed:**
  ``split_combine`` lemma for lists, making it usable
  (`#14458 <https://github.com/rocq-prover/rocq/pull/14458>`_,
  by Yishuai Li).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  Coq's continuous integration now provides a more accessible Windows
  installer artifact in the "Checks" GitHub tab, both for pull
  requests and the `master` branch.

  This facilitates testing Coq's bleeding edge builds on Windows, and
  should be more reliable than the previous setup (`#12425
  <https://github.com/rocq-prover/rocq/pull/12425>`_, by Emilio Jesus Gallego
  Arias).
- **Changed:**
  Coq's ``./configure`` script has gone through a major cleanup. In
  particular, the following options have been removed:

  - ``-force-caml-version``, ``-force-findlib-version``: Coq won't
    compile with OCaml or findlib lower than the required versions;
  - ``-vmbyteflags``, ``-custom``, ``-no-custom``: linking options for
    toplevels are now controlled in ``topbin/dune``;
  - ``-ocamlfind``: Coq will now use the toolchain specified in the
    Dune configuration; this can be controlled using the workspaces
    feature;
  - ``-nodebug``: Coq will now follow the standard, which is to always
    pass ``-g`` to OCaml; this can be modified using a custom Dune
    workspace;
  - ``-flambda-opts``: compilation options are now set in Coq's root
    ``dune`` file, can be updated using a custom Dune workspace;
  - ``-local``, ``-bindir``, ``-coqdocdir``, ``-annotate``,
    ``-camldir``, ``-profiling``: these flags were deprecated in 8.14,
    and are now removed.

  Moreover, the ``-annot`` and ``-bin-annot`` flags only take effect
  to set ``coq-makefile``'s defaults
  (`#14189 <https://github.com/rocq-prover/rocq/pull/14189>`_,
  by Emilio Jesus Gallego Arias).
- **Changed:**
  Configure will now detect the Dune version, and will correctly pass
  ``-etcdir`` and ``-docdir`` to the install procedure if Dune >= 2.9 is available.
  Note that the ``-docdir`` configure option now refers to root path for documentation.
  If you would like to install Coq documentation in ``foo/coq``, use
  ``-docdir foo``
  (`#14844 <https://github.com/rocq-prover/rocq/pull/14844>`_,
  by Emilio Jesus Gallego Arias).
- **Changed:**
  OCaml 4.13 is now officially supported
  (`#14879 <https://github.com/rocq-prover/rocq/pull/14879>`_,
  by Emilio Jesus Gallego Arias)
- **Changed:**
  Sphinx 3.0.2 or above is now required to build the reference manual
  (`#14963 <https://github.com/rocq-prover/rocq/pull/14263>`_,
  by Théo Zimmermann)

Extraction
^^^^^^^^^^

- **Changed:** replaced ``Big`` module with ``Big_int_Z`` functions from ``zarith``.

  OCaml code extracted with the following modules should be linked to the
  `Zarith <https://github.com/ocaml/Zarith>`_ library.

  + ``ExtrOcamlNatBigInt``
  + ``ExtrOcamlZBigInt``

  Removed ``ExtrOcamlBigIntConv`` module.

  (`#8252 <https://github.com/rocq-prover/rocq/pull/8252>`_, by Yishuai Li).
- **Fixed:**
  compilation errors in ExtrOcamlString and ExtrOcamlNativeString
  (`#15075 <https://github.com/rocq-prover/rocq/pull/15075>`_,
  fixes `#15076 <https://github.com/rocq-prover/rocq/issues/15076>`_,
  by Yishuai Li).

Changes in 8.15.1
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

- **Fixed:**
  cases of incompletenesses in the guard condition for fixpoints in
  the presence of cofixpoints or primitive projections
  (`#15498 <https://github.com/rocq-prover/rocq/pull/15498>`_,
  fixes `#15451 <https://github.com/rocq-prover/rocq/issues/15451>`_,
  by Hugo Herbelin).
- **Fixed:**
  inconsistency when using module subtyping with squashed inductives
  (`#15839 <https://github.com/rocq-prover/rocq/pull/15839>`_,
  fixes `#15838 <https://github.com/rocq-prover/rocq/issues/15838>`_ (reported by Pierre-Marie Pédrot),
  by Gaëtan Gilbert).

Notations
^^^^^^^^^

- **Fixed:**
  Check for prior declaration of a custom entry was missing for notations in only printing mode
  (`#15628 <https://github.com/rocq-prover/rocq/pull/15628>`_,
  fixes `#15619 <https://github.com/rocq-prover/rocq/issues/15619>`_,
  by Hugo Herbelin).

Tactics
^^^^^^^

- **Fixed:**
  :tacn:`rewrite_strat` regression in 8.15.0 related to `Transitive` instances
  (`#15577 <https://github.com/rocq-prover/rocq/pull/15577>`_,
  fixes `#15568 <https://github.com/rocq-prover/rocq/issues/15568>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  When :tacn:`setoid_rewrite` succeeds in rewriting at some occurrence but the resulting equality is the identity, it now tries rewriting in subterms of that occurrence instead of giving up
  (`#15612 <https://github.com/rocq-prover/rocq/pull/15612>`_,
  fixes `#8080 <https://github.com/rocq-prover/rocq/issues/8080>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Ill-typed goals created by :tacn:`clearbody` in the presence of
  transitive dependencies in the body of a hypothesis
  (`#15634 <https://github.com/rocq-prover/rocq/pull/15634>`_,
  fixes `#15606 <https://github.com/rocq-prover/rocq/issues/15606>`_,
  by Hugo Herbelin).
- **Fixed:**
  :tacn:`cbn` knows to refold fixpoints when :cmd:`Arguments` with ``/`` and ``!`` was used
  (`#15653 <https://github.com/rocq-prover/rocq/pull/15653>`_,
  fixes `#15567 <https://github.com/rocq-prover/rocq/issues/15567>`_,
  by Gaëtan Gilbert).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Fixed:**
  a bug where :n:`coqc -vok` was not creating an empty '.vok' file
  (`#15745 <https://github.com/rocq-prover/rocq/pull/15745>`_,
  by Ramkumar Ramachandra).

CoqIDE
^^^^^^

- **Fixed:**
  Line numbers shown in the Errors panel were incorrect;
  they didn't match the error locations in the script panel
  (`#15532 <https://github.com/rocq-prover/rocq/pull/15532>`_,
  fixes `#15531 <https://github.com/rocq-prover/rocq/issues/15531>`_,
  by Jim Fehrle).
- **Fixed:**
  anomaly when using proof diffs with no focused goal
  (`#15633 <https://github.com/rocq-prover/rocq/pull/15633>`_,
  fixes `#15578 <https://github.com/rocq-prover/rocq/issues/15578>`_,
  by Jim Fehrle).
- **Fixed:**
  Attempted edits to the processed part of a buffer while
  Coq is busy processing a request are now ignored to
  ensure "processed" highlighting is accurate
  (`#15714 <https://github.com/rocq-prover/rocq/pull/15714>`_,
  fixes `#15733 <https://github.com/rocq-prover/rocq/issues/15733>`_
  and `#15675 <https://github.com/rocq-prover/rocq/issues/15675>`_
  and `#15725 <https://github.com/rocq-prover/rocq/issues/15725>`_,
  by Jim Fehrle).

Miscellaneous
^^^^^^^^^^^^^

- **Fixed:**
  Ensure that the names of arguments of inductive schemes are distinct
  so that the new Coq 8.15 preservation of argument names in the ``with``
  clause of tactics in `#13837 <https://github.com/rocq-prover/rocq/pull/13837>`_
  works as in Coq 8.14 for these schemes
  (`#15537 <https://github.com/rocq-prover/rocq/pull/15537>`_,
  fixes `#15420 <https://github.com/rocq-prover/rocq/issues/15420>`_,
  by Hugo Herbelin).

Changes in 8.15.2
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Tactics
^^^^^^^

- **Added:**
  :tacn:`intuition` and :tacn:`dintuition` use ``Tauto.intuition_solver`` (defined as ``auto with *``) instead of hardcoding ``auto with *``.
  This makes it possible to change the default solver with ``Ltac Tauto.intuition_solver ::= ...``
  (`#15866 <https://github.com/rocq-prover/rocq/pull/15866>`_,
  fixes `#7725 <https://github.com/rocq-prover/rocq/issues/7725>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  uncaught exception ``UnableToUnify`` with bidirectionality hints
  (`#16066 <https://github.com/rocq-prover/rocq/pull/16066>`_,
  fixes `#16063 <https://github.com/rocq-prover/rocq/issues/16063>`_,
  by Gaëtan Gilbert).

CoqIDE
^^^^^^

- **Fixed:**
  multiple CoqIDE bugs
  (`#15938 <https://github.com/rocq-prover/rocq/pull/15938>`_,
  fixes `#15861 <https://github.com/rocq-prover/rocq/issues/15861>`_,
  `#15939 <https://github.com/rocq-prover/rocq/pull/15939>`_,
  fixes `#15882 <https://github.com/rocq-prover/rocq/issues/15882>`_,
  `#15964 <https://github.com/rocq-prover/rocq/pull/15964>`_,
  fixes `#15799 <https://github.com/rocq-prover/rocq/issues/15799>`_,
  `#15984 <https://github.com/rocq-prover/rocq/pull/15984>`_,
  partially fixes `#15873 <https://github.com/rocq-prover/rocq/issues/15873>`_,
  `#15996 <https://github.com/rocq-prover/rocq/pull/15996>`_,
  `#15912 <https://github.com/rocq-prover/rocq/pull/15912>`_,
  fixes `#15903 <https://github.com/rocq-prover/rocq/issues/15903>`_,
  all by Jim Fehrle).

Standard library
^^^^^^^^^^^^^^^^

- **Fixed:**
  an incorrect implementation of SFClassify, allowing for a proof of False since
  8.11.0, due to Axioms present in Float.Axioms
  (`#16101 <https://github.com/rocq-prover/rocq/pull/16101>`_,
  fixes `#16096 <https://github.com/rocq-prover/rocq/issues/16096>`_,
  by Ali Caglayan).

Version 8.14
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.14 integrates many usability improvements, as well
as an important change in the core language. The main changes include:

  - The :ref:`internal representation <814CaseRepresentation>` of `match` has changed
    to a more space-efficient and cleaner structure, allowing the fix of a completeness
    issue with cumulative inductive types in the type-checker.
    The internal representation is now closer to the user-level view of `match`,
    where the argument context of branches and the inductive binders `in` and `as`
    do not carry type annotations.

  - A :ref:`new <814CoqNative>` `coqnative` binary performs separate native compilation
    of libraries, starting from a `.vo` file. It is supported by `coq_makefile`.

  - :ref:`Improvements <814TCCanon>` to typeclasses and canonical structure
    resolution, allowing more terms to be considered as classes or keys.

  - More control over :ref:`notations <814Notations>` declarations and support
    for primitive types in string and number notations.

  - :ref:`Removal <814Tactics>` of deprecated tactics, notably `omega`, which has
    been replaced by a greatly improved `lia`, along with many bug fixes.

  - New  :ref:`Ltac2 <814Ltac2>` APIs for interaction with Ltac1, manipulation of
    inductive types and printing.

  - Many :ref:`changes and additions <814Stdlib>` to the standard library in the numbers,
    vectors and lists libraries. A new signed primitive integers library `Sint63`
    is available in addition to the unsigned `Uint63` library.

See the `Changes in 8.14.0`_ section below for the detailed list of changes,
including potentially breaking changes marked with **Changed**.
Coq's `reference manual <https://coq.github.io/doc/v8.14/refman>`_,
`documentation of the standard library <https://coq.github.io/doc/v8.14/stdlib>`_
and `developer documentation of the ML API <https://coq.github.io/doc/v8.14/api>`_
are also available.

Emilio Jesús Gallego Arias, Gaëtan Gilbert, Michael
Soegtrop and Théo Zimmermann worked on maintaining and improving the
continuous integration system and package building infrastructure.

Erik Martin-Dorel has maintained the `Coq Docker images
<https://hub.docker.com/r/coqorg/coq>`_ that are used in many Coq
projects for continuous integration.

The opam repository for Coq packages has been maintained by
Guillaume Claret, Karl Palmskog, Matthieu Sozeau and Enrico Tassi with
contributions from many users. A list of packages is available at
https://coq.inria.fr/opam/www/.

The `Coq Platform <https://github.com/coq/platform>`_ has been maintained
by Michael Soegtrop and Enrico Tassi.

Our current maintainers are Yves Bertot, Frédéric Besson, Ali Caglayan, Tej
Chajed, Cyril Cohen, Pierre Corbineau, Pierre Courtieu, Maxime Dénès,
Jim Fehrle, Julien Forest, Emilio Jesús Gallego Arias, Gaëtan Gilbert,
Georges Gonthier, Benjamin Grégoire, Jason Gross, Hugo Herbelin,
Vincent Laporte, Olivier Laurent, Assia Mahboubi, Kenji Maillard,
Guillaume Melquiond, Pierre-Marie Pédrot, Clément Pit-Claudel, Pierre Roux,
Kazuhiko Sakaguchi, Vincent Semeria, Michael Soegtrop, Arnaud Spiwack,
Matthieu Sozeau, Enrico Tassi, Laurent Théry, Anton Trunov, Li-yao Xia
and Théo Zimmermann. See the `Coq Team face book <https://coq.inria.fr/coq-team.html>`_
page for more details.

The 54 contributors to this version are Reynald Affeldt,
Arthur Azevedo de Amorim, Yves Bertot, Frédéric Besson, Lasse Blaauwbroek, Ana Borges,
Ali Caglayan, Cyril Cohen, Pierre Courtieu, Maxime Dénès, Stéphane Desarzens, Andrej Dudenhefner,
Jim Fehrle, Yannick Forster,  Simon Friis Vindum, Gaëtan Gilbert, Jason Gross, Samuel Gruetter, Stefan Haan,
Hugo Herbelin, Jasper Hugunin, Emilio Jesús Gallego Arias, Jacques-Henri Jourdan,
Ralf Jung, Jan-Oliver Kaiser, Fabian Kunze, Vincent Laporte, Olivier Laurent,
Yishuai Li, Barry M. Trager, Kenji Maillard, Erik Martin-Dorel, Guillaume Melquiond,
Isaac Oscar Gariano, Pierre-Marie Pédrot, Rudy Peterson, Clément Pit-Claudel, Pierre Roux,
Takafumi Saikawa, Kazuhiko Sakaguchi, Gabriel Scherer, Vincent Semeria, shenlebantongying,
Avi Shinnar, slrnsc, Michael Soegtrop, Matthieu Sozeau, Enrico Tassi, Hendrik Tews, Anton Trunov,
Karolin Varner, Li-yao Xia, Beta Ziliani and Théo Zimmermann.

The Coq community at large helped improve the design of this new version via
the GitHub issue and pull request system, the Coq development mailing list
coqdev@inria.fr, the coq-club@inria.fr mailing list, the `Discourse forum
<https://coq.discourse.group/>`_ and the `Coq Zulip chat <https://coq.zulipchat.com>`_.

Version 8.14's development spanned 9 months from the release of
Coq 8.13.0. Guillaume Melquiond is the release manager of Coq 8.14.
This release is the result of 522 merged PRs, closing ~150 issues.

| Nantes, September 2021,
| Matthieu Sozeau for the Coq development team

Changes in 8.14.0
~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

  .. _814CaseRepresentation:

- **Changed:**
  The term representation of pattern-matchings now uses a compact form that
  provides a few static guarantees such as eta-expansion of branches and return
  clauses and is usually more efficient. The most visible user change is that for
  the time being, the :tacn:`destruct` tactic and its variants generate dummy
  cuts (β redexes) in the branches of the generated proof.
  This can also generate very uncommon backwards incompatibilities, such as a
  change of occurrence numbering for subterms, or breakage of unification in
  complex situations involving pattern-matchings whose underlying inductive type
  declares let-bindings in parameters, arity or constructor types. For ML plugin
  developers, an in-depth description of the new representation, as well as
  porting tips, can be found in dev/doc/case-repr.md
  (`#13563 <https://github.com/rocq-prover/rocq/pull/13563>`_,
  fixes `#3166 <https://github.com/rocq-prover/rocq/issues/3166>`_,
  by Pierre-Marie Pédrot).

- **Changed:**
  Linking of native-code libraries used by :tacn:`native_compute` is now delayed
  until an actual call to the :tacn:`native_compute` machinery is
  performed. This should make Coq more responsive on some systems
  (`#13853 <https://github.com/rocq-prover/rocq/pull/13853>`_, fixes `#13849
  <https://github.com/rocq-prover/rocq/issues/13849>`_, by Guillaume Melquiond).
- **Removed:** The ability to change typing flags inside
  sections to prevent exploiting a weakness in :cmd:`Print
  Assumptions` (`#14395 <https://github.com/rocq-prover/rocq/pull/14395>`_,
  fixes `#14317 <https://github.com/rocq-prover/rocq/issues/14317>`_, by Gaëtan
  Gilbert).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  .. _814TCCanon:

- **Changed:**
  The hints mode ``!`` matches a term iff the applicative head is not an existential variable.
  It now also matches projections applied to any term or a `match` on any term
  (`#14392 <https://github.com/rocq-prover/rocq/pull/14392>`_,
  by Matthieu Sozeau).
- **Removed:**
  The little used `:>` type cast, which was only interpreted in Program-mode
  (`#13911 <https://github.com/rocq-prover/rocq/pull/13911>`_,
  by Jim Fehrle and Théo Zimmermann).
- **Added:**
  Enable canonical `fun _ => _` projections,
  see :ref:`canonicalstructures` for details
  (`#14041 <https://github.com/rocq-prover/rocq/pull/14041>`_,
  by Jan-Oliver Kaiser and Pierre Roux,
  reviewed by Cyril Cohen and Enrico Tassi).
- **Added:**
  :cmd:`Canonical Structure` declarations now accept dependent function types
  `forall _, _` as keys
  (`#14386 <https://github.com/rocq-prover/rocq/pull/14386>`_,
  by Jan-Oliver Kaiser and Kazuhiko Sakaguchi).
- **Added:**
  Ability to declare primitive projections as class, for dependent typeclass resolutions
  (`#9711 <https://github.com/rocq-prover/rocq/pull/9711>`_,
  fixes `#12975 <https://github.com/rocq-prover/rocq/issues/12975>`_,
  by Matthieu Sozeau).
- **Fixed:**
  Multiple printing of same warning about unused variables catching several cases
  (`#14261 <https://github.com/rocq-prover/rocq/pull/14261>`_,
  fixes `#14207 <https://github.com/rocq-prover/rocq/issues/14207>`_,
  by Hugo Herbelin).
- **Fixed:**
  Constants :g:`id` and :g:`not` were unduly set opaque in some parts
  of the unification algorithm
  (`#14371 <https://github.com/rocq-prover/rocq/pull/14371>`_,
  fixes `#14374 <https://github.com/rocq-prover/rocq/issues/14374>`_,
  by Hugo Herbelin).

Notations
^^^^^^^^^

  .. _814Notations:

- **Changed:**
  Flag :flag:`Printing Notations` no longer controls
  whether strings and numbers are printed raw
  (`#13840 <https://github.com/rocq-prover/rocq/pull/13840>`_,
  by Enrico Tassi).
- **Changed:**
  The error ``Argument X was previously inferred to be in scope
  XXX_scope but is here used in YYY_scope.`` is now the warning
  ``[inconsistent-scopes,syntax]`` and can be silenced by
  specifying the scope of the argument
  (`#13965 <https://github.com/rocq-prover/rocq/pull/13965>`_,
  by Enrico Tassi).
- **Removed:**
  Decimal-only number notations which were deprecated in 8.12
  (`#13842 <https://github.com/rocq-prover/rocq/pull/13842>`_, by Pierre Roux).
- **Added:**
  :cmd:`Number Notation` and :cmd:`String Notation` now support
  parsing and printing of primitive floats, primitive arrays
  and type constants of primitive types
  (`#13519 <https://github.com/rocq-prover/rocq/pull/13519>`_,
  fixes `#13484 <https://github.com/rocq-prover/rocq/issues/13484>`_
  and `#13517 <https://github.com/rocq-prover/rocq/issues/13517>`_,
  by Fabian Kunze, with help of Jason Gross)
- **Added:**
  Flag :flag:`Printing Raw Literals` to control whether
  strings and numbers are printed raw
  (`#13840 <https://github.com/rocq-prover/rocq/pull/13840>`_,
  by Enrico Tassi).
- **Added:**
  Let the user specify a scope for abbreviation arguments, e.g.
  ``Notation abbr X := t (X in scope my_scope)``
  (`#13965 <https://github.com/rocq-prover/rocq/pull/13965>`_,
  by Enrico Tassi).
- **Added:**
  Look-ahead of tokens is changed from sequential to tree-based,
  allowing more automatic rule factorizations in notations
  (`#14070 <https://github.com/rocq-prover/rocq/pull/14070>`_,
  by Hugo Herbelin).
- **Fixed:**
  Non-local custom entries survive module closing and are
  declared when a file is Required
  (`#14183 <https://github.com/rocq-prover/rocq/pull/14183>`_,
  fixes `#13654 <https://github.com/rocq-prover/rocq/issues/13654>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  :g:`ident` modifier in custom entry notations gave fatal errors at printing time
  (`#14257 <https://github.com/rocq-prover/rocq/pull/14257>`_,
  fixes `#14211 <https://github.com/rocq-prover/rocq/issues/14211>`_,
  by Hugo Herbelin).
- **Fixed:**
  Anomaly when overriding a notation with different applicability in
  :g:`match` patterns
  (`#14377 <https://github.com/rocq-prover/rocq/pull/14377>`_,
  fixes `#13966 <https://github.com/rocq-prover/rocq/issues/13966>`_,
  by Hugo Herbelin).

Tactics
^^^^^^^

  .. _814Tactics:

- **Changed:**
  More systematic checks that occurrences of an :n:`at` clause are
  valid in tactics such as :tacn:`rewrite` or :tacn:`pattern`
  (`#13568 <https://github.com/rocq-prover/rocq/pull/13568>`_,
  fixes `#13566 <https://github.com/rocq-prover/rocq/issues/13566>`_,
  by Hugo Herbelin).
- **Removed:**
  :tacn:`fail` and :tacn:`gfail`, which formerly accepted negative
  values as a parameter, now give syntax errors for negative
  values (`#13469 <https://github.com/rocq-prover/rocq/pull/13469>`_,
  by Jim Fehrle).
- **Removed:**
  Deprecated flag ``Bracketing Last Introduction Pattern`` affecting the
  behavior of trailing disjunctive introduction patterns is
  definitively removed
  (`#13509 <https://github.com/rocq-prover/rocq/pull/13509>`_,
  by Hugo Herbelin).
- **Removed:**
  The `omega` tactic (deprecated in 8.12) and four `* Omega *` flags.
  Use `lia` instead
  (`#13741 <https://github.com/rocq-prover/rocq/pull/13741>`_,
  by Jim Fehrle, who addressed the final details, building on much work by
  Frédéric Besson, who greatly improved :tacn:`lia`, Maxime Dénès,
  Vincent Laporte and with the help of many package maintainers, among others).
- **Removed:**
  convert_concl_no_check.  Use :tacn:`change_no_check` instead
  (`#13761 <https://github.com/rocq-prover/rocq/pull/13761>`_,
  by Jim Fehrle).
- **Removed:**
  double induction tactic.  Replace :n:`double induction @ident @ident`
  with :n:`induction @ident; induction @ident` (or
  :n:`induction @ident ; destruct @ident` depending on the exact needs).
  Replace :n:`double induction @natural__1 @natural__2` with
  :n:`induction @natural__1; induction natural__3` where :n:`natural__3` is the result
  of :n:`natural__2 - natural__1`
  (`#13762 <https://github.com/rocq-prover/rocq/pull/13762>`_,
  by Jim Fehrle).
- **Deprecated:**
  In :tacn:`change` and :tacn:`change_no_check`, the
  `at ... with ...` form is deprecated.  Use
  `with ... at ...` instead.  For `at ... with ... in H |-`,
  use `with ... in H at ... |-`
  (`#13696 <https://github.com/rocq-prover/rocq/pull/13696>`_,
  by Jim Fehrle).
- **Deprecated:**
  The micromega option `Simplex`, which is currently set by default
  (`#13781 <https://github.com/rocq-prover/rocq/pull/13781>`_, by Frédéric Besson).
- **Deprecated:**
  the undocumented `new auto` tactic
  (`#14528 <https://github.com/rocq-prover/rocq/pull/14528>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  :tacn:`lia` supports the boolean operator `Bool.implb` (`#13715 <https://github.com/rocq-prover/rocq/pull/13715>`_, by Frédéric Besson).
- **Added:**
  ``zify`` (``lia``/``nia``) support for :g:`div`, :g:`mod`, :g:`pow`
  for :g:`Nat` (via ``ZifyNat`` module) and :g:`N` (via ``ZifyN`` module).
  The signature of :g:`Z_div_mod_eq_full` has no assumptions
  (`#14037 <https://github.com/rocq-prover/rocq/pull/14037>`_,
  fixes `#11447 <https://github.com/rocq-prover/rocq/issues/11447>`_,
  by Andrej Dudenhefner, Jason Gross, and Frédéric Besson).
- **Added:**
  Ltac2 now has a `unify` tactic
  (`#14089 <https://github.com/rocq-prover/rocq/pull/14089>`_,
  fixes `#14083 <https://github.com/rocq-prover/rocq/issues/14083>`_,
  by Samuel Gruetter).
- **Added:**
  :tacn:`inversion_sigma` can now be applied to a specified hypothesis
  and additionally supports intropatterns, so it can be used much like
  :tacn:`induction` and :tacn:`inversion`.  Additionally,
  :tacn:`inversion_sigma` now supports the types :n:`ex` (:n:`exists x
  : A, P x`) and :n:`ex2` (:n:`exists2 x : A, P x & Q x`) in cases
  where the first argument :n:`A` is a :n:`Prop` (`#14174
  <https://github.com/rocq-prover/rocq/pull/14174>`_, by Jason Gross).
- **Added:**
  ``zify`` (``lia``/``nia``) support for ``Sint63``
  (`#14408 <https://github.com/rocq-prover/rocq/pull/14408>`_,
  by Ana Borges, with help from Frédéric Besson).
- **Fixed:**
  Possible collision between a user-level name and an internal name when
  using the :n:`%` introduction pattern
  (`#13512 <https://github.com/rocq-prover/rocq/pull/13512>`_,
  fixes `#13413 <https://github.com/rocq-prover/rocq/issues/13413>`_,
  by Hugo Herbelin).
- **Fixed:**
  :tacn:`simpl` and :tacn:`hnf` now reduce primitive functions
  on primitive integers, floats and arrays
  (`#13699 <https://github.com/rocq-prover/rocq/pull/13699>`_,
  fixes `#13579 <https://github.com/rocq-prover/rocq/issues/13579>`_,
  by Pierre Roux).
- **Fixed:**
  Setoid rewriting now remembers the (invisible) binder names of non-dependent product types. SSReflect's rewrite tactic expects these names to be retained when using ``rewrite foo in H``.
  This also fixes SSR ``rewrite foo in H *`` erroneously reverting ``H``
  (`#13882 <https://github.com/rocq-prover/rocq/pull/13882>`_,
  fixes `#12011 <https://github.com/rocq-prover/rocq/issues/12011>`_,
  by Gaëtan Gilbert).
- **Fixed:**
  Properly expand projection parameters in hint discrimination
  nets. (`#14033 <https://github.com/rocq-prover/rocq/pull/14033>`_,
  fixes `#9000 <https://github.com/rocq-prover/rocq/issues/9000>`_,
  `#14009 <https://github.com/rocq-prover/rocq/issues/14009>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  anomalies caused by empty strings in Ltac notations are now errors
  (`#14378 <https://github.com/rocq-prover/rocq/pull/14378>`_,
  fixes `#14124 <https://github.com/rocq-prover/rocq/issues/14124>`_,
  by Hugo Herbelin).
- **Fixed:**
  Print a message instead of a Diff_Failure anomaly when
  old and new goals can't be matched; show the goal without
  diff highlights
  (`#14457 <https://github.com/rocq-prover/rocq/pull/14457>`_,
  fixes `#14425 <https://github.com/rocq-prover/rocq/issues/14425>`_,
  by Jim Fehrle).
- **Fixed:**
  Anomaly of :tacn:`destruct` on terms with dependent variables unused in goal
  (`#15099 <https://github.com/rocq-prover/rocq/pull/15099>`_,
  fixes `#11504 <https://github.com/rocq-prover/rocq/issues/11504>`_
  and `#14090 <https://github.com/rocq-prover/rocq/issues/14090>`_,
  by Lasse Blaauwbroek and Hugo Herbelin).
- **Fixed:**
  Correct convertibility of multiple terms selected by patterns in
  tactics such as :tacn:`set` when these terms have subterms in
  `SProp`
  (`#14610 <https://github.com/rocq-prover/rocq/pull/14610>`_,
  fixes `#14609 <https://github.com/rocq-prover/rocq/issues/14609>`_,
  by Hugo Herbelin).

Tactic language
^^^^^^^^^^^^^^^

  .. _814Ltac2:

- **Changed:**
  Renamed Ltac2 ``Bool.eq`` into ``Bool.equal`` for uniformity.
  The old function is now a deprecated alias
  (`#14128 <https://github.com/rocq-prover/rocq/pull/14128>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  A ``printf`` macro to Ltac2. It can be made accessible by
  importing the ``Ltac2.Printf`` module. See the documentation
  there for more information
  (`#13236 <https://github.com/rocq-prover/rocq/pull/13236>`_,
  fixes `#10108 <https://github.com/rocq-prover/rocq/issues/10108>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  A function ``Ltac1.lambda`` allowing to embed Ltac2 functions
  into Ltac1 runtime values
  (`#13442 <https://github.com/rocq-prover/rocq/pull/13442>`_,
  fixes `#12871 <https://github.com/rocq-prover/rocq/issues/12871>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  Ltac2 commands defining terms now accept the :attr:`deprecated`
  attribute
  (`#13774 <https://github.com/rocq-prover/rocq/pull/13774>`_,
  fixes `#12317 <https://github.com/rocq-prover/rocq/issues/12317>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  Allow the presence of type casts for function return values, let bindings and
  global definitions in Ltac2
  (`#13914 <https://github.com/rocq-prover/rocq/pull/13914>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  The Ltac2 API `Ltac2.Ind` for manipulating inductive types
  (`#13920 <https://github.com/rocq-prover/rocq/pull/13920>`_,
  fixes `#10095 <https://github.com/rocq-prover/rocq/issues/10095>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  Allow scope delimiters in Ltac2 ``open_constr:(...)`` quotation
  (`#13939 <https://github.com/rocq-prover/rocq/pull/13939>`_,
  fixes `#12806 <https://github.com/rocq-prover/rocq/issues/12806>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  A FFI to convert between Ltac1 and Ltac2 identifiers
  (`#13997 <https://github.com/rocq-prover/rocq/pull/13997>`_,
  fixes `#13996 <https://github.com/rocq-prover/rocq/issues/13996>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  Lazy evaluating boolean operators ``lazy_and``, ``lazy_or``, ``lazy_impl`` and infix notations ``&&`` and ``||`` to the Ltac2 `Bool.v` library l
  (`#14081 <https://github.com/rocq-prover/rocq/pull/14081>`_,
  fixes `#13964 <https://github.com/rocq-prover/rocq/issues/13964>`_,
  by Michael Soegtrop).
- **Fixed:**
  Ltac2 notations now correctly take into account their assigned level
  (`#14094 <https://github.com/rocq-prover/rocq/pull/14094>`_,
  fixes `#11866 <https://github.com/rocq-prover/rocq/issues/11866>`_,
  by Pierre-Marie Pédrot).

SSReflect
^^^^^^^^^

- **Added:**
  A test that the notations `{in _, _}` and `{pred _}` from `ssrbool.v` are displayed correctly
  (`#13473 <https://github.com/rocq-prover/rocq/pull/13473>`_,
  by Cyril Cohen).
- **Added:**
  Lemmas about interaction between :n:`{in _, _}`, :n:`{on _, _}`, and :n:`sig`
  have been backported from Mathematical Components 1.12.0
  (`#13490 <https://github.com/rocq-prover/rocq/pull/13490>`_,
  by Kazuhiko Sakaguchi).

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  :cmd:`Hint Rewrite` now supports locality attributes (including :attr:`export`) like other :ref:`Hint <creating_hints>` commands
  (`#13725 <https://github.com/rocq-prover/rocq/pull/13725>`_,
  fixes `#13724 <https://github.com/rocq-prover/rocq/issues/13724>`_,
  by Gaëtan Gilbert).
- **Changed:**
  In :cmd:`Record`, alpha-rename the variable associated with the record to avoid
  alpha-renaming parameters of projections
  (`#13852 <https://github.com/rocq-prover/rocq/pull/13852>`_,
  fixes `#13727 <https://github.com/rocq-prover/rocq/issues/13727>`_,
  by Li-yao Xia).
- **Changed:**
  Improve the :cmd:`Coercion` command to reduce the number of ambiguous paths to
  report. A pair of multiple inheritance paths that can be reduced to smaller
  adjoining pairs will not be reported as ambiguous paths anymore
  (`#13909 <https://github.com/rocq-prover/rocq/pull/13909>`_,
  by Kazuhiko Sakaguchi).
- **Changed:**
  The printing order of :cmd:`Print Classes` and :cmd:`Print Graph`, due to the
  changes for the internal tables of coercion classes and coercion paths
  (`#13912 <https://github.com/rocq-prover/rocq/pull/13912>`_,
  by Kazuhiko Sakaguchi).
- **Removed:**
  The Hide Obligations flag, deprecated in 8.12
  (`#13758 <https://github.com/rocq-prover/rocq/pull/13758>`_,
  by Jim Fehrle).
- **Removed:**
  SearchHead command.  Use the `headconcl:` clause of :cmd:`Search` instead
  (`#13763 <https://github.com/rocq-prover/rocq/pull/13763>`_,
  by Jim Fehrle).
- **Removed:**
  `Show Zify Spec`, `Add InjTyp` and 11 similar `Add *` commands.
  For `Show Zify Spec`, use `Show Zify UnOpSpec` or `Show Zify BinOpSpec` instead.
  For `Add *`, `Use Add Zify *` intead of `Add *`
  (`#13764 <https://github.com/rocq-prover/rocq/pull/13764>`_,
  by Jim Fehrle).
- **Deprecated:**
  Like hints, typeclass instances added outside of sections
  without an explicit locality now generate a deprecation warning. See
  :ref:`Hint <creating_hints>`
  (`#14208 <https://github.com/rocq-prover/rocq/pull/14208>`_,
  fixes `#13562 <https://github.com/rocq-prover/rocq/issues/13562>`_,
  by Pierre-Marie Pédrot).
- **Deprecated:**
  the `Regular Subst Tactic` flag
  (`#14336 <https://github.com/rocq-prover/rocq/pull/14336>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  :opt:`Debug` to control debug messages, functioning similarly to the warning system
  (`#13202 <https://github.com/rocq-prover/rocq/pull/13202>`_,
  by Maxime Dénès and Gaëtan Gilbert).
  The following flags have been converted (such that ``Set Flag`` becomes ``Set Debug "flag"``):

  - ``Debug Unification`` to ``unification``
  - ``Debug HO Unification`` to ``ho-unification``
  - ``Debug Tactic Unification`` to ``tactic-unification``
  - ``Congruence Verbose`` to ``congruence``
  - ``Debug Cbv`` to ``cbv``
  - ``Debug RAKAM`` to ``RAKAM``
  - ``Debug Ssreflect`` to ``ssreflect``
- **Added:**
  The Ltac2 grammar can now be printed using the
  Print Grammar ltac2 command
  (`#14093 <https://github.com/rocq-prover/rocq/pull/14093>`_,
  fixes `#14092 <https://github.com/rocq-prover/rocq/issues/14092>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  :cmd:`Instance` now accepts the :attr:`export` locality
  attribute
  (`#14148 <https://github.com/rocq-prover/rocq/pull/14148>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  extraction failure of a parameterized type in :g:`Prop` exported in
  an module interface as an assumption in :g:`Type`
  (`#14102 <https://github.com/rocq-prover/rocq/pull/14102>`_,
  fixes `#14100 <https://github.com/rocq-prover/rocq/issues/14100>`_,
  by Hugo Herbelin).
- **Fixed:**
  Print Assumptions now treats delayed opaque proofs generated
  by vos compilation as if they were axioms
  (`#14382 <https://github.com/rocq-prover/rocq/pull/14382>`_,
  fixes `#13589 <https://github.com/rocq-prover/rocq/issues/13589>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  Incorrect de Bruijn index handling in vernac class declaration,
  preventing users from marking existing instances of existing classes
  which are primitive projections
  (`#14664 <https://github.com/rocq-prover/rocq/pull/14664>`_,
  fixes `#14652 <https://github.com/rocq-prover/rocq/issues/14652>`_,
  by Ali Caglayan and Hugo Herbelin).

Command-line tools
^^^^^^^^^^^^^^^^^^

- **Changed:**
  `coqc` now enforces that at most a single `.v` file can be passed in
  the command line. Support for multiple `.v` files in the form of
  `coqc f1.v f2.v` didn't properly work in 8.13, tho it was accepted
  (`#13876 <https://github.com/rocq-prover/rocq/pull/13876>`_,
  by Emilio Jesus Gallego Arias).
- **Changed:**
  ``coqdep`` now reports an error if files specified on the
  command line don't exist or if it encounters unreadable files.
  Unknown options now generate a warning. Previously these
  conditions were ignored
  (`#14024 <https://github.com/rocq-prover/rocq/pull/14024>`_,
  fixes `#14023 <https://github.com/rocq-prover/rocq/issues/14023>`_,
  by Hendrik Tews).
- **Changed:**
  Makefiles produced by ``coq_makefile`` now use ``.DELETE_ON_ERROR``
  (`#14238 <https://github.com/rocq-prover/rocq/pull/14238>`_,
  by Gaëtan Gilbert).
- **Removed:**
  Previously deprecated command line options
  ``-sprop-cumulative`` and ``-input-state`` and its alias ``-is``
  (`#13822 <https://github.com/rocq-prover/rocq/pull/13822>`_,
  by Gaëtan Gilbert).
- **Added:**
  ``coq_makefile``\-made ``Makefile``\s now support inclusion of a
  ``.local-late`` file at the end, allowing the user to access
  more variables (`#12411 <https://github.com/rocq-prover/rocq/pull/12411>`_, fixes
  `#10912 <https://github.com/rocq-prover/rocq/issues/10912>`_, by Jason Gross).
- **Fixed:**
  Failure of extraction in the presence of inductive types with local
  definitions in parameters
  (`#13624 <https://github.com/rocq-prover/rocq/pull/13624>`_,
  fixes `#13581 <https://github.com/rocq-prover/rocq/issues/13581>`_,
  by Hugo Herbelin).
- **Fixed:**
  File name was missing in coqdoc error position reporting
  (`#14285 <https://github.com/rocq-prover/rocq/pull/14285>`_,
  fixes `#14283 <https://github.com/rocq-prover/rocq/issues/14283>`_,
  by Arthur Charguéraud and Hugo Herbelin).

Native Compilation
^^^^^^^^^^^^^^^^^^

  .. _814CoqNative:

- **Changed:**
  `coq_makefile` now uses the `coqnative` binary to generate
  native compilation files. Project files also understand directly the
  `-native-compiler` flag without having to wrap it with `-arg`
  (`#14265 <https://github.com/rocq-prover/rocq/pull/14265>`_,
  by Pierre-Marie Pédrot).
- **Deprecated:**
  the `-native-compiler` option for coqc. It is now recommended
  to use the :ref:`rocqnative` binary instead to generate native
  compilation files ahead of time
  (`#14309 <https://github.com/rocq-prover/rocq/pull/14309>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  A standalone `coqnative` binary that performs native compilation
  out of `vo` files, allowing to split library compilation from
  native compilation. See :ref:`rocqnative`. The hybrid build
  system was adapted to perform a split compilation on the stdlib
  (`#13287 <https://github.com/rocq-prover/rocq/pull/13287>`_,
  by Pierre-Marie Pédrot).

CoqIDE
^^^^^^

  .. _814CoqIDE:

- **Added:**
  Ltac debugger support in CoqIDE (see :flag:`Ltac Debug`).
  Debugger output and prompts appear in the Messages panel
  (`#13783 <https://github.com/rocq-prover/rocq/pull/13783>`_,
  by Jim Fehrle and Emilio J. Gallego Arias).
- **Added:**
  Shift-return in the Find dialog now searches backwards (`#13810 <https://github.com/rocq-prover/rocq/pull/13810>`_,
  by slrnsc).

Standard library
^^^^^^^^^^^^^^^^

  .. _814Stdlib:

- **Changed:**
  Minor Changes to ``Rpower``:
  Generalizes ``exp_ineq1`` to hold for all non-zero numbers.
  Adds ``exp_ineq1_le``, which holds for all reals (but is a ``<=`` instead of a ``<``)
  (`#13582 <https://github.com/rocq-prover/rocq/pull/13582>`_,
  by Avi Shinnar and Barry Trager, with help from Laurent Théry).
- **Changed:**
  set :g:`n mod 0 = n` uniformly for :g:`nat`, :g:`N`, :g:`Z`, :g:`int63`, :g:`sint63`, :g:`int31`
  such that :g:`m = (m / n) * n + (m mod n)` holds (also for :g:`n = 0`)

  .. warning:: code that relies on :g:`n mod 0 = 0` will break;
     for compatibility with both :g:`n mod 0 = n` and :g:`n mod 0 = 0` you can use
     :g:`n mod 0 = ltac:(match eval hnf in (1 mod 0) with |0 => exact 0 |_ => exact n end)`

  (`#14086 <https://github.com/rocq-prover/rocq/pull/14086>`_,
  by Andrej Dudenhefner with help of Guillaume Melquiond, Jason Gross, and Kazuhiko Sakaguchi).
- **Changed:**
  The standard library now contains a more complete theory of equality
  on types of the form :g:`exists x : A, P x` and :g:`exists2 x : A, P
  x & Q x` when we have :g:`A : Prop`.  To bring this theory more in
  line with the existing theory about sigma types,
  :g:`eq_ex_uncurried`, :g:`eq_ex2_uncurried`, :g:`eq_ex`,
  :g:`eq_ex2`, :g:`eq_ex_hprop`, :g:`eq_ex2_hprop` have been renamed
  into :g:`eq_ex_intro_uncurried`, :g:`eq_ex_intro2_uncurried`,
  :g:`eq_ex_intro`, :g:`eq_ex_intro2`, :g:`eq_ex_intro_hprop`,
  :g:`eq_ex_intro2_hprop` respectively and the implicit status of
  these lemmas has changed slightly (`#14174
  <https://github.com/rocq-prover/rocq/pull/14174>`_, by Jason Gross).
- **Changed**
  Moved 39 lemmas and notations about the rationals `Q` from the constructive reals private file `theories/Reals/Cauchy/QExtra.v` to appropriate files in `theories/QArith`.
  The now public lemmas are mostly about compatibility of multiplication and power with relational operators and simple convenience lemmas e.g. for reduction of `Q` values.
  The following moved lemmas have been renamed:
  `Q_factorDenom` to `Qmult_frac_l`,
  `Q_reduce_fl` to `Qreduce_num_l`,
  `Qle_neq` to `Qlt_leneq`,
  `Qmult_lt_le_compat_nonneg` to `Qmult_le_lt_compat_pos`,
  `Qpower_pos_lt` to `Qpower_0_lt`,
  `Qpower_lt_1_increasing` to `Qpower_1_lt_pos`,
  `Qpower_lt_1_increasing'` to `Qpower_1_lt`,
  `Qpower_le_1_increasing` to `Qpower_1_le_pos`,
  `Qpower_le_1_increasing'` to `Qpower_1_le`,
  `Qzero_eq` to `Qreduce_zero`,
  `Qpower_lt_compat` to `Qpower_lt_compat_l`,
  `Qpower_le_compat` to `Qpower_le_compat_l`,
  `Qpower_lt_compat_inv` to `Qpower_lt_compat_l_inv`,
  `Qpower_le_compat_inv` to `Qpower_le_compat_l_inv`,
  `Qpower_decomp'` to `Qpower_decomp_pos` and
  `QarchimedeanExp2_Pos` to `Qarchimedean_power2_pos`.
  The following lemmas have been renamed and the sides of the equality swapped:
  `Qinv_swap_pos` to `Qinv_pos`,
  `Qinv_swap_neg` to `Qinv_neg` and.
  The following lemmas have been deleted:
  `Q_factorNum_l` and `Q_factorNum`.
  The lemma `Qopp_lt_compat` has been moved from `theories/QArith/Qround.v` to `theories/QArith/QArith_base.v`.
  About 10 additional lemmas have been added for similar cases as the moved lemmas.
  Compatibility notations are not provided because QExtra is considered internal (excluded from the library documentation)
  (`#14293 <https://github.com/rocq-prover/rocq/pull/14293>`_,
  by Michael Soegtrop).
- **Changed:**
  Importing `ZArith` no longer has the side-effect of closing `Z_scope`
  (`#14343 <https://github.com/rocq-prover/rocq/pull/14343>`_,
  fixes `#13307 <https://github.com/rocq-prover/rocq/issues/13307>`_,
  by Ralf Jung).
- **Removed:**
  ``IF_then_else`` definition and corresponding ``IF P then Q else R`` notation
  (`#13871 <https://github.com/rocq-prover/rocq/pull/13871>`_,
  by Yishuai Li).
- **Removed:**
  from ``List.v`` deprecated/unexpected dependencies ``Setoid``, ``Le``, ``Gt``, ``Minus``, ``Lt``
  (`#13986 <https://github.com/rocq-prover/rocq/pull/13986>`_,
  by Andrej Dudenhefner).
- **Deprecated:**
  Unsigned primitive integers are now named ``uint63`` instead of ``int63``.
  The ``Int63`` module is replaced by ``Uint63``. The full list of changes
  is described in the PR
  (`#13895 <https://github.com/rocq-prover/rocq/pull/13895>`_,
  by Ana Borges).
- **Added:**
  ``leb`` and ``ltb`` functions for ``ascii``
  (`#13080 <https://github.com/rocq-prover/rocq/pull/13080>`_,
  by Yishuai Li).
- **Added:**
  Library for signed primitive integers, Sint63. The following operations were added to the kernel: division, remainder, comparison functions, and arithmetic shift right. Everything else works the same for signed and unsigned ints
  (`#13559 <https://github.com/rocq-prover/rocq/pull/13559>`_,
  fixes `#12109 <https://github.com/rocq-prover/rocq/issues/12109>`_,
  by Ana Borges, Guillaume Melquiond and Pierre Roux).
- **Added:**
  Lemmas about vectors related with ``to_list``: ``length_to_list``, ``of_list_to_list_opp``, ``to_list_nil``, ``to_list_cons``, ``to_list_hd``, ``to_list_last``, ``to_list_const``, ``to_list_nth_order``, ``to_list_tl``, ``to_list_append``, ``to_list_rev_append_tail``, ``to_list_rev_append``, ``to_list_rev``, ``to_list_map``, ``to_list_fold_left``, ``to_list_fold_right``, ``to_list_Forall``, ``to_list_Exists``, ``to_list_In``, ``to_list_Forall2``
  (`#13671 <https://github.com/rocq-prover/rocq/pull/13671>`_,
  by Olivier Laurent).
- **Added:**
  Lemmas about ``count_occ``: ``count_occ_app``, ``count_occ_elt_eq``, ``count_occ_elt_neq``, ``count_occ_bound``, ``count_occ_repeat_eq``, ``count_occ_repeat_neq``, ``count_occ_unique``, ``count_occ_repeat_excl``, ``count_occ_sgt``, ``Permutation_count_occ``
  (`#13804 <https://github.com/rocq-prover/rocq/pull/13804>`_,
  by Olivier Laurent with help of Jean-Christophe Léchenet).
- **Added:**
  Lemmas to ``List``: ``Exists_map``, ``Exists_concat``, ``Exists_flat_map``, ``Forall_map``, ``Forall_concat``, ``Forall_flat_map``, ``nth_error_map``, ``nth_repeat``, ``nth_error_repeat``
  (`#13955 <https://github.com/rocq-prover/rocq/pull/13955>`_,
  by Andrej Dudenhefner, with help from Olivier Laurent).
- **Added:**
  ``Cantor.v`` containing the Cantor pairing function and its inverse.
  ``Cantor.to_nat : nat * nat -> nat`` and ``Cantor.of_nat : nat -> nat * nat``
  are the respective bijections between ``nat * nat`` and ``nat``
  (`#14008 <https://github.com/rocq-prover/rocq/pull/14008>`_,
  by Andrej Dudenhefner).
- **Added:**
  Lemmas to ``Q``: ``Qeq_from_parts``, ``Qden_cancel``, ``Qnum_cancel``, ``Qreduce_l``, ``Qreduce_r``, ``Qmult_inject_Z_l``, ``Qmult_inject_Z_r`` QArith_base
  Reduction of rationals; establishing equality for Qden/Qnum separately
  (`#14087 <https://github.com/rocq-prover/rocq/pull/14087>`_,
  by Karolin Varner).
- **Added:**
  ``Coq.Structures.OrdersEx.String_as_OT`` and
  ``Coq.Structures.OrdersEx.Ascii_as_OT`` to make strings and ascii ordered
  types (using lexical order).  (`#14096
  <https://github.com/rocq-prover/rocq/pull/14096>`_, by Jason Gross).
- **Added:**
  Lemmas :g:`app_eq_app`, :g:`Forall_nil_iff`, :g:`Forall_cons_iff` to ``List.v``
  (`#14153 <https://github.com/rocq-prover/rocq/pull/14153>`_,
  closes `#1803 <https://github.com/rocq-prover/rocq/issues/1803>`_,
  by Andrej Dudenhefner, with help from Olivier Laurent).
- **Added:**
  ``Z``, ``positive`` and ``N`` constants can now be printed in hexadecimal by
  opening ``hex_Z_scope``, ``hex_positive_scope``, and ``hex_N_scope``
  respectively (`#14263 <https://github.com/rocq-prover/rocq/pull/14263>`_, by Jason
  Gross).
- **Added:**
  Absolute value function for Sint63
  (`#14384 <https://github.com/rocq-prover/rocq/pull/14384>`_,
  by Ana Borges).
- **Added:**
  Lemmas showing :g:`firstn` and :g:`skipn` commute with :g:`map`
  (`#14406 <https://github.com/rocq-prover/rocq/pull/14406>`_,
  by Rudy Peterson).
- **Fixed:**
  Haskell extraction is now compatible with GHC versions >= 9.0.  Some ``#if``
  statements have been added to extract ``unsafeCoerce`` to its new location in
  newer versions of GHC.  (`#14345 <https://github.com/rocq-prover/rocq/pull/14345>`_,
  fixes `#14256 <https://github.com/rocq-prover/rocq/issues/14256>`_, by Jason Gross).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  .. _814Dune:

- **Changed:**
  Coq's configure script now requires absolute paths for the `-prefix`
  option
  (`#12567 <https://github.com/rocq-prover/rocq/pull/12567>`_,
  by Emilio Jesus Gallego Arias).
- **Changed:**
  The regular Coq package has been split in two: coq-core, with
  OCaml-based libraries and tools; and coq-stdlib, which contains the
  Gallina-based standard library. The package Coq now depends on both
  for compatiblity
  (`#12567 <https://github.com/rocq-prover/rocq/pull/12567>`_,
  by Emilio Jesus Gallego Arias, review by Vincent Laporte, Guillaume
  Melquiond, Enrico Tassi, and Théo Zimmerman).
- **Changed:**
  Coq's OCaml parts and tools [``coq-core``] are now built using Dune.
  The main user-facing change is that Dune >= 2.5 is now required to
  build Coq. This was a large and complex change. If you are packager
  you may find some minor differences if you were using a lot of custom
  optimizations. Note that, in particular, the configure option
  ``-datadir`` is not customizable anymore, and ``-bindir`` has been
  removed in favor of ``$prefix/bin``. Moreover, the install procedure
  will ignore ``-docdir`` and ``-etcdir``, unless you patch the makefile
  and use Dune >= 2.9.
  We usually recommended using a recent Dune version, if possible.
  For developers and plugin authors, see the entry in
  `dev/doc/changes.md`. For packagers and users, see `dev/doc/INSTALL.make.md`
  (`#13617 <https://github.com/rocq-prover/rocq/pull/13617>`_,
  by Emilio Jesús Gallego Arias, Rudi Grinberg, and Théo Zimmerman;
  review and testing by Gaëtan Gilbert, Guillaume Melquiond, and
  Enrico Tassi)
- **Changed:**
  Undocumented variables ``OLDROOT`` and ``COQPREFIXINSTALL`` which
  added a prefix path to ``make install`` have been removed. Now, ``make
  install`` does support the more standard ``DESTDIR`` variable, akin
  to what ``coq_makefile`` does
  (`#14258 <https://github.com/rocq-prover/rocq/pull/14258>`_,
  by Emilio Jesus Gallego Arias).
- **Added:**
  Support OCaml 4.12
  (`#13885 <https://github.com/rocq-prover/rocq/pull/13885>`_,
  by Emilio Jesus Gallego Arias, review by Gaëtan Gilbert and Théo Zimmerman).

Miscellaneous
^^^^^^^^^^^^^

- **Changed:**
  The representation of micromega caches was slightly
  altered for efficiency purposes. As a consequence
  all stale caches must be cleaned up
  (`#13405 <https://github.com/rocq-prover/rocq/pull/13405>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  Fix the timeout facility on Unix to allow for nested timeouts.
  Previous behavior on nested timeouts was that an "inner" timeout would replace an "outer"
  timeout, so that the outer timeout would no longer fire. With the new behavior, Unix and Windows
  implementations should be (approximately) equivalent
  (`#13586 <https://github.com/rocq-prover/rocq/pull/13586>`_,
  by Lasse Blaauwbroek).

Changes in 8.14.1
~~~~~~~~~~~~~~~~~

Kernel
^^^^^^

- **Fixed:**
  Fix the implementation of persistent arrays used by the VM and native compute
  so that it uses a uniform representation. Previously, storing primitive floats
  inside primitive arrays could cause memory corruption
  (`#15081 <https://github.com/rocq-prover/rocq/pull/15081>`_,
  closes `#15070 <https://github.com/rocq-prover/rocq/issues/15070>`_,
  by Pierre-Marie Pédrot).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Fixed:**
  Missing registration of universe constraints in :cmd:`Module Type` elaboration
  (`#14666 <https://github.com/rocq-prover/rocq/pull/14666>`_,
  fixes `#14505 <https://github.com/rocq-prover/rocq/issues/14505>`_,
  by Hugo Herbelin).

Tactics
^^^^^^^

- **Fixed:**
  :tacn:`abstract` more robust with respect to Ltac `constr` bindings containing
  existential variables
  (`#14671 <https://github.com/rocq-prover/rocq/pull/14671>`_,
  fixes `#10796 <https://github.com/rocq-prover/rocq/issues/10796>`_,
  by Hugo Herbelin).
- **Fixed:**
  correct support of trailing :n:`let` by tactic :tacn:`specialize`
  (`#15046 <https://github.com/rocq-prover/rocq/pull/15046>`_,
  fixes `#15043 <https://github.com/rocq-prover/rocq/issues/15043>`_,
  by Hugo Herbelin).

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Fixed:**
  anomaly with :flag:`Extraction Conservative Types` when extracting
  pattern-matching on singleton types
  (`#14669 <https://github.com/rocq-prover/rocq/pull/14669>`_,
  fixes `#3527 <https://github.com/rocq-prover/rocq/issues/3527>`_,
  by Hugo Herbelin).
- **Fixed:**
  a regular error instead of an anomaly when calling :cmd:`Separate
  Extraction` in a module
  (`#14670 <https://github.com/rocq-prover/rocq/pull/14670>`_,
  fixes `#10796 <https://github.com/rocq-prover/rocq/issues/10796>`_,
  by Hugo Herbelin).

Version 8.13
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.13 integrates many usability improvements, as well
as extensions of the core language.
The main changes include:

  - :ref:`Introduction <813PrimArrays>` of :ref:`primitive persistent arrays<primitive-arrays>`
    in the core language, implemented using imperative persistent arrays.
  - Introduction of :ref:`definitional proof irrelevance <813UIP>` for the equality type
    defined in the SProp sort.
  - Cumulative record and inductive type declarations can now
    :ref:`specify <813VarianceDecl>` the variance of their universes.
  - Various bugfixes and uniformization of behavior with respect to the use of
    implicit arguments and the handling of existential variables in
    declarations, unification and tactics.
  - New warning for :ref:`unused variables <813UnusedVar>` in catch-all match
    branches that match multiple distinct patterns.
  - New :ref:`warning <813HintWarning>` for `Hint` commands outside
    sections without a locality attribute, whose goal is to eventually
    remove the fragile default behavior of importing hints only when
    using `Require`. The recommended fix is to declare hints as `export`,
    instead of the current default `global`, meaning that they are imported
    through `Require Import` only, not `Require`.
    See the following `rationale and guidelines <https://coq.discourse.group/t/change-of-default-locality-for-hint-commands-in-coq-8-13/1140>`_
    for details.
  - General support for :ref:`boolean attributes <813BooleanAttrs>`.
  - Many improvements to the handling of :ref:`notations <813Notations>`,
    including number notations, recursive notations and notations with bindings.
    A new algorithm chooses the most precise notation available to print an expression,
    which might introduce changes in printing behavior.
  - Tactic :ref:`improvements <813Tactics>` in :tacn:`lia` and its :tacn:`zify` preprocessing step,
    now supporting reasoning on boolean operators such as :g:`Z.leb` and supporting
    primitive integers :g:`Int63`.
  - Typing flags can now be specified :ref:`per-constant / inductive <813TypingFlags>`.
  - Improvements to the reference manual including updated syntax
    descriptions that match Coq's grammar in several chapters, and splitting parts of
    the tactics chapter to independent sections.

See the `Changes in 8.13+beta1`_ section and following sections for the
detailed list of changes, including potentially breaking changes marked
with **Changed**.

Coq's documentation is available at https://coq.github.io/doc/v8.13/refman (reference
manual), and https://coq.github.io/doc/v8.13/stdlib (documentation of
the standard library). Developer documentation of the ML API is available
at https://coq.github.io/doc/v8.13/api.

Maxime Dénès, Emilio Jesús Gallego Arias, Gaëtan Gilbert, Michael
Soegtrop and Théo Zimmermann worked on maintaining and improving the
continuous integration system and package building infrastructure.

Erik Martin-Dorel has maintained the `Coq Docker images
<https://hub.docker.com/r/coqorg/coq>`_ that are used in many Coq
projects for continuous integration.

The opam repository for Coq packages has been maintained by
Guillaume Claret, Karl Palmskog, Matthieu Sozeau and Enrico Tassi with
contributions from many users. A list of packages is available at
https://coq.inria.fr/opam/www/.

Our current 32 maintainers are Yves Bertot, Frédéric Besson, Tej
Chajed, Cyril Cohen, Pierre Corbineau, Pierre Courtieu, Maxime Dénès,
Jim Fehrle, Julien Forest, Emilio Jesús Gallego Arias, Gaëtan Gilbert,
Georges Gonthier, Benjamin Grégoire, Jason Gross, Hugo Herbelin,
Vincent Laporte, Olivier Laurent, Assia Mahboubi, Kenji Maillard,
Guillaume Melquiond, Pierre-Marie Pédrot, Clément Pit-Claudel,
Kazuhiko Sakaguchi, Vincent Semeria, Michael Soegtrop, Arnaud Spiwack,
Matthieu Sozeau, Enrico Tassi, Laurent Théry, Anton Trunov, Li-yao Xia
and Théo Zimmermann.

The 51 contributors to this version are Reynald Affeldt, Tanaka Akira, Frédéric
Besson, Lasse Blaauwbroek, Clément Blaudeau, Martin Bodin, Ali Caglayan, Tej Chajed,
Cyril Cohen, Julien Coolen, Matthew Dempsky, Maxime Dénès, Andres Erbsen,
Jim Fehrle, Emilio Jesús Gallego Arias, Attila Gáspár, Paolo G. Giarrusso, Gaëtan Gilbert,
Jason Gross, Benjamin Grégoire, Hugo Herbelin, Wolf Honore, Jasper Hugunin, Ignat Insarov,
Ralf Jung, Fabian Kunze, Vincent Laporte, Olivier Laurent, Larry D. Lee Jr,
Thomas Letan, Yishuai Li, James Lottes, Jean-Christophe Léchenet,
Kenji Maillard, Erik Martin-Dorel, Yusuke Matsushita, Guillaume Melquiond,
Carl Patenaude-Poulin, Clément Pit-Claudel, Pierre-Marie Pédrot, Pierre Roux,
Kazuhiko Sakaguchi, Vincent Semeria, Michael Soegtrop, Matthieu Sozeau,
Enrico Tassi, Anton Trunov, Edward Wang, Li-yao Xia, Beta Ziliani and Théo Zimmermann.

The Coq community at large helped improve the design of this new version via
the GitHub issue and pull request system, the Coq development mailing list
coqdev@inria.fr, the coq-club@inria.fr mailing list, the `Discourse forum
<https://coq.discourse.group/>`_ and the `Coq Zulip chat <https://coq.zulipchat.com>`_.

Version 8.13's development spanned 5 months from the release of
Coq 8.12.0. Enrico Tassi and Maxime Dénès are the release managers of Coq 8.13.
This release is the result of 400 merged PRs, closing ~100 issues.

| Nantes, November 2020,
| Matthieu Sozeau for the Coq development team
|


Changes in 8.13+beta1
~~~~~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

  .. _813UIP:

- **Added:**
  Definitional UIP, only when :flag:`Definitional UIP` is enabled.
  This models definitional uniqueness of identity proofs for the equality
  type in SProp. It is deactivated by default as it can lead to
  non-termination in combination with impredicativity.
  Use of this flag is also printed by :cmd:`Print Assumptions`. See
  documentation of the flag for details
  (`#10390 <https://github.com/rocq-prover/rocq/pull/10390>`_,
  by Gaëtan Gilbert).

  .. _813PrimArrays:

- **Added:**
  Built-in support for persistent arrays, which expose a functional
  interface but are implemented using an imperative data structure, for
  better performance
  (`#11604 <https://github.com/rocq-prover/rocq/pull/11604>`_,
  by Maxime Dénès and Benjamin Grégoire, with help from Gaëtan Gilbert).

  Primitive arrays are irrelevant in their single
  polymorphic universe (same as a polymorphic cumulative list
  inductive would be) (`#13356
  <https://github.com/rocq-prover/rocq/pull/13356>`_, fixes `#13354
  <https://github.com/rocq-prover/rocq/issues/13354>`_, by Gaëtan Gilbert).

- **Fixed:**
  A loss of definitional equality for declarations obtained through
  :cmd:`Include` when entering the scope of a :cmd:`Module` or
  :cmd:`Module Type` was causing :cmd:`Search` not to see the included
  declarations
  (`#12537 <https://github.com/rocq-prover/rocq/pull/12537>`_, fixes `#12525
  <https://github.com/rocq-prover/rocq/pull/12525>`_ and `#12647
  <https://github.com/rocq-prover/rocq/pull/12647>`_, by Hugo Herbelin).

- **Fixed:**
  Fix an incompleteness in the typechecking of `match` for
  cumulative inductive types. This could result in breaking subject
  reduction
  (`#13501 <https://github.com/rocq-prover/rocq/pull/13501>`_,
  fixes `#13495 <https://github.com/rocq-prover/rocq/issues/13495>`_,
  by Matthieu Sozeau).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  .. _813BooleanAttrs:

- **Changed:**
  :term:`Boolean attributes <boolean attribute>` are now specified using
  key/value pairs, that is to say :n:`@ident__attr{? = {| yes | no } }`.
  If the value is missing, the default is :n:`yes`.  The old syntax is still
  supported, but produces the ``deprecated-attribute-syntax`` warning.

  Deprecated attributes are ``universes(monomorphic)``,
  ``universes(notemplate)`` and ``universes(noncumulative)``, which are
  respectively replaced by :attr:`universes(polymorphic=no) <universes(polymorphic)>`,
  :attr:`universes(template=no) <universes(template)>`
  and :attr:`universes(cumulative=no) <universes(cumulative)>`.
  Attributes :attr:`program` and :attr:`canonical` are also affected,
  with the syntax :n:`@ident__attr(false)` being deprecated in favor of
  :n:`@ident__attr=no`
  (`#13312 <https://github.com/rocq-prover/rocq/pull/13312>`_,
  by Emilio Jesus Gallego Arias).
- **Changed:** Heuristics for universe minimization to :g:`Set`: also
  use constraints ``Prop <= i`` (`#10331
  <https://github.com/rocq-prover/rocq/pull/10331>`_, by Gaëtan Gilbert with
  help from Maxime Dénès and Matthieu Sozeau, fixes `#12414
  <https://github.com/rocq-prover/rocq/issues/12414>`_).
- **Changed:** The type given to :cmd:`Instance` is no longer automatically
  generalized over unbound and :ref:`generalizable <implicit-generalization>` variables.
  Use ``Instance : `{type}`` instead of :n:`Instance : @type` to get the old behavior, or
  enable the compatibility flag ``Instance Generalized Output``
  (`#13188 <https://github.com/rocq-prover/rocq/pull/13188>`_, fixes `#6042
  <https://github.com/rocq-prover/rocq/issues/6042>`_, by Gaëtan Gilbert).
- **Changed:**
  Tweaked the algorithm giving default names to arguments.
  Should reduce the frequency that argument names get an
  unexpected suffix.
  Also makes :flag:`Mangle Names` not mess up argument names
  (`#12756 <https://github.com/rocq-prover/rocq/pull/12756>`_,
  fixes `#12001 <https://github.com/rocq-prover/rocq/issues/12001>`_
  and `#6785 <https://github.com/rocq-prover/rocq/issues/6785>`_,
  by Jasper Hugunin).
- **Removed:**
  Undocumented and experimental forward class hint feature ``:>>``.
  Use ``:>`` (see :n:`@of_type`) instead
  (`#13106 <https://github.com/rocq-prover/rocq/pull/13106>`_,
  by Pierre-Marie Pédrot).

  .. _813VarianceDecl:

- **Added:** Commands :cmd:`Inductive`, :cmd:`Record` and synonyms now
  support syntax `Inductive foo@{=i +j *k l}` to specify variance
  information for their universes (in :ref:`Cumulative <cumulative>`
  mode) (`#12653 <https://github.com/rocq-prover/rocq/pull/12653>`_, by Gaëtan
  Gilbert).

  .. _813UnusedVar:

- **Added:**
  Warning on unused variables in pattern-matching branches of
  :n:`match` serving as catch-all branches for at least two distinct
  patterns
  (`#12768 <https://github.com/rocq-prover/rocq/pull/12768>`_,
  fixes `#12762 <https://github.com/rocq-prover/rocq/issues/12762>`_,
  by Hugo Herbelin).
- **Added:**
  Definition and (Co)Fixpoint now support the :attr:`using` attribute.
  It has the same effect as :cmd:`Proof using`, which is only available in
  interactive mode
  (`#13183 <https://github.com/rocq-prover/rocq/pull/13183>`_,
  by Enrico Tassi).

  .. _813TypingFlags:

- **Added:**
  Typing flags can now be specified per-constant / inductive, this
  allows to fine-grain specify them from plugins or attributes. See
  :ref:`controlling-typing-flags` for details on attribute syntax
  (`#12586 <https://github.com/rocq-prover/rocq/pull/12586>`_,
  by Emilio Jesus Gallego Arias).

- **Added:**
  Inference of return predicate of a :g:`match` by inversion takes
  sort elimination constraints into account
  (`#13290 <https://github.com/rocq-prover/rocq/pull/13290>`_,
  grants `#13278 <https://github.com/rocq-prover/rocq/issues/13278>`_,
  by Hugo Herbelin).
- **Fixed:**
  Implicit arguments taken into account in defined fields of a record type declaration
  (`#13166 <https://github.com/rocq-prover/rocq/pull/13166>`_,
  fixes `#13165 <https://github.com/rocq-prover/rocq/issues/13165>`_,
  by Hugo Herbelin).
- **Fixed:**
  Allow use of typeclass inference for the return predicate of a :n:`match`
  (was deactivated in versions 8.10 to 8.12, `#13217 <https://github.com/rocq-prover/rocq/pull/13217>`_,
  fixes `#13216 <https://github.com/rocq-prover/rocq/issues/13216>`_,
  by Hugo Herbelin).
- **Fixed:**
  A case of unification raising an anomaly IllTypedInstance
  (`#13376 <https://github.com/rocq-prover/rocq/pull/13376>`_,
  fixes `#13266 <https://github.com/rocq-prover/rocq/issues/13266>`_,
  by Hugo Herbelin).
- **Fixed:**
  Using :n:`{wf ...}` in local fixpoints is an error, not an anomaly
  (`#13383 <https://github.com/rocq-prover/rocq/pull/13383>`_,
  fixes `#11816 <https://github.com/rocq-prover/rocq/issues/11816>`_,
  by Hugo Herbelin).
- **Fixed:**
  Issue when two expressions involving different projections and one is
  primitive need to be unified
  (`#13386 <https://github.com/rocq-prover/rocq/pull/13386>`_,
  fixes `#9971 <https://github.com/rocq-prover/rocq/issues/9971>`_,
  by Hugo Herbelin).
- **Fixed:**
  A bug producing ill-typed instances of existential variables when let-ins
  interleaved with assumptions
  (`#13387 <https://github.com/rocq-prover/rocq/pull/13387>`_,
  fixes `#12348 <https://github.com/rocq-prover/rocq/issues/13387>`_,
  by Hugo Herbelin).

  .. _813Notations:

Notations
^^^^^^^^^

- **Changed:**
  In notations (except in custom entries), the misleading :n:`@syntax_modifier`
  :n:`@ident ident` (which accepted either an identifier or
  a :g:`_`) is deprecated and should be replaced by :n:`@ident name`. If
  the intent was really to only parse identifiers, this will
  eventually become possible, but only as of Coq 8.15.
  In custom entries, the meaning of :n:`@ident ident` is silently changed
  from parsing identifiers or :g:`_` to parsing only identifiers
  without warning, but this presumably affects only rare, recent and
  relatively experimental code
  (`#11841 <https://github.com/rocq-prover/rocq/pull/11841>`_,
  fixes `#9514 <https://github.com/rocq-prover/rocq/pull/9514>`_,
  by Hugo Herbelin).
- **Changed:**
  Improved support for notations/abbreviations with mixed terms and patterns (such as the forcing modality)
  (`#12099 <https://github.com/rocq-prover/rocq/pull/12099>`_,
  by Hugo Herbelin).
- **Changed**
  Rational and real constants are parsed differently.
  The exponent is now encoded separately from the fractional part
  using ``Z.pow_pos``. This way, parsing large exponents can no longer
  blow up and constants are printed in a form closer to the one in which they
  were parsed (i.e., ``102e-2`` is reprinted as such and not ``1.02``)
  (`#12218 <https://github.com/rocq-prover/rocq/pull/12218>`_,
  by Pierre Roux).
- **Changed:**
  Scope information is propagated in indirect applications to a
  reference prefixed with :g:`@`; this covers for instance the case
  :g:`r.(@p) t` where scope information from :g:`p` is now taken into
  account for interpreting :g:`t` (`#12685
  <https://github.com/rocq-prover/rocq/pull/12685>`_, by Hugo Herbelin).
- **Changed:**
  New model for ``only parsing`` and ``only printing`` notations with
  support for at most one parsing-and-printing or only-parsing
  notation per notation and scope, but an arbitrary number of
  only-printing notations
  (`#12950 <https://github.com/rocq-prover/rocq/pull/12950>`_,
  fixes `#4738 <https://github.com/rocq-prover/rocq/issues/4738>`_
  and `#9682 <https://github.com/rocq-prover/rocq/issues/9682>`_
  and part 2 of `#12908 <https://github.com/rocq-prover/rocq/issues/12908>`_,
  by Hugo Herbelin).
- **Changed:**
  Redeclaring a notation also reactivates its printing rule; in
  particular a second :cmd:`Import` of the same module reactivates the
  printing rules declared in this module. In theory, this leads to
  changes in behavior for printing. However, this is mitigated in
  general by the adoption in `#12986
  <https://github.com/rocq-prover/rocq/pull/12986>`_ of a priority given to
  notations which match a larger part of the term to print
  (`#12984 <https://github.com/rocq-prover/rocq/pull/12984>`_,
  fixes `#7443 <https://github.com/rocq-prover/rocq/issues/7443>`_
  and `#10824 <https://github.com/rocq-prover/rocq/issues/10824>`_,
  by Hugo Herbelin).
- **Changed:**
  Use of notations for printing now gives preference
  to notations which match a larger part of the term to abbreviate
  (`#12986 <https://github.com/rocq-prover/rocq/pull/12986>`_,
  by Hugo Herbelin).
- **Removed**
  OCaml parser and printer for real constants have been removed.
  Real constants are now handled with proven Coq code
  (`#12218 <https://github.com/rocq-prover/rocq/pull/12218>`_,
  by Pierre Roux).
- **Deprecated**
  ``Numeral.v`` is deprecated, please use ``Number.v`` instead
  (`#12218 <https://github.com/rocq-prover/rocq/pull/12218>`_,
  by Pierre Roux).
- **Deprecated:**
  `Numeral Notation`, please use :cmd:`Number Notation` instead
  (`#12979 <https://github.com/rocq-prover/rocq/pull/12979>`_,
  by Pierre Roux).
- **Added:**
  ``Printing Float`` flag to print primitive floats as hexadecimal
  instead of decimal values. This is included in the :flag:`Printing All` flag
  (`#11986 <https://github.com/rocq-prover/rocq/pull/11986>`_,
  by Pierre Roux).
- **Added:**
  :ref:`Number Notation <number-notations>` and :ref:`String Notation
  <string-notations>` commands now
  support parameterized inductive and non-inductive types
  (`#12218 <https://github.com/rocq-prover/rocq/pull/12218>`_,
  fixes `#12035 <https://github.com/rocq-prover/rocq/issues/12035>`_,
  by Pierre Roux, review by Jason Gross and Jim Fehrle for the
  reference manual).
- **Added:**
  Added support for encoding notations of the form :g:`x ⪯ y ⪯ .. ⪯ z ⪯ t`.
  This feature is considered experimental
  (`#12765 <https://github.com/rocq-prover/rocq/pull/12765>`_,
  by Hugo Herbelin).
- **Added:**
  The :n:`@binder` entry of :cmd:`Notation` can now be used in
  notations expecting a single (non-recursive) binder
  (`#13265 <https://github.com/rocq-prover/rocq/pull/13265>`_,
  by Hugo Herbelin, see section :ref:`notations-and-binders` of the
  reference manual).
- **Fixed:**
  Issues in the presence of notations recursively referring to another
  applicative notations, such as missing scope propagation, or failure
  to use a notation for printing
  (`#12960 <https://github.com/rocq-prover/rocq/pull/12960>`_,
  fixes `#9403 <https://github.com/rocq-prover/rocq/issues/9403>`_
  and `#10803 <https://github.com/rocq-prover/rocq/issues/10803>`_,
  by Hugo Herbelin).
- **Fixed:**
  Capture the names of global references by
  binders in the presence of notations for binders
  (`#12965 <https://github.com/rocq-prover/rocq/pull/12965>`_,
  fixes `#9569 <https://github.com/rocq-prover/rocq/issues/9569>`_,
  by Hugo Herbelin).
- **Fixed:**
  Preventing notations for constructors to involve binders
  (`#13092 <https://github.com/rocq-prover/rocq/pull/13092>`_,
  fixes `#13078 <https://github.com/rocq-prover/rocq/issues/13078>`_,
  by Hugo Herbelin).
- **Fixed:** Notations understand universe names without getting
  confused by different imported modules between declaration and use
  locations (`#13415 <https://github.com/rocq-prover/rocq/pull/13415>`_, fixes
  `#13303 <https://github.com/rocq-prover/rocq/issues/13303>`_, by Gaëtan
  Gilbert).

  .. _813Tactics:

Tactics
^^^^^^^

- **Changed:**
  In :tacn:`refine`, new existential variables unified with existing ones are no
  longer considered as fresh. The behavior of :tacn:`simple refine <refine>` no
  longer depends on
  the orientation of evar-evar unification problems, and new existential variables
  are always turned into (unshelved) goals. This can break compatibility in
  some cases (`#7825 <https://github.com/rocq-prover/rocq/pull/7825>`_, by Matthieu
  Sozeau, with help from Maxime Dénès, review by Pierre-Marie Pédrot and
  Enrico Tassi, fixes `#4095 <https://github.com/rocq-prover/rocq/issues/4095>`_ and
  `#4413 <https://github.com/rocq-prover/rocq/issues/4413>`_).
- **Changed:**
  Giving an empty list of occurrences after :n:`in` in tactics is no
  longer permitted. Omitting the :n:`in` gives the same behavior
  (`#13237 <https://github.com/rocq-prover/rocq/pull/13236>`_,
  fixes `#13235 <https://github.com/rocq-prover/rocq/issues/13235>`_,
  by Hugo Herbelin).
- **Removed:**
  :n:`at @occs_nums` clauses in tactics such as :tacn:`unfold`
  no longer allow negative values.  A "-" before the
  list (for set complement) is still supported.  Ex: "at -1 -2"
  is no longer supported but "at -1 2" is
  (`#13403 <https://github.com/rocq-prover/rocq/pull/13403>`_,
  by Jim Fehrle).
- **Removed:**
  A number of tactics that formerly accepted negative
  numbers as parameters now give syntax errors for negative
  values.  These include {e}constructor, do, timeout,
  9 {e}auto tactics and psatz*
  (`#13417 <https://github.com/rocq-prover/rocq/pull/13417>`_,
  by Jim Fehrle).
- **Removed:**
  The deprecated and undocumented `prolog` tactic was removed
  (`#12399 <https://github.com/rocq-prover/rocq/pull/12399>`_,
  by Pierre-Marie Pédrot).
- **Removed:** `info` tactic that was deprecated in 8.5
  (`#12423 <https://github.com/rocq-prover/rocq/pull/12423>`_, by Jim Fehrle).
- **Deprecated:**
  Undocumented :n:`eauto @nat_or_var @nat_or_var` syntax in favor of new `bfs eauto`.
  Also deprecated 2-integer syntax for :tacn:`debug eauto` and :tacn:`info_eauto`
  (Use `bfs eauto` with the :flag:`Info Eauto` or :flag:`Debug Eauto` flags instead.)
  (`#13381 <https://github.com/rocq-prover/rocq/pull/13381>`_,
  by Jim Fehrle).
- **Added:**
  :tacn:`lia` is extended to deal with boolean operators e.g. `andb` or `Z.leb`
  (as `lia` gets more powerful, this may break proof scripts relying on `lia` failure,
  `#11906 <https://github.com/rocq-prover/rocq/pull/11906>`_,  by Frédéric Besson).
- **Added:**
  :tacn:`apply … in <apply>` supports several hypotheses
  (`#12246 <https://github.com/rocq-prover/rocq/pull/12246>`_,
  by Hugo Herbelin; grants
  `#9816 <https://github.com/rocq-prover/rocq/pull/9816>`_).
- **Added:**
  The :tacn:`zify` tactic can now be extended by redefining the `zify_pre_hook`
  tactic. (`#12552 <https://github.com/rocq-prover/rocq/pull/12552>`_,
  by Kazuhiko Sakaguchi).
- **Added:**
  The :tacn:`zify` tactic provides support for primitive integers (module :g:`ZifyInt63`)
  (`#12648 <https://github.com/rocq-prover/rocq/pull/12648>`_,  by Frédéric Besson).
- **Fixed:**
  Avoid exposing an internal name of the form :n:`_tmp` when applying the
  :n:`_` introduction pattern which would break a dependency
  (`#13337 <https://github.com/rocq-prover/rocq/pull/13337>`_,
  fixes `#13336 <https://github.com/rocq-prover/rocq/issues/13336>`_,
  by Hugo Herbelin).
- **Fixed:**
  The case of tactics, such as :tacn:`eapply`, producing existential variables
  under binders with an ill-formed instance
  (`#13373 <https://github.com/rocq-prover/rocq/pull/13373>`_,
  fixes `#13363 <https://github.com/rocq-prover/rocq/issues/13363>`_,
  by Hugo Herbelin).

Tactic language
^^^^^^^^^^^^^^^

- **Added:**
  An if-then-else syntax to Ltac2
  (`#13232 <https://github.com/rocq-prover/rocq/pull/13232>`_,
  fixes `#10110 <https://github.com/rocq-prover/rocq/issues/10110>`_,
  by Pierre-Marie Pédrot).
- **Fixed:**
  Printing of the quotation qualifiers when printing :g:`Ltac` functions
  (`#13028 <https://github.com/rocq-prover/rocq/pull/13028>`_,
  fixes `#9716 <https://github.com/rocq-prover/rocq/issues/9716>`_
  and `#13004 <https://github.com/rocq-prover/rocq/issues/13004>`_,
  by Hugo Herbelin).

SSReflect
^^^^^^^^^

- **Added:**
  SSReflect intro pattern ltac views ``/[dup]``, ``/[swap]`` and ``/[apply]``
  (`#13317 <https://github.com/rocq-prover/rocq/pull/13317>`_,
  by Cyril Cohen).
- **Fixed:**
  Working around a bug of interaction between + and /(ltac:(...)) cf
  `#13458 <https://github.com/rocq-prover/rocq/issues/13458>`_
  (`#13459 <https://github.com/rocq-prover/rocq/pull/13459>`_,
  by Cyril Cohen).

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  Drop prefixes from grammar non-terminal names,
  e.g. "constr:global" -> "global", "Prim.name" -> "name".
  Visible in the output of :cmd:`Print Grammar` and :cmd:`Print Custom Grammar`
  (`#13096 <https://github.com/rocq-prover/rocq/pull/13096>`_,
  by Jim Fehrle).
- **Changed:**
  When declaring arbitrary terms as hints, unsolved
  evars are not abstracted implicitly anymore and instead
  raise an error
  (`#13139 <https://github.com/rocq-prover/rocq/pull/13139>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  In the :cmd:`Extraction Language` command, remove `Ocaml` as a valid value.
  Use `OCaml` instead.  This was deprecated in Coq 8.8, `#6261 <https://github.com/rocq-prover/rocq/pull/6261>`_
  (`#13016 <https://github.com/rocq-prover/rocq/pull/13016>`_, by Jim Fehrle).

  .. _813HintWarning:

- **Deprecated:**
  Hint locality currently defaults to :attr:`local` in a section and
  :attr:`global` otherwise, but this will change in a future release.
  Hints added outside of sections without an explicit
  locality now generate a deprecation warning. We recommend
  using :attr:`export` where possible
  (`#13384 <https://github.com/rocq-prover/rocq/pull/13384>`_,
  by Pierre-Marie Pédrot).
- **Deprecated:**
  ``Grab Existential Variables`` and ``Existential`` commands
  (`#12516 <https://github.com/rocq-prover/rocq/pull/12516>`_,
  by Maxime Dénès).
- **Added:**
  The :attr:`export` locality can now be used for all Hint commands,
  including :cmd:`Hint Cut`, :cmd:`Hint Mode`, :cmd:`Hint Transparent` /
  :cmd:`Opaque <Hint Opaque>` and
  :cmd:`Remove Hints`
  (`#13388 <https://github.com/rocq-prover/rocq/pull/13388>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  Support for automatic insertion of coercions in :cmd:`Search`
  patterns. Additionally, head patterns are now automatically
  interpreted as types
  (`#13255 <https://github.com/rocq-prover/rocq/pull/13255>`_,
  fixes `#13244 <https://github.com/rocq-prover/rocq/issues/13244>`_,
  by Hugo Herbelin).
- **Added:**
  The :cmd:`Proof using` command can now be used without loading the
  Ltac plugin (`-noinit` mode)
  (`#13339 <https://github.com/rocq-prover/rocq/pull/13339>`_,
  by Théo Zimmermann).
- **Added:**
  Clarify in the documentation that ``Add ML Path`` is not exported to compiled files
  (`#13345 <https://github.com/rocq-prover/rocq/pull/13345>`_,
  fixes `#13344 <https://github.com/rocq-prover/rocq/issues/13344>`_,
  by Hugo Herbelin).

Tools
^^^^^

- **Changed:**
  Option `-native-compiler` of the configure script now impacts the
  default value of the `-native-compiler` option of coqc. The
  `-native-compiler` option of the configure script supports a new `ondemand`
  value, which becomes the default, thus preserving the previous default
  behavior.
  The stdlib is still precompiled when configuring with `-native-compiler
  yes`. It is not precompiled otherwise.
  This an implementation of point 2 of
  `CEP #48 <https://github.com/coq/ceps/pull/48>`_
  (`#13352 <https://github.com/rocq-prover/rocq/pull/13352>`_,
  by Pierre Roux).
- **Changed:**
  Added the ability for coq_makefile to directly set the installation folders,
  through the `COQLIBINSTALL` and `COQDOCINSTALL` variables.
  See :ref:`rocqmakefilelocal`
  (`#12389 <https://github.com/rocq-prover/rocq/pull/12389>`_, by Martin Bodin, review of Enrico Tassi).
- **Removed:** The option ``-I`` of coqchk was removed (it was
  deprecated in Coq 8.8) (`#12613
  <https://github.com/rocq-prover/rocq/pull/12613>`_, by Gaëtan Gilbert).
- **Fixed:**
  ``coqchk`` no longer reports names from inner modules of opaque modules as
  axioms (`#12862 <https://github.com/rocq-prover/rocq/pull/12862>`_, fixes `#12845
  <https://github.com/rocq-prover/rocq/issues/12845>`_, by Jason Gross).

CoqIDE
^^^^^^

- **Added:**
  Support showing diffs for :cmd:`Show Proof` in CoqIDE from the :n:`View` menu.
  See :ref:`showing_proof_diffs`
  (`#12874 <https://github.com/rocq-prover/rocq/pull/12874>`_,
  by Jim Fehrle and Enrico Tassi)
- **Added:**
  Support for flag :flag:`Printing Goal Names` in View menu
  (`#13145 <https://github.com/rocq-prover/rocq/pull/13145>`_,
  by Hugo Herbelin).

Standard library
^^^^^^^^^^^^^^^^

- **Changed:**
  In the reals theory changed the epsilon in the definition of the modulus of convergence for CReal from 1/n (n in positive) to 2^z (z in Z)
  so that a precision coarser than one is possible. Also added an upper bound to CReal to enable more efficient computations
  (`#12186 <https://github.com/rocq-prover/rocq/pull/12186>`_,
  by Michael Soegtrop).
- **Changed:**
  Int63 notations now match up with the rest of the standard library: :g:`a \%
  m`, :g:`m == n`, :g:`m < n`, :g:`m <= n`, and :g:`m ≤ n` have been replaced
  with :g:`a mod m`, :g:`m =? n`, :g:`m <? n`, :g:`m <=? n`, and :g:`m ≤? n`.
  The old notations are still available as deprecated notations.  Additionally,
  there is now a ``Coq.Numbers.Cyclic.Int63.Int63.Int63Notations`` module that
  users can import to get the ``Int63`` notations without unqualifying the
  various primitives (`#12479 <https://github.com/rocq-prover/rocq/pull/12479>`_, fixes
  `#12454 <https://github.com/rocq-prover/rocq/issues/12454>`_, by Jason Gross).
- **Changed:**
  PrimFloat notations now match up with the rest of the standard library: :g:`m
  == n`, :g:`m < n`, and :g:`m <= n` have been replaced with :g:`m =? n`, :g:`m
  <? n`, and :g:`m <=? n`.  The old notations are still available as deprecated
  notations.  Additionally, there is now a
  ``Coq.Floats.PrimFloat.PrimFloatNotations`` module that users can import to
  get the ``PrimFloat`` notations without unqualifying the various primitives
  (`#12556 <https://github.com/rocq-prover/rocq/pull/12556>`_, fixes `#12454
  <https://github.com/rocq-prover/rocq/issues/12454>`_, by Jason Gross).
- **Changed:** the sort of cyclic numbers from Type to Set.
  For backward compatibility, a dynamic sort was defined in the 3 packages bignums, coqprime and color.
  See for example commit 6f62bda in bignums
  (`#12801 <https://github.com/rocq-prover/rocq/pull/12801>`_,
  by Vincent Semeria).
- **Changed:**
  ``Require Import Coq.nsatz.NsatzTactic`` now allows using :tacn:`nsatz`
  with `Z` and `Q` without having to supply instances or using ``Require Import Coq.nsatz.Nsatz``, which
  transitively requires unneeded files declaring axioms used in the reals
  (`#12861 <https://github.com/rocq-prover/rocq/pull/12861>`_,
  fixes `#12860 <https://github.com/rocq-prover/rocq/issues/12860>`_,
  by Jason Gross).
- **Deprecated:**
  ``prod_curry`` and ``prod_uncurry``, in favor of ``uncurry`` and ``curry``
  (`#12716 <https://github.com/rocq-prover/rocq/pull/12716>`_,
  by Yishuai Li).
- **Added:**
  New lemmas about ``repeat`` in ``List`` and ``Permutation``: ``repeat_app``, ``repeat_eq_app``, ``repeat_eq_cons``, ``repeat_eq_elt``, ``Forall_eq_repeat``, ``Permutation_repeat``
  (`#12799 <https://github.com/rocq-prover/rocq/pull/12799>`_,
  by Olivier Laurent).
- **Added:**
  Extend some list lemmas to both directions: `app_inj_tail_iff`, `app_inv_head_iff`, `app_inv_tail_iff`
  (`#12094 <https://github.com/rocq-prover/rocq/pull/12094>`_,
  fixes `#12093 <https://github.com/rocq-prover/rocq/issues/12093>`_,
  by Edward Wang).
- **Added:**
  ``Decidable`` instance for negation
  (`#12420 <https://github.com/rocq-prover/rocq/pull/12420>`_,
  by Yishuai Li).
- **Fixed:**
  `Coq.Program.Wf.Fix_F_inv` and `Coq.Program.Wf.Fix_eq` are now axiom-free, and no longer assuming proof irrelevance
  (`#13365 <https://github.com/rocq-prover/rocq/pull/13365>`_,
  by Li-yao Xia).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  When compiled with OCaml >= 4.10.0, Coq will use the new best-fit GC
  policy, which should provide some performance benefits. Coq's policy
  is optimized for speed, but could increase memory consumption in
  some cases. You are welcome to tune it using the ``OCAMLRUNPARAM``
  variable and report back on good settings so we can improve the defaults
  (`#13040 <https://github.com/rocq-prover/rocq/pull/13040>`_,
  fixes `#11277 <https://github.com/rocq-prover/rocq/issues/11277>`_,
  by Emilio Jesus Gallego Arias).
- **Changed:**
  Coq now uses the `zarith <https://github.com/ocaml/Zarith>`_
  library, based on GNU's gmp instead of ``num`` which is
  deprecated upstream. The custom ``bigint`` module is
  no longer provided
  (`#11742 <https://github.com/rocq-prover/rocq/pull/11742>`_,
  `#13007 <https://github.com/rocq-prover/rocq/pull/13007>`_,
  by Emilio Jesus Gallego Arias and Vicent Laporte, with help from
  Frédéric Besson).

Changes in 8.13.0
~~~~~~~~~~~~~~~~~

Commands and options
^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  The warning `custom-entry-overriden` has been renamed to `custom-entry-overridden` (with two d's)
  (`#13556 <https://github.com/rocq-prover/rocq/pull/13556>`_,
  by Simon Friis Vindum).

Changes in 8.13.1
~~~~~~~~~~~~~~~~~

Kernel
^^^^^^

- **Fixed:**
  Fix arities of VM opcodes for some floating-point operations
  that could cause memory corruption
  (`#13867 <https://github.com/rocq-prover/rocq/pull/13867>`_,
  by Guillaume Melquiond).

CoqIDE
^^^^^^

- **Added:**
  Option ``-v`` and ``--version`` to CoqIDE
  (`#13870 <https://github.com/rocq-prover/rocq/pull/13870>`_,
  by Guillaume Melquiond).

Changes in 8.13.2
~~~~~~~~~~~~~~~~~

Kernel
^^^^^^

- **Fixed:**
  Crash when using :tacn:`vm_compute` on an irreducible ``PArray.set``
  (`#14005 <https://github.com/rocq-prover/rocq/pull/14005>`_,
  fixes `#13998 <https://github.com/rocq-prover/rocq/issues/13998>`_,
  by Guillaume Melquiond).
- **Fixed:**
  Never store persistent arrays as VM / native structured values.
  This could be used to make vo marshalling crash, and probably
  breaking some other invariants of the kernel
  (`#14007 <https://github.com/rocq-prover/rocq/pull/14007>`_,
  fixes `#14006 <https://github.com/rocq-prover/rocq/issues/14006>`_,
  by Pierre-Marie Pédrot).

Tactic language
^^^^^^^^^^^^^^^^

- **Fixed:**
  Ltac2 ``Array.init`` no longer incurs exponential overhead when used
  recursively (`#14012 <https://github.com/rocq-prover/rocq/pull/14012>`_, fixes `#14011
  <https://github.com/rocq-prover/rocq/issues/14011>`_, by Jason Gross).


Version 8.12
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.12 integrates many usability improvements,
in particular with respect to notations, scopes and implicit arguments,
along with many bug fixes and major improvements to the reference manual.
The main changes include:

- New :ref:`binder notation<812Implicit>` for non-maximal implicit arguments using :g:`[ ]`
  allowing to set and see the implicit status of arguments immediately.
- New notation :g:`Inductive I A | x : s := ...` to distinguish the
  :ref:`uniform<812Uniform>` from the non-uniform parameters in inductive definitions.
- More robust and expressive treatment of :ref:`implicit inductive<812ImplicitInductive>`
  parameters in inductive declarations.
- Improvements in the treatment of implicit arguments and partially applied
  constants in :ref:`notations<812Notations>`, parsing of hexadecimal number notation and better
  handling of scopes and coercions for printing.
- A correct and efficient :ref:`coercion coherence<812Coercions>` checking algorithm, avoiding
  spurious or duplicate warnings.
- An improved :cmd:`Search` :ref:`command<812Search>` which accepts complex queries. Note that
  this takes precedence over the now deprecated :ref:`ssreflect search<812SSRSearch>`.
- Many additions and improvements of the :ref:`standard library<812Stdlib>`.
- Improvements to the :ref:`reference manual<812Refman>` include a more logical organization
  of chapters along with updated syntax descriptions that match Coq's grammar
  in most but not all chapters.

Additionally, the `omega` tactic is deprecated in this version of Coq,
and we recommend users to switch to :tacn:`lia` in new proof scripts.

See the `Changes in 8.12+beta1`_ section and following sections for the
detailed list of changes, including potentially breaking changes marked
with **Changed**.

Coq's documentation is available at https://coq.github.io/doc/v8.12/refman (reference
manual), and https://coq.github.io/doc/v8.12/stdlib (documentation of
the standard library). Developer documentation of the ML API is available
at https://coq.github.io/doc/v8.12/api.

Maxime Dénès, Emilio Jesús Gallego Arias, Gaëtan Gilbert, Michael
Soegtrop and Théo Zimmermann worked on maintaining and improving the
continuous integration system and package building infrastructure.

Erik Martin-Dorel has maintained the `Coq Docker images
<https://hub.docker.com/r/coqorg/coq>`_ that are used in many Coq
projects for continuous integration.

The opam repository for Coq packages has been maintained by
Guillaume Claret, Karl Palmskog, Matthieu Sozeau and Enrico Tassi with
contributions from many users. A list of packages is available at
https://coq.inria.fr/opam/www/.

Previously, most components of Coq had a single principal maintainer.
This was changed in 8.12 (`#11295
<https://github.com/rocq-prover/rocq/pull/11295>`_) so that every component now has
a team of maintainers, who are in charge of reviewing and
merging incoming pull requests.  This gave us a chance to
significantly expand the pool of maintainters and provide faster
feedback to contributors.  Special thanks to all our maintainers!

Our current 31 maintainers are Yves Bertot, Frédéric Besson, Tej
Chajed, Cyril Cohen, Pierre Corbineau, Pierre Courtieu, Maxime Dénès,
Jim Fehrle, Julien Forest, Emilio Jesús Gallego Arias, Gaëtan Gilbert,
Georges Gonthier, Benjamin Grégoire, Jason Gross, Hugo Herbelin,
Vincent Laporte, Assia Mahboubi, Kenji Maillard, Guillaume Melquiond,
Pierre-Marie Pédrot, Clément Pit-Claudel, Kazuhiko Sakaguchi, Vincent
Semeria, Michael Soegtrop, Arnaud Spiwack, Matthieu Sozeau, Enrico
Tassi, Laurent Théry, Anton Trunov, Li-yao Xia, Théo Zimmermann

The 59 contributors to this version are Abhishek Anand, Yves Bertot, Frédéric
Besson, Lasse Blaauwbroek, Simon Boulier, Quentin Carbonneaux, Tej Chajed,
Arthur Charguéraud, Cyril Cohen, Pierre Courtieu, Matthew Dempsky, Maxime Dénès,
Andres Erbsen, Erika (@rrika), Nikita Eshkeev, Jim Fehrle, @formalize, Emilio
Jesús Gallego Arias, Paolo G. Giarrusso, Gaëtan Gilbert, Jason Gross, Samuel
Gruetter, Attila Gáspár, Hugo Herbelin, Jan-Oliver Kaiser, Robbert Krebbers,
Vincent Laporte, Olivier Laurent, Xavier Leroy, Thomas Letan, Yishuai Li,
Kenji Maillard, Erik Martin-Dorel, Guillaume Melquiond, Ike Mulder,
Guillaume Munch-Maccagnoni, Antonio Nikishaev, Karl Palmskog, Pierre-Marie
Pédrot, Clément Pit-Claudel, Ramkumar Ramachandra, Lars Rasmusson, Daniel
de Rauglaudre, Talia Ringer, Pierre Roux, Kazuhiko Sakaguchi, Vincent Semeria,
@scinart, Kartik Singhal, Michael Soegtrop, Matthieu Sozeau, Enrico Tassi,
Laurent Théry, Ralf Treinen, Anton Trunov, Bernhard M. Wiedemann, Li-yao Xia,
Nickolai Zeldovich and Théo Zimmermann.

Many power users helped to improve the design of this new version via
the GitHub issue and pull request system, the Coq development mailing list
coqdev@inria.fr, the coq-club@inria.fr mailing list, the `Discourse forum
<https://coq.discourse.group/>`_ and the new `Coq Zulip chat <https://coq.zulipchat.com>`_
(thanks to Cyril Cohen for organizing the move from Gitter).

Version 8.12's development spanned 6 months from the release of
Coq 8.11.0. Emilio Jesus Gallego Arias and Théo Zimmermann are
the release managers of Coq 8.12. This release is the result of
~500 PRs merged, closing ~100 issues.

| Nantes, June 2020,
| Matthieu Sozeau for the Coq development team
|

Changes in 8.12+beta1
~~~~~~~~~~~~~~~~~~~~~

.. contents::
   :local:

Kernel
^^^^^^

- **Fixed:**
  Specification of :n:`PrimFloat.leb` which made
  :n:`(x <= y)%float` true for any non-NaN :n:`x` and :n:`y`
  (`#12484 <https://github.com/rocq-prover/rocq/pull/12484>`_,
  fixes `#12483 <https://github.com/rocq-prover/rocq/issues/12483>`_,
  by Pierre Roux).

Specification language, type inference
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  The deprecation warning raised since Coq 8.10 when a trailing
  implicit is declared to be non-maximally inserted (with the command
  :cmd:`Arguments`) has been turned into an error
  (`#11368 <https://github.com/rocq-prover/rocq/pull/11368>`_,
  by SimonBoulier).
- **Changed:**
  Typeclass resolution, accessible through :tacn:`typeclasses eauto`,
  now suspends constraints according to their modes
  instead of failing. If a typeclass constraint does not match
  any of the declared modes for its class, the constraint is postponed, and
  the proof search continues on other goals. Proof search does a fixed point
  computation to try to solve them at a later stage of resolution. It does
  not fail if there remain only stuck constraints at the end of resolution.
  This makes typeclasses with declared modes more robust with respect to the
  order of resolution
  (`#10858 <https://github.com/rocq-prover/rocq/pull/10858>`_,
  fixes `#9058 <https://github.com/rocq-prover/rocq/issues/9058>`_, by Matthieu Sozeau).
- **Added:**
  Warn when manual implicit arguments are used in unexpected positions
  of a term (e.g. in `Check id (forall {x}, x)`) or when an implicit
  argument name is shadowed (e.g. in `Check fun f : forall {x:nat}
  {x}, nat => f`)
  (`#10202 <https://github.com/rocq-prover/rocq/pull/10202>`_,
  by Hugo Herbelin).
- **Added:**
  :cmd:`Arguments` now supports setting
  implicit an anonymous argument, as e.g. in `Arguments id {A} {_}`
  (`#11098 <https://github.com/rocq-prover/rocq/pull/11098>`_,
  by Hugo Herbelin, fixes `#4696
  <https://github.com/rocq-prover/rocq/pull/4696>`_, `#5173
  <https://github.com/rocq-prover/rocq/pull/5173>`_, `#9098
  <https://github.com/rocq-prover/rocq/pull/9098>`_).

  .. _812Implicit:

- **Added:**
  Syntax for non-maximal implicit arguments in definitions and terms using
  square brackets. The syntax is ``[x : A]``, ``[x]``, ```[A]``
  to be consistent with the command :cmd:`Arguments`
  (`#11235 <https://github.com/rocq-prover/rocq/pull/11235>`_,
  by Simon Boulier).
- **Added:**
  :cmd:`Implicit Types` are now taken into account for printing. To inhibit it,
  unset the :flag:`Printing Use Implicit Types` flag
  (`#11261 <https://github.com/rocq-prover/rocq/pull/11261>`_,
  by Hugo Herbelin, granting `#10366 <https://github.com/rocq-prover/rocq/pull/10366>`_).

  .. _812Uniform:

- **Added:**
  New syntax :cmd:`Inductive` :n:`@ident {* @binder } | {* @binder } := ...`
  to specify which parameters of an inductive type are uniform.
  See :ref:`parametrized-inductive-types`
  (`#11600 <https://github.com/rocq-prover/rocq/pull/11600>`_, by Gaëtan Gilbert).
- **Added:**
  Warn when using :cmd:`Fixpoint` or :cmd:`CoFixpoint` for
  definitions which are not recursive
  (`#12121 <https://github.com/rocq-prover/rocq/pull/12121>`_,
  by Hugo Herbelin).

  .. _812ImplicitInductive:

- **Fixed:**
  More robust and expressive treatment of implicit inductive
  parameters in inductive declarations (`#11579
  <https://github.com/rocq-prover/rocq/pull/11579>`_, by Maxime Dénès, Gaëtan
  Gilbert and Jasper Hugunin; fixes `#7253
  <https://github.com/rocq-prover/rocq/pull/7253>`_ and `#11585
  <https://github.com/rocq-prover/rocq/pull/11585>`_).
- **Fixed:**
  Anomaly which could be raised when printing binders with implicit types
  (`#12323 <https://github.com/rocq-prover/rocq/pull/12323>`_,
  by Hugo Herbelin; fixes `#12322 <https://github.com/rocq-prover/rocq/pull/12322>`_).
- **Fixed:**
  Case of an anomaly in trying to infer the return clause of an ill-typed :g:`match`
  (`#12422 <https://github.com/rocq-prover/rocq/pull/12422>`_,
  fixes `#12418 <https://github.com/rocq-prover/rocq/pull/12418>`_,
  by Hugo Herbelin).

  .. _812Notations:

Notations
^^^^^^^^^

- **Changed:** Notation scopes are now always inherited in
  notations binding a partially applied constant, including for
  notations binding an expression of the form :n:`@@qualid`. The latter was
  not the case beforehand
  (part of `#11120 <https://github.com/rocq-prover/rocq/pull/11120>`_).
- **Changed:**
  The printing algorithm now interleaves search for notations and removal of coercions
  (`#11172 <https://github.com/rocq-prover/rocq/pull/11172>`_, by Hugo Herbelin).
- **Changed:**
  Nicer printing for decimal constants in R and Q.
  1.5 is now printed 1.5 rather than 15e-1
  (`#11848 <https://github.com/rocq-prover/rocq/pull/11848>`_,
  by Pierre Roux).
- **Removed:** deprecated ``compat`` modifier of :cmd:`Notation`
  and :cmd:`Infix` commands. Use the :attr:`deprecated` attribute instead
  (`#11113 <https://github.com/rocq-prover/rocq/pull/11113>`_,
  by Théo Zimmermann, with help from Jason Gross).
- **Deprecated:**
  Numeral Notation on ``Decimal.uint``, ``Decimal.int`` and
  ``Decimal.decimal`` are replaced respectively by numeral notations
  on ``Numeral.uint``, ``Numeral.int`` and ``Numeral.numeral``
  (`#11948 <https://github.com/rocq-prover/rocq/pull/11948>`_,
  by Pierre Roux).
- **Added:**
  Notations declared with the ``where`` clause in the declaration of
  inductive types, coinductive types, record fields, fixpoints and
  cofixpoints now support the ``only parsing`` modifier
  (`#11602 <https://github.com/rocq-prover/rocq/pull/11602>`_,
  by Hugo Herbelin).
- **Added:**
  :flag:`Printing Parentheses` flag to print parentheses even when
  implied by associativity or precedence
  (`#11650 <https://github.com/rocq-prover/rocq/pull/11650>`_,
  by Hugo Herbelin and Abhishek Anand).
- **Added:**
  Numeral notations now parse hexadecimal constants such as ``0x2a``
  or ``0xb.2ap-2``. Parsers added for :g:`nat`, :g:`positive`, :g:`Z`,
  :g:`N`, :g:`Q`, :g:`R`, primitive integers and primitive floats
  (`#11948 <https://github.com/rocq-prover/rocq/pull/11948>`_,
  by Pierre Roux).
- **Added:**
  Abbreviations support arguments occurring both in term and binder position
  (`#8808 <https://github.com/rocq-prover/rocq/pull/8808>`_,
  by Hugo Herbelin).
- **Fixed:**
  Different interpretations in different scopes of the same notation
  string can now be associated with different printing formats (`#10832
  <https://github.com/rocq-prover/rocq/pull/10832>`_, by Hugo Herbelin,
  fixes `#6092 <https://github.com/rocq-prover/rocq/issues/6092>`_
  and `#7766 <https://github.com/rocq-prover/rocq/issues/7766>`_).
- **Fixed:** Parsing and printing consistently handle inheritance of implicit
  arguments in notations. With the exception of notations of
  the form :n:`Notation @string := @@qualid` and :n:`Notation @ident := @@qualid` which
  inhibit implicit arguments, all notations binding a partially
  applied constant, as e.g. in :n:`Notation @string := (@qualid {+ @arg })`,
  or :n:`Notation @string := (@@qualid {+ @arg })`, or
  :n:`Notation @ident := (@qualid {+ @arg })`, or :n:`Notation @ident
  := (@@qualid {+ @arg })`, inherit the remaining implicit arguments
  (`#11120 <https://github.com/rocq-prover/rocq/pull/11120>`_, by Hugo
  Herbelin, fixing `#4690 <https://github.com/rocq-prover/rocq/pull/4690>`_ and
  `#11091 <https://github.com/rocq-prover/rocq/pull/11091>`_).
- **Fixed:**
  Notations in ``only printing`` mode do not uselessly reserve parsing keywords
  (`#11590 <https://github.com/rocq-prover/rocq/pull/11590>`_,
  by Hugo Herbelin, fixes `#9741 <https://github.com/rocq-prover/rocq/pull/9741>`_).
- **Fixed:**
  Numeral Notations now play better with multiple scopes for the same
  inductive type. Previously, when multiple numeral notations were defined
  for the same inductive, only the last one was considered for
  printing. Now, among the notations that are usable for printing and either
  have a scope delimiter or are open, the selection is made according
  to the order of open scopes, or according to the last defined
  notation if no appropriate scope is open
  (`#12163 <https://github.com/rocq-prover/rocq/pull/12163>`_,
  fixes `#12159 <https://github.com/rocq-prover/rocq/pull/12159>`_,
  by Pierre Roux, review by Hugo Herbelin and Jason Gross).

Tactics
^^^^^^^

- **Changed:**
  The :tacn:`rapply` tactic in :g:`Coq.Program.Tactics` now handles
  arbitrary numbers of underscores and takes in a :g:`uconstr`.  In
  rare cases where users were relying on :tacn:`rapply` inserting
  exactly 15 underscores and no more, due to the lemma having a
  completely unspecified codomain (and thus allowing for any number of
  underscores), the tactic will now loop instead (`#10760
  <https://github.com/rocq-prover/rocq/pull/10760>`_, by Jason Gross).
- **Changed:**
  The :g:`auto with zarith` tactic and variations (including
  :tacn:`intuition`) may now call :tacn:`lia` instead of `omega`
  (when the `Omega` module is loaded); more goals may be automatically
  solved, fewer section variables will be captured spuriously
  (`#11018 <https://github.com/rocq-prover/rocq/pull/11018>`_,
  by Vincent Laporte).
- **Changed:**
  The new :flag:`NativeCompute Timing` flag causes calls to
  :tacn:`native_compute` (as well as kernel calls to the native
  compiler) to emit separate timing information about conversion to
  native code, compilation, execution, and reification.  It replaces
  the timing information previously emitted when the `-debug`
  command-line flag was set, and allows more fine-grained timing of
  the native compiler
  (`#11025 <https://github.com/rocq-prover/rocq/pull/11025>`_, by Jason Gross).
  Additionally, the timing information now uses real time rather than
  user time (fixes `#11962
  <https://github.com/rocq-prover/rocq/issues/11962>`_, `#11963
  <https://github.com/rocq-prover/rocq/pull/11963>`_, by Jason Gross)
- **Changed:**
  Improve the efficiency of `PreOmega.elim_let` using an iterator implemented in OCaml
  (`#11370 <https://github.com/rocq-prover/rocq/pull/11370>`_, by Frédéric Besson).
- **Changed:**
  Improve the efficiency of :tacn:`zify` by rewriting the remaining Ltac code in OCaml
  (`#11429 <https://github.com/rocq-prover/rocq/pull/11429>`_, by Frédéric Besson).
- **Changed:**
  Backtrace information for tactics has been improved
  (`#11755 <https://github.com/rocq-prover/rocq/pull/11755>`_,
  by Emilio Jesus Gallego Arias).
- **Changed:**
  The default tactic used by :g:`firstorder` is
  :g:`auto with core` instead of :g:`auto with *`;
  see :ref:`decisionprocedures` for details;
  old behavior can be reset by using the `-compat 8.12` command-line flag;
  to ease the migration of legacy code, the default solver can be set to `debug auto with *`
  with `Set Firstorder Solver debug auto with *`
  (`#11760 <https://github.com/rocq-prover/rocq/pull/11760>`_,
  by Vincent Laporte).
- **Changed:**
  :tacn:`autounfold` no longer fails when the :cmd:`Opaque`
  command is used on constants in the hint databases
  (`#11883 <https://github.com/rocq-prover/rocq/pull/11883>`_,
  by Attila Gáspár).
- **Changed:**
  Tactics with qualified name of the form ``Coq.Init.Notations`` are
  now qualified with prefix ``Coq.Init.Ltac``; users of the ``-noinit``
  option should now import ``Coq.Init.Ltac`` if they want to use Ltac
  (`#12023 <https://github.com/rocq-prover/rocq/pull/12023>`_,
  by Hugo Herbelin; minor source of incompatibilities).
- **Changed:**
  Tactic :tacn:`subst` :n:`@ident` now fails over a section variable which is
  indirectly dependent in the goal; the incompatibility can generally
  be fixed by first clearing the hypotheses causing an indirect
  dependency, as reported by the error message, or by using :tacn:`rewrite` :n:`... in *`
  instead; similarly, :tacn:`subst` has no more effect on such variables
  (`#12146 <https://github.com/rocq-prover/rocq/pull/12146>`_,
  by Hugo Herbelin; fixes `#10812 <https://github.com/rocq-prover/rocq/pull/10812>`_
  and `#12139 <https://github.com/rocq-prover/rocq/pull/12139>`_).
- **Changed:**
  The check that :tacn:`unfold` arguments were indeed unfoldable has been moved to runtime
  (`#12256 <https://github.com/rocq-prover/rocq/pull/12256>`_,
  by Pierre-Marie Pédrot; fixes
  `#5764 <https://github.com/rocq-prover/rocq/issues/5764>`_,
  `#5159 <https://github.com/rocq-prover/rocq/issues/5159>`_,
  `#4925 <https://github.com/rocq-prover/rocq/issues/4925>`_
  and `#11727 <https://github.com/rocq-prover/rocq/issues/11727>`_).
- **Changed**
  When the tactic :tacn:`functional induction` :n:`c__1 c__2 ... c__n` is used
  with no parenthesis around :n:`c__1 c__2 ... c__n`, :n:`c__1 c__2 ... c__n` is now
  read as one single applicative term. In particular implicit
  arguments should be omitted. Rare source of incompatibility
  (`#12326 <https://github.com/rocq-prover/rocq/pull/12326>`_,
  by Pierre Courtieu).
- **Changed:**
  When using :tacn:`exists` or :tacn:`eexists` with multiple arguments,
  the evaluation of arguments and applications of constructors are now interleaved.
  This improves unification in some cases
  (`#12366 <https://github.com/rocq-prover/rocq/pull/12366>`_,
  fixes `#12365 <https://github.com/rocq-prover/rocq/issues/12365>`_,
  by Attila Gáspár).
- **Removed:**
  Undocumented ``omega with``.  Using :tacn:`lia` is the recommended
  replacement, although the old semantics of ``omega with *`` can also
  be recovered with ``zify; omega``
  (`#11288 <https://github.com/rocq-prover/rocq/pull/11288>`_,
  by Emilio Jesus Gallego Arias).
- **Removed:**
  Deprecated syntax `_eqn` for :tacn:`destruct` and :tacn:`remember`.
  Use `eqn:` syntax instead
  (`#11877 <https://github.com/rocq-prover/rocq/pull/11877>`_,
  by Hugo Herbelin).
- **Removed:**
  `at` clauses can no longer be used with :tacn:`autounfold`.
  Since they had no effect, it is safe to remove them
  (`#11883 <https://github.com/rocq-prover/rocq/pull/11883>`_,
  by Attila Gáspár).
- **Deprecated:**
  The `omega` tactic is deprecated;
  use :tacn:`lia` from the :ref:`Micromega <micromega>` plugin instead
  (`#11976 <https://github.com/rocq-prover/rocq/pull/11976>`_,
  by Vincent Laporte).
- **Added:**
  The :tacn:`zify` tactic is now aware of `Pos.pred_double`, `Pos.pred_N`,
  `Pos.of_nat`, `Pos.add_carry`, `Pos.pow`, `Pos.square`, `Z.pow`, `Z.double`,
  `Z.pred_double`, `Z.succ_double`, `Z.square`, `Z.div2`, and `Z.quot2`.
  Injections for internal definitions in module `ZifyBool` (`isZero` and `isLeZero`)
  are also added to help users to declare new :tacn:`zify` class instances using
  Micromega tactics
  (`#10998 <https://github.com/rocq-prover/rocq/pull/10998>`_, by Kazuhiko Sakaguchi).
- **Added:**
  :cmd:`Show Lia Profile` prints some statistics about :tacn:`lia` calls
  (`#11474 <https://github.com/rocq-prover/rocq/pull/11474>`_,  by Frédéric Besson).
- **Added:**
  Syntax :tacn:`pose proof` :n:`(@ident:=@term)` as an alternative to
  :tacn:`pose proof` :n:`@term as @ident`, following the model of
  :tacn:`pose` :n:`(@ident:=@term)`
  (`#11522 <https://github.com/rocq-prover/rocq/pull/11522>`_,
  by Hugo Herbelin).
- **Added:**
  New tactical :tacn:`with_strategy` which behaves like the command
  :cmd:`Strategy`, with effects local to the given tactic
  (`#12129 <https://github.com/rocq-prover/rocq/pull/12129>`_, by Jason Gross).
- **Added:**
  The :tacn:`zify` tactic is now aware of `Nat.le`, `Nat.lt` and `Nat.eq`
  (`#12213 <https://github.com/rocq-prover/rocq/pull/12213>`_, by Frédéric Besson;
  fixes `#12210 <https://github.com/rocq-prover/rocq/issues/12210>`_).
- **Fixed:**
  :tacn:`zify` now handles :g:`Z.pow_pos` by default.
  In Coq 8.11, this was the case only when loading module
  :g:`ZifyPow` because this triggered a regression of :tacn:`lia`.
  The regression is now fixed, and the module kept only for compatibility
  (`#11362 <https://github.com/rocq-prover/rocq/pull/11362>`_,
  fixes `#11191 <https://github.com/rocq-prover/rocq/issues/11191>`_,
  by Frédéric Besson).
- **Fixed:**
  Efficiency regression of :tacn:`lia`
  (`#11474 <https://github.com/rocq-prover/rocq/pull/11474>`_,
  fixes `#11436 <https://github.com/rocq-prover/rocq/issues/11436>`_,
  by Frédéric Besson).
- **Fixed:**
  The behavior of :tacn:`autounfold` no longer depends on the names of terms and modules
  (`#11883 <https://github.com/rocq-prover/rocq/pull/11883>`_,
  fixes `#7812 <https://github.com/rocq-prover/rocq/issues/7812>`_,
  by Attila Gáspár).
- **Fixed:**
  Wrong type error in tactic :tacn:`functional induction`
  (`#12326 <https://github.com/rocq-prover/rocq/pull/12326>`_,
  by Pierre Courtieu,
  fixes `#11761 <https://github.com/rocq-prover/rocq/issues/11761>`_,
  reported by Lasse Blaauwbroek).

Tactic language
^^^^^^^^^^^^^^^

- **Changed:**
  The "reference" tactic generic argument now accepts arbitrary
  variables of the goal context
  (`#12254 <https://github.com/rocq-prover/rocq/pull/12254>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  An array library for Ltac2 (as compatible as possible with OCaml standard library)
  (`#10343 <https://github.com/rocq-prover/rocq/pull/10343>`_,
  by Michael Soegtrop).
- **Added:**
  The Ltac2 rebinding command :cmd:`Ltac2 Set` has been extended with the ability to
  give a name to the old value so as to be able to reuse it inside the
  new one
  (`#11503 <https://github.com/rocq-prover/rocq/pull/11503>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  Ltac2 notations for :tacn:`enough` and :tacn:`eenough`
  (`#11740 <https://github.com/rocq-prover/rocq/pull/11740>`_,
  by Michael Soegtrop).
- **Added:**
  New Ltac2 function ``Fresh.Free.of_goal`` to return the list of
  names of declarations of the current goal; new Ltac2 function
  ``Fresh.in_goal`` to return a variable fresh in the current goal
  (`#11882 <https://github.com/rocq-prover/rocq/pull/11882>`_,
  by Hugo Herbelin).
- **Added:**
  Ltac2 notations for reductions in terms: :n:`eval @red_expr in @term`
  (`#11981 <https://github.com/rocq-prover/rocq/pull/11981>`_,
  by Michael Soegtrop).
- **Fixed:**
  The :flag:`Ltac Profiling` machinery now correctly handles
  backtracking into multi-success tactics.  The call-counts of some
  tactics are unfortunately inflated by 1, as some tactics are
  implicitly implemented as :g:`tac + fail`, which has two
  entry-points rather than one (fixes `#12196
  <https://github.com/rocq-prover/rocq/issues/12196>`_, `#12197
  <https://github.com/rocq-prover/rocq/pull/12197>`_, by Jason Gross).

SSReflect
^^^^^^^^^

  .. _812SSRSearch:

- **Changed:** The `Search (ssreflect)` command that used to be
  available when loading the `ssreflect` plugin has been moved to a
  separate plugin that needs to be loaded separately: `ssrsearch`
  (part of `#8855 <https://github.com/rocq-prover/rocq/pull/8855>`_, fixes
  `#12253 <https://github.com/rocq-prover/rocq/issues/12253>`_, by Théo
  Zimmermann).
- **Deprecated:** `Search (ssreflect)` (available through
  `Require ssrsearch.`) in favor of the `headconcl:` clause of
  :cmd:`Search` (part of `#8855
  <https://github.com/rocq-prover/rocq/pull/8855>`_, by Théo Zimmermann).

Flags, options and attributes
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:** :term:`Legacy attributes <attribute>` can now be passed
  in any order (`#11665 <https://github.com/rocq-prover/rocq/pull/11665>`_, by
  Théo Zimmermann).
- **Removed:** ``Typeclasses Axioms Are Instances`` flag, deprecated since 8.10.
  Use :cmd:`Declare Instance` for axioms which should be instances
  (`#11185 <https://github.com/rocq-prover/rocq/pull/11185>`_, by Théo Zimmermann).
- **Removed:** Deprecated unsound compatibility ``Template Check``
  flag that was introduced in 8.10 to help users gradually move their
  template polymorphic inductive type definitions outside sections
  (`#11546 <https://github.com/rocq-prover/rocq/pull/11546>`_, by Pierre-Marie
  Pédrot).
- **Removed:**
  Deprecated ``Shrink Obligations`` flag
  (`#11828 <https://github.com/rocq-prover/rocq/pull/11828>`_,
  by Emilio Jesus Gallego Arias).
- **Removed:**
  Unqualified ``polymorphic``, ``monomorphic``, ``template``,
  ``notemplate`` attributes (they were deprecated since Coq 8.10).
  Use :attr:`universes(polymorphic)`, ``universes(monomorphic)``,
  :attr:`universes(template)` and ``universes(notemplate)`` instead
  (`#11663 <https://github.com/rocq-prover/rocq/pull/11663>`_, by Théo Zimmermann).
- **Deprecated:**
  `Hide Obligations` flag
  (`#11828 <https://github.com/rocq-prover/rocq/pull/11828>`_,
  by Emilio Jesus Gallego Arias).
- **Added:** Handle the :attr:`local` attribute in :cmd:`Canonical
  Structure` declarations (`#11162
  <https://github.com/rocq-prover/rocq/pull/11162>`_, by Enrico Tassi).
- **Added:**
  New attributes supported when defining an inductive type
  :attr:`universes(cumulative)`, ``universes(noncumulative)`` and
  :attr:`private(matching)`, which correspond to legacy attributes
  ``Cumulative``, ``NonCumulative``, and the previously undocumented
  ``Private`` (`#11665 <https://github.com/rocq-prover/rocq/pull/11665>`_, by
  Théo Zimmermann).
- **Added:**
  The :ref:`Hint <creating_hints>` commands now accept the :attr:`export` locality as
  an attribute, allowing to make import-scoped hints
  (`#11812 <https://github.com/rocq-prover/rocq/pull/11812>`_,
  by Pierre-Marie Pédrot).
- **Added:**
  `Cumulative StrictProp` to control cumulativity of |SProp|
  (`#12034 <https://github.com/rocq-prover/rocq/pull/12034>`_, by Gaëtan
  Gilbert).

Commands
^^^^^^^^

  .. _812Coercions:

- **Changed:**
  The :cmd:`Coercion` command has been improved to check the coherence of the
  inheritance graph. It checks whether a circular inheritance path of `C >-> C`
  is convertible with the identity function or not, then report it as an
  ambiguous path if it is not.  The new mechanism does not report ambiguous
  paths that are redundant with others. For example, checking the ambiguity of
  `[f; g]` and `[f'; g]` is redundant with that of `[f]` and `[f']` thus will
  not be reported
  (`#11258 <https://github.com/rocq-prover/rocq/pull/11258>`_,
  by Kazuhiko Sakaguchi).
- **Changed:**
  Several commands (:cmd:`Search`, :cmd:`About`, ...) now print the
  implicit arguments in brackets when printing types (`#11795
  <https://github.com/rocq-prover/rocq/pull/11795>`_, by Simon Boulier).
- **Changed:** The warning when using :cmd:`Require` inside a section
  moved from the ``deprecated`` category to the ``fragile`` category,
  because there is no plan to remove the functionality at this time
  (`#11972 <https://github.com/rocq-prover/rocq/pull/11972>`_, by Gaëtan
  Gilbert).
- **Changed:**
  :cmd:`Redirect` now obeys the :opt:`Printing Width` and
  :opt:`Printing Depth` options
  (`#12358 <https://github.com/rocq-prover/rocq/pull/12358>`_,
  by Emilio Jesus Gallego Arias).
- **Removed:**
  Recursive OCaml loadpaths are not supported anymore; the command
  ``Add Rec ML Path`` has been removed; ``Add ML Path`` is now the
  preferred one. We have also dropped support for the non-qualified
  version of the ``Add LoadPath`` command, that is to say,
  the ``Add LoadPath dir`` version; now,
  you must always specify a prefix now using ``Add Loadpath dir as Prefix``
  (`#11618 <https://github.com/rocq-prover/rocq/pull/11618>`_,
  by Emilio Jesus Gallego Arias).
- **Removed:** undocumented ``Chapter`` command.  Use :cmd:`Section`
  instead (`#11746 <https://github.com/rocq-prover/rocq/pull/11746>`_, by Théo
  Zimmermann).
- **Removed:** ``SearchAbout`` command that was deprecated since 8.5.
  Use :cmd:`Search` instead
  (`#11944 <https://github.com/rocq-prover/rocq/pull/11944>`_, by Jim Fehrle).
- **Deprecated:**
  Declaration of arbitrary terms as hints. Global references are now
  preferred (`#7791 <https://github.com/rocq-prover/rocq/pull/7791>`_, by
  Pierre-Marie Pédrot).
- **Deprecated:** `SearchHead` in favor of the new `headconcl:`
  clause of :cmd:`Search` (part of `#8855
  <https://github.com/rocq-prover/rocq/pull/8855>`_, by Théo Zimmermann).
- **Added:**
  :cmd:`Print Canonical Projections` can now take constants as
  arguments and prints only the unification rules that involve or are
  synthesized from the given constants (`#10747
  <https://github.com/rocq-prover/rocq/pull/10747>`_, by Kazuhiko Sakaguchi).
- **Added:** A section variable introduced with :cmd:`Let` can be
  declared as a :cmd:`Canonical Structure` (`#11164
  <https://github.com/rocq-prover/rocq/pull/11164>`_, by Enrico Tassi).
- **Added:** Support for universe bindings and universe contrainsts in
  :cmd:`Let` definitions (`#11534
  <https://github.com/rocq-prover/rocq/pull/11534>`_, by Théo Zimmermann).

  .. _812Search:

- **Added:** Support for new clauses `hyp:`, `headhyp:`, `concl:`,
  `headconcl:`, `head:` and `is:` in :cmd:`Search`.  Support for
  complex search queries combining disjunctions, conjunctions and
  negations (`#8855 <https://github.com/rocq-prover/rocq/pull/8855>`_, by Hugo
  Herbelin, with ideas from Cyril Cohen and help from Théo
  Zimmermann).
- **Fixed:**
  A printing bug in the presence of elimination principles with local definitions
  (`#12295 <https://github.com/rocq-prover/rocq/pull/12295>`_,
  by Hugo Herbelin; fixes `#12233 <https://github.com/rocq-prover/rocq/pull/12233>`_).
- **Fixed:**
  Anomalies with :cmd:`Show Proof`
  (`#12296 <https://github.com/rocq-prover/rocq/pull/12296>`_,
  by Hugo Herbelin; fixes
  `#12234 <https://github.com/rocq-prover/rocq/pull/12234>`_).

Tools
^^^^^

- **Changed:**
  Internal options and behavior of ``coqdep``. ``coqdep``
  no longer works as a replacement for ``ocamldep``, thus ``.ml``
  files are not supported as input. Also, several deprecated options
  have been removed: ``-w``, ``-D``, ``-mldep``, ``-prefix``,
  ``-slash``, and ``-dumpbox``. Passing ``-boot`` to ``coqdep`` will
  not load any path by default now, ``-R/-Q`` should be used instead
  (`#11523 <https://github.com/rocq-prover/rocq/pull/11523>`_ and
  `#11589 <https://github.com/rocq-prover/rocq/pull/11589>`_,
  by Emilio Jesus Gallego Arias).
- **Changed:**
  The order in which the require flags `-ri`, `-re`, `-rfrom`, etc.
  and the option flags `-set`, `-unset` are given now matters.  In
  particular, it is now possible to interleave the loading of plugins
  and the setting of options by choosing the right order for these
  flags.  The load flags `-l` and `-lv` are still processed afterward
  for now (`#11851 <https://github.com/rocq-prover/rocq/pull/11851>`_ and
  `#12097 <https://github.com/rocq-prover/rocq/pull/12097>`_,
  by Lasse Blaauwbroek).
- **Changed:**
  The ``cleanall`` target of a makefile generated by ``coq_makefile``
  now erases ``.lia.cache`` and ``.nia.cache`` (`#12006
  <https://github.com/rocq-prover/rocq/pull/12006>`_, by Olivier Laurent).
- **Changed:**
  The output of ``make TIMED=1`` (and therefore the timing targets
  such as ``print-pretty-timed`` and ``print-pretty-timed-diff``) now
  displays the full name of the output file being built, rather than
  the stem of the rule (which was usually the filename without the
  extension, but in general could be anything for user-defined rules
  involving ``%``) (`#12126
  <https://github.com/rocq-prover/rocq/pull/12126>`_, by Jason Gross).
- **Changed:**
  When passing ``TIMED=1`` to ``make`` with either Coq's own makefile
  or a ``coq_makefile``\-made makefile, timing information is now
  printed for OCaml files as well (`#12211
  <https://github.com/rocq-prover/rocq/pull/12211>`_, by Jason Gross).
- **Changed:**
  The pretty-timed scripts and targets now print a newline at the end of their
  tables, rather than creating text with no trailing newline (`#12368
  <https://github.com/rocq-prover/rocq/pull/12368>`_, by Jason Gross).
- **Removed:**
  The `-load-ml-source` and `-load-ml-object` command-line options
  have been removed; their use was very limited, you can achieve the same adding
  additional object files in the linking step or using a plugin
  (`#11409 <https://github.com/rocq-prover/rocq/pull/11409>`_, by Emilio Jesus Gallego Arias).
- **Removed:**
  The confusingly-named `-require` command-line option, which was
  deprecated since 8.11.  Use the equivalent `-require-import` / `-ri`
  options instead
  (`#12005 <https://github.com/rocq-prover/rocq/pull/12005>`_,
  by Théo Zimmermann).
- **Deprecated:**
  ``-cumulative-sprop`` command-line flag in favor of the new
  `Cumulative StrictProp` flag (`#12034
  <https://github.com/rocq-prover/rocq/pull/12034>`_, by Gaëtan Gilbert).
- **Added:**
  A new documentation environment ``details`` to make certain portion
  of a Coq document foldable.  See :ref:`rocqdoc-hide-show`
  (`#10592 <https://github.com/rocq-prover/rocq/pull/10592>`_,
  by Thomas Letan).
- **Added:**
  The ``make-both-single-timing-files.py`` script now accepts a
  ``--fuzz=N`` parameter on the command line which determines how many
  characters two lines may be offset in the "before" and "after"
  timing logs while still being considered the same line.  When
  invoking this script via the ``print-pretty-single-time-diff``
  target in a ``Makefile`` made by ``coq_makefile``, you can set this
  argument by passing ``TIMING_FUZZ=N`` to ``make`` (`#11302
  <https://github.com/rocq-prover/rocq/pull/11302>`_, by Jason Gross).
- **Added:**
  The ``make-one-time-file.py`` and ``make-both-time-files.py``
  scripts now accept a ``--real`` parameter on the command line to
  print real times rather than user times in the tables.  The
  ``make-both-single-timing-files.py`` script accepts a ``--user``
  parameter to use user times.  When invoking these scripts via the
  ``print-pretty-timed`` or ``print-pretty-timed-diff`` or
  ``print-pretty-single-time-diff`` targets in a ``Makefile`` made by
  ``coq_makefile``, you can set this argument by passing
  ``TIMING_REAL=1`` (to pass ``--real``) or ``TIMING_REAL=0`` (to pass
  ``--user``) to ``make`` (`#11302
  <https://github.com/rocq-prover/rocq/pull/11302>`_, by Jason Gross).
- **Added:**
  Coq's build system now supports both ``TIMING_FUZZ``,
  ``TIMING_SORT_BY``, and ``TIMING_REAL`` just like a ``Makefile``
  made by ``coq_makefile`` (`#11302
  <https://github.com/rocq-prover/rocq/pull/11302>`_, by Jason Gross).
- **Added:**
  The ``make-one-time-file.py`` and ``make-both-time-files.py``
  scripts now include peak memory usage information in the tables (can
  be turned off by the ``--no-include-mem`` command-line parameter),
  and a ``--sort-by-mem`` parameter to sort the tables by memory
  rather than time.  When invoking these scripts via the
  ``print-pretty-timed`` or ``print-pretty-timed-diff`` targets in a
  ``Makefile`` made by ``coq_makefile``, you can set this argument by
  passing ``TIMING_INCLUDE_MEM=0`` (to pass ``--no-include-mem``) and
  ``TIMING_SORT_BY_MEM=1`` (to pass ``--sort-by-mem``) to ``make``
  (`#11606 <https://github.com/rocq-prover/rocq/pull/11606>`_, by Jason Gross).
- **Added:**
  Coq's build system now supports both ``TIMING_INCLUDE_MEM`` and
  ``TIMING_SORT_BY_MEM`` just like a ``Makefile`` made by
  ``coq_makefile`` (`#11606 <https://github.com/rocq-prover/rocq/pull/11606>`_,
  by Jason Gross).
- **Added:**
  New ``coqc`` / ``coqtop`` option ``-boot`` that will not bind the
  `Coq` library prefix by default
  (`#11617 <https://github.com/rocq-prover/rocq/pull/11617>`_,
  by Emilio Jesus Gallego Arias).
- **Added:**
  Definitions in coqdoc link to themselves, giving access in html to their own url
  (`#12026 <https://github.com/rocq-prover/rocq/pull/12026>`_,
  by Hugo Herbelin; granting `#7093 <https://github.com/rocq-prover/rocq/pull/7093>`_).
- **Added:**
  Hyperlinks on bound variables in coqdoc
  (`#12033 <https://github.com/rocq-prover/rocq/pull/12033>`_,
  by Hugo Herbelin; it incidentally fixes
  `#7697 <https://github.com/rocq-prover/rocq/pull/7697>`_).
- **Added:**
  Highlighting of link targets in coqdoc
  (`#12091 <https://github.com/rocq-prover/rocq/pull/12091>`_,
  by Hugo Herbelin).
- **Fixed:**
  The various timing targets for Coq's standard library now correctly
  display and label the "before" and "after" columns, rather than
  mixing them up (`#11302 <https://github.com/rocq-prover/rocq/pull/11302>`_
  fixes `#11301 <https://github.com/rocq-prover/rocq/issues/11301>`_, by Jason
  Gross).
- **Fixed:**
  The sorting order of the timing script ``make-both-time-files.py``
  and the target ``print-pretty-timed-diff`` is now deterministic even
  when the sorting order is ``absolute`` or ``diff``; previously the
  relative ordering of two files with identical times was
  non-deterministic (`#11606
  <https://github.com/rocq-prover/rocq/pull/11606>`_, by Jason Gross).
- **Fixed:**
  Fields of a record tuple now link in coqdoc to their definition
  (`#12027 <https://github.com/rocq-prover/rocq/pull/12027>`_, fixes
  `#3415 <https://github.com/rocq-prover/rocq/issues/3415>`_,
  by Hugo Herbelin).
- **Fixed:**
  ``coqdoc`` now reports the location of a mismatched opening ``[[``
  instead of throwing an uninformative exception
  (`#12037 <https://github.com/rocq-prover/rocq/pull/12037>`_,
  fixes `#9670 <https://github.com/rocq-prover/rocq/issues/9670>`_,
  by Xia Li-yao).
- **Fixed:**
  coqchk incorrectly reporting names from opaque modules as axioms
  (`#12076 <https://github.com/rocq-prover/rocq/pull/12076>`_,
  by Pierre Roux; fixes `#5030 <https://github.com/rocq-prover/rocq/issues/5030>`_).
- **Fixed:**
  coq_makefile-generated ``Makefile``\s ``pretty-timed-diff`` target
  no longer raises Python exceptions in the rare corner case where the
  log of times contains no files (`#12388
  <https://github.com/rocq-prover/rocq/pull/12388>`_, fixes `#12387
  <https://github.com/rocq-prover/rocq/pull/12387>`_, by Jason Gross).

CoqIDE
^^^^^^^^

- **Removed:**
  "Tactic" menu from CoqIDE which had been unmaintained for a number of years
  (`#11414 <https://github.com/rocq-prover/rocq/pull/11414>`_,
  by Pierre-Marie Pédrot).
- **Removed:**
  "Revert all buffers" command from CoqIDE which had been broken for a long time
  (`#11415 <https://github.com/rocq-prover/rocq/pull/11415>`_,
  by Pierre-Marie Pédrot).

  .. _812Stdlib:

Standard library
^^^^^^^^^^^^^^^^

- **Changed:**
  Notations :n:`[|@term|]` and :n:`[||@term||]` for morphisms from 63-bit
  integers to :g:`Z` and :g:`zn2z int` have been removed in favor of
  :n:`φ(@term)` and :n:`Φ(@term)` respectively. These notations were
  breaking Ltac parsing (`#11686 <https://github.com/rocq-prover/rocq/pull/11686>`_,
  by Maxime Dénès).
- **Changed:**
  The names of ``Sorted_sort`` and ``LocallySorted_sort`` in ``Coq.Sorting.MergeSort``
  have been swapped to appropriately reflect their meanings
  (`#11885 <https://github.com/rocq-prover/rocq/pull/11885>`_,
  by Lysxia).
- **Changed:**
  Notations :g:`<=?` and :g:`<?` from ``Coq.Structures.Orders`` and
  ``Coq.Sorting.Mergesort.NatOrder`` are now at level 70 rather than
  35, so as to be compatible with the notations defined everywhere
  else in the standard library.  This may require re-parenthesizing
  some expressions.  These notations were breaking the ability to
  import modules from the standard library that were otherwise
  compatible (fixes `#11890
  <https://github.com/rocq-prover/rocq/issues/11890>`_, `#11891
  <https://github.com/rocq-prover/rocq/pull/11891>`_, by Jason Gross).
- **Changed:**
  The level of :g:`≡` in ``Coq.Numbers.Cyclic.Int63.Int63`` is now 70,
  no associativity, in line with :g:`=`.  Note that this is a minor
  incompatibility with developments that declare their own :g:`≡`
  notation and import ``Int63`` (fixes `#11905
  <https://github.com/rocq-prover/rocq/issues/11905>`_, `#11909
  <https://github.com/rocq-prover/rocq/pull/11909>`_, by Jason Gross).
- **Changed:**
  No longer re-export ``ListNotations`` from ``Program`` (``Program.Syntax``)
  (`#11992 <https://github.com/rocq-prover/rocq/pull/11992>`_,
  by Antonio Nikishaev).
- **Changed:**
  It is now possible to import the :g:`nsatz` machinery without
  transitively depending on the axioms of the real numbers nor of
  classical logic by loading ``Coq.nsatz.NsatzTactic`` rather than
  ``Coq.nsatz.Nsatz``.  Note that some constants have changed kernel
  names, living in ``Coq.nsatz.NsatzTactic`` rather than
  ``Coq.nsatz.Nsatz``; this might cause minor incompatibilities that
  can be fixed by actually running :g:`Import Nsatz` rather than
  relying on absolute names (`#12073
  <https://github.com/rocq-prover/rocq/pull/12073>`_, by Jason Gross; fixes
  `#5445 <https://github.com/rocq-prover/rocq/issues/5445>`_).
- **Changed:**
  new lemma ``NoDup_incl_NoDup`` in ``List.v``
  to remove useless hypothesis `NoDup l'` in ``Sorting.Permutation.NoDup_Permutation_bis``
  (`#12120 <https://github.com/rocq-prover/rocq/pull/12119>`_,
  by Olivier Laurent).
- **Changed:**
  :cmd:`Fixpoints <Fixpoint>` of the standard library without a recursive call turned
  into ordinary :cmd:`Definitions <Definition>`
  (`#12121 <https://github.com/rocq-prover/rocq/pull/12121>`_,
  by Hugo Herbelin; fixes `#11903 <https://github.com/rocq-prover/rocq/pull/11903>`_).
- **Deprecated:**
  ``Bool.leb`` in favor of ``Bool.le``. The definition of ``Bool.le``
  is made local to avoid conflicts with ``Nat.le``. As a consequence,
  previous calls to ``leb`` based on importing ``Bool`` should now be
  qualified into ``Bool.le`` even if ``Bool`` is imported
  (`#12162 <https://github.com/rocq-prover/rocq/pull/12162>`_,
  by Olivier Laurent).
- **Added:** Theorem :g:`bezout_comm` for natural numbers
  (`#11127 <https://github.com/rocq-prover/rocq/pull/11127>`_, by Daniel de Rauglaudre).
- **Added**
  :g:`rew dependent` notations for the dependent version of
  :g:`rew` in :g:`Coq.Init.Logic.EqNotations` to improve the display
  and parsing of :g:`match` statements on :g:`Logic.eq` (`#11240
  <https://github.com/rocq-prover/rocq/pull/11240>`_, by Jason Gross).
- **Added:**
  Lemmas about lists:

  - properties of ``In``: ``in_elt``, ``in_elt_inv``
  - properties of ``nth``: ``app_nth2_plus``, ``nth_middle``, ``nth_ext``
  - properties of ``last``: ``last_last``, ``removelast_last``
  - properties of ``remove``: ``remove_cons``, ``remove_app``, ``notin_remove``, ``in_remove``, ``in_in_remove``, ``remove_remove_comm``, ``remove_remove_eq``, ``remove_length_le``, ``remove_length_lt``
  - properties of ``concat``: ``in_concat``, ``remove_concat``
  - properties of ``map`` and ``flat_map``: ``map_last``, ``map_eq_cons``, ``map_eq_app``, ``flat_map_app``, ``flat_map_ext``, ``nth_nth_nth_map``
  - properties of ``incl``: ``incl_nil_l``, ``incl_l_nil``, ``incl_cons_inv``, ``incl_app_app``, ``incl_app_inv``, ``remove_incl``, ``incl_map``, ``incl_filter``, ``incl_Forall_in_iff``
  - properties of ``NoDup`` and ``nodup``: ``NoDup_rev``, ``NoDup_filter``, ``nodup_incl``
  - properties of ``Exists`` and ``Forall``: ``Exists_nth``, ``Exists_app``, ``Exists_rev``, ``Exists_fold_right``, ``incl_Exists``, ``Forall_nth``, ``Forall_app``, ``Forall_elt``, ``Forall_rev``, ``Forall_fold_right``, ``incl_Forall``, ``map_ext_Forall``, ``Exists_or``, ``Exists_or_inv``, ``Forall_and``, ``Forall_and_inv``, ``exists_Forall``, ``Forall_image``, ``concat_nil_Forall``, ``in_flat_map_Exists``, ``notin_flat_map_Forall``
  - properties of ``repeat``: ``repeat_cons``, ``repeat_to_concat``
  - definitions and properties of ``list_sum`` and ``list_max``: ``list_sum_app``, ``list_max_app``, ``list_max_le``, ``list_max_lt``
  - misc: ``elt_eq_unit``, ``last_length``, ``rev_eq_app``, ``removelast_firstn_len``, ``cons_seq``, ``seq_S``

  (`#11249 <https://github.com/rocq-prover/rocq/pull/11249>`_, `#12237 <https://github.com/rocq-prover/rocq/pull/12237>`_,
  by Olivier Laurent).
- **Added:**
  Well-founded induction principles for `nat`: ``lt_wf_rect1``, ``lt_wf_rect``, ``gt_wf_rect``, ``lt_wf_double_rect``
  (`#11335 <https://github.com/rocq-prover/rocq/pull/11335>`_,
  by Olivier Laurent).
- **Added:**
  ``remove'`` and ``count_occ'`` over lists,
  alternatives to ``remove`` and ``count_occ`` based on ``filter``
  (`#11350 <https://github.com/rocq-prover/rocq/pull/11350>`_,
  by Yishuai Li).
- **Added:**
  Facts about ``N.iter`` and ``Pos.iter``:

    - ``N.iter_swap_gen``, ``N.iter_swap``, ``N.iter_succ``, ``N.iter_succ_r``, ``N.iter_add``, ``N.iter_ind``, ``N.iter_invariant``
    - ``Pos.iter_succ_r``, ``Pos.iter_ind``

  (`#11880 <https://github.com/rocq-prover/rocq/pull/11880>`_,
  by Lysxia).
- **Added:**
  Facts about ``Permutation``:

  - structure: ``Permutation_refl'``, ``Permutation_morph_transp``
  - compatibilities: ``Permutation_app_rot``, ``Permutation_app_swap_app``, ``Permutation_app_middle``, ``Permutation_middle2``, ``Permutation_elt``, ``Permutation_Forall``, ``Permutation_Exists``, ``Permutation_Forall2``, ``Permutation_flat_map``, ``Permutation_list_sum``, ``Permutation_list_max``
  - inversions: ``Permutation_app_inv_m``, ``Permutation_vs_elt_inv``, ``Permutation_vs_cons_inv``, ``Permutation_vs_cons_cons_inv``, ``Permutation_map_inv``, ``Permutation_image``, ``Permutation_elt_map_inv``
  - length-preserving definition by means of transpositions ``Permutation_transp`` with associated properties: ``Permutation_transp_sym``, ``Permutation_transp_equiv``, ``Permutation_transp_cons``, ``Permutation_Permutation_transp``, ``Permutation_ind_transp``

  (`#11946 <https://github.com/rocq-prover/rocq/pull/11946>`_,
  by Olivier Laurent).
- **Added:**
  Notations for sigma types: ``{ x & P & Q }``, ``{ ' pat & P }``, ``{ ' pat & P & Q }``
  (`#11957 <https://github.com/rocq-prover/rocq/pull/11957>`_,
  by Olivier Laurent).
- **Added:**
  Order relations ``lt`` and ``compare`` added in ``Bool.Bool``.
  Order properties for ``bool`` added in ``Bool.BoolOrder`` as well as two modules ``Bool_as_OT`` and ``Bool_as_DT`` in ``Structures.OrdersEx``
  (`#12008 <https://github.com/rocq-prover/rocq/pull/12008>`_,
  by Olivier Laurent).
- **Added:**
  Properties of some operations on vectors:

  - ``nth_order``: ``nth_order_hd``, ``nth_order_tl``, ``nth_order_ext``
  - ``replace``: ``nth_order_replace_eq``, ``nth_order_replace_neq``, ``replace_id``, ``replace_replace_eq``, ``replace_replace_neq``
  - ``map``: ``map_id``, ``map_map``, ``map_ext_in``, ``map_ext``
  - ``Forall`` and ``Forall2``: ``Forall_impl``, ``Forall_forall``, ``Forall_nth_order``, ``Forall2_nth_order``

  (`#12014 <https://github.com/rocq-prover/rocq/pull/12014>`_,
  by Olivier Laurent).
- **Added:**
  Lemmas
  :g:`orb_negb_l`,
  :g:`andb_negb_l`,
  :g:`implb_true_iff`,
  :g:`implb_false_iff`,
  :g:`implb_true_r`,
  :g:`implb_false_r`,
  :g:`implb_true_l`,
  :g:`implb_false_l`,
  :g:`implb_same`,
  :g:`implb_contrapositive`,
  :g:`implb_negb`,
  :g:`implb_curry`,
  :g:`implb_andb_distrib_r`,
  :g:`implb_orb_distrib_r`,
  :g:`implb_orb_distrib_l` in library :g:`Bool`
  (`#12018 <https://github.com/rocq-prover/rocq/pull/12018>`_,
  by Hugo Herbelin).
- **Added:**
  Definition and properties of cyclic permutations / circular shifts: ``CPermutation``
  (`#12031 <https://github.com/rocq-prover/rocq/pull/12031>`_,
  by Olivier Laurent).
- **Added:**
  ``Structures.OrderedTypeEx.Ascii_as_OT``
  (`#12044 <https://github.com/rocq-prover/rocq/pull/12044>`_,
  by formalize.eth (formalize@protonmail.com)).
- **Fixed:**
  Rewrote ``Structures.OrderedTypeEx.String_as_OT.compare``
  to avoid huge proof terms
  (`#12044 <https://github.com/rocq-prover/rocq/pull/12044>`_,
  by formalize.eth (formalize@protonmail.com);
  fixes `#12015 <https://github.com/rocq-prover/rocq/issues/12015>`_).

Reals library
^^^^^^^^^^^^^

- **Changed:**
  Cleanup of names in the Reals theory: replaced `tan_is_inj` with
  `tan_inj` and replaced `atan_right_inv` with `tan_atan` -
  compatibility notations are provided. Moved various auxiliary lemmas
  from `Ratan.v` to more appropriate places
  (`#9803 <https://github.com/rocq-prover/rocq/pull/9803>`_,
  by Laurent Théry and Michael Soegtrop).
- **Changed:**
  Replace `CRzero` and `CRone` by `CR_of_Q 0` and `CR_of_Q 1` in
  `ConstructiveReals`.  Use implicit arguments for
  `ConstructiveReals`. Move `ConstructiveReals` into new directory
  `Abstract`. Remove imports of implementations inside those
  `Abstract` files. Move implementation by means of Cauchy sequences
  in new directory `Cauchy`.  Split files `ConstructiveMinMax` and
  `ConstructivePower`.

  .. warning:: The constructive reals modules are marked as experimental.

  (`#11725 <https://github.com/rocq-prover/rocq/pull/11725>`_,
  `#12287 <https://github.com/rocq-prover/rocq/pull/12287>`_
  and `#12288 <https://github.com/rocq-prover/rocq/pull/12288>`_,
  by Vincent Semeria).
- **Removed:**
  Type `RList` has been removed.  All uses have been replaced by `list R`.
  Functions from `RList` named `In`, `Rlength`, `cons_Rlist`, `app_Rlist`
  have also been removed as they are essentially the same as `In`, `length`,
  `app`, and `map` from `List`, modulo the following changes:

    - `RList.In x (RList.cons a l)` used to be convertible to
      `(x = a) \\/ RList.In x l`,
      but `List.In x (a :: l)` is convertible to
      `(a = x) \\/ List.In l`.
      The equality is reversed.
    - `app_Rlist` and `List.map` take arguments in different order.

  (`#11404 <https://github.com/rocq-prover/rocq/pull/11404>`_,
  by Yves Bertot).
- **Added:**
  inverse trigonometric functions `asin` and `acos` with lemmas for
  the derivatives, bounds and special values of these functions; an
  extensive set of identities between trigonometric functions and
  their inverse functions; lemmas for the injectivity of sine and
  cosine; lemmas on the derivative of the inverse of decreasing
  functions and on the derivative of horizontally mirrored functions;
  various generic auxiliary lemmas and definitions for `Rsqr`, `sqrt`,
  `posreal` and others
  (`#9803 <https://github.com/rocq-prover/rocq/pull/9803>`_,
  by Laurent Théry and Michael Soegtrop).

Extraction
^^^^^^^^^^

- **Added:**
  Support for better extraction of strings in OCaml and Haskell:
  `ExtOcamlNativeString` provides bindings from the Coq `String` type to
  the OCaml `string` type, and string literals can be extracted to literals,
  both in OCaml and Haskell (`#10486
  <https://github.com/rocq-prover/rocq/pull/10486>`_, by Xavier Leroy, with help from
  Maxime Dénès, review by Hugo Herbelin).
- **Fixed:**
  In Haskell extraction with ``ExtrHaskellString``, equality comparisons on
  strings and characters are now guaranteed to be uniquely well-typed, even in
  very polymorphic contexts under ``unsafeCoerce``; this is achieved by adding
  type annotations to the extracted code, and by making ``ExtrHaskellString``
  export ``ExtrHaskellBasic`` (`#12263
  <https://github.com/rocq-prover/rocq/pull/12263>`_, by Jason Gross, fixes `#12257
  <https://github.com/rocq-prover/rocq/issues/12257>`_ and `#12258
  <https://github.com/rocq-prover/rocq/issues/12258>`_).

  .. _812Refman:

Reference manual
^^^^^^^^^^^^^^^^

- **Changed:**
  The reference manual has been restructured to get a more logical
  organization.  In the new version, there are fewer top-level
  chapters, and, in the HTML format, chapters are split into smaller
  pages.  This is still a work in progress and further restructuring
  is expected in the next versions of Coq
  (`CEP#43 <https://github.com/coq/ceps/pull/43>`_, implemented in
  `#11601 <https://github.com/rocq-prover/rocq/pull/11601>`_,
  `#11871 <https://github.com/rocq-prover/rocq/pull/11871>`_,
  `#11914 <https://github.com/rocq-prover/rocq/pull/11914>`_,
  `#12148 <https://github.com/rocq-prover/rocq/pull/12148>`_,
  `#12172 <https://github.com/rocq-prover/rocq/pull/12172>`_,
  `#12239 <https://github.com/rocq-prover/rocq/pull/12239>`_
  and `#12330 <https://github.com/rocq-prover/rocq/pull/12330>`_,
  effort inspired by Matthieu Sozeau, led by Théo Zimmermann, with
  help and reviews of Jim Fehrle, Clément Pit-Claudel and others).
- **Changed:**
  Most of the grammar is now presented using the notation mechanism
  that has been used to present commands and tactics since Coq 8.8 and
  which is documented in :ref:`syntax-conventions`
  (`#11183 <https://github.com/rocq-prover/rocq/pull/11183>`_,
  `#11314 <https://github.com/rocq-prover/rocq/pull/11314>`_,
  `#11423 <https://github.com/rocq-prover/rocq/pull/11423>`_,
  `#11705 <https://github.com/rocq-prover/rocq/pull/11705>`_,
  `#11718 <https://github.com/rocq-prover/rocq/pull/11718>`_,
  `#11720 <https://github.com/rocq-prover/rocq/pull/11720>`_,
  `#11961 <https://github.com/rocq-prover/rocq/pull/11961>`_
  and `#12103 <https://github.com/rocq-prover/rocq/pull/12103>`_, by Jim
  Fehrle, reviewed by Théo Zimmermann).
- **Added:**
  A glossary of terms and an index of attributes
  (`#11869 <https://github.com/rocq-prover/rocq/pull/11869>`_,
  `#12150 <https://github.com/rocq-prover/rocq/pull/12150>`_
  and `#12224 <https://github.com/rocq-prover/rocq/pull/12224>`_,
  by Jim Fehrle and Théo Zimmermann,
  reviewed by Clément Pit-Claudel)
- **Added:**
  A selector that allows switching between versions of the reference
  manual (`#12286 <https://github.com/rocq-prover/rocq/pull/12286>`_, by
  Clément Pit-Claudel).
- **Fixed:**
  Most of the documented syntax has been thoroughly updated to make it
  accurate and easily understood.  This was done using a
  semi-automated `doc_grammar` tool introduced for this purpose and
  through significant revisions to the text
  (`#9884 <https://github.com/rocq-prover/rocq/pull/9884>`_,
  `#10614 <https://github.com/rocq-prover/rocq/pull/10614>`_,
  `#11314 <https://github.com/rocq-prover/rocq/pull/11314>`_,
  `#11423 <https://github.com/rocq-prover/rocq/pull/11423>`_,
  `#11705 <https://github.com/rocq-prover/rocq/pull/11705>`_,
  `#11718 <https://github.com/rocq-prover/rocq/pull/11718>`_,
  `#11720 <https://github.com/rocq-prover/rocq/pull/11720>`_
  `#11797 <https://github.com/rocq-prover/rocq/pull/11797>`_,
  `#11913 <https://github.com/rocq-prover/rocq/pull/11913>`_,
  `#11958 <https://github.com/rocq-prover/rocq/pull/11958>`_,
  `#11960 <https://github.com/rocq-prover/rocq/pull/11960>`_,
  `#11961 <https://github.com/rocq-prover/rocq/pull/11961>`_
  and `#12103 <https://github.com/rocq-prover/rocq/pull/12103>`_, by Jim
  Fehrle, reviewed by Théo Zimmermann and Jason Gross).

Infrastructure and dependencies
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

- **Changed:**
  Minimal versions of dependencies for building the reference manual:
  now requires Sphinx >= 2.3.1 & < 3.0.0, sphinx_rtd_theme 0.4.3+ and
  sphinxcontrib-bibtex 0.4.2+.

  .. warning::

     The reference manual is known not to build properly with
     Sphinx 3.

  (`#12224 <https://github.com/rocq-prover/rocq/pull/12224>`_,
  by Jim Fehrle and Théo Zimmermann).
- **Removed:**
  Python 2 is no longer required in any part of the codebase
  (`#11245 <https://github.com/rocq-prover/rocq/pull/11245>`_,
  by Emilio Jesus Gallego Arias).

Changes in 8.12.0
~~~~~~~~~~~~~~~~~~~~~

**Notations**

- **Added:**
  Simultaneous definition of terms and notations now support custom entries
  (`#12523 <https://github.com/rocq-prover/rocq/pull/11523>`_,
  fixes `#11121 <https://github.com/rocq-prover/rocq/pull/11121>`_
  by Maxime Dénès).
- **Fixed:**
  Printing bug with notations for n-ary applications used with applied references
  (`#12683 <https://github.com/rocq-prover/rocq/pull/12683>`_,
  fixes `#12682 <https://github.com/rocq-prover/rocq/pull/12682>`_,
  by Hugo Herbelin).

**Tactics**

- **Fixed:**
  :tacn:`typeclasses eauto` (and discriminated hint bases) now correctly
  classify local variables as being unfoldable
  (`#12572 <https://github.com/rocq-prover/rocq/pull/12572>`_,
  fixes `#12571 <https://github.com/rocq-prover/rocq/issues/12571>`_,
  by Pierre-Marie Pédrot).

**Tactic language**

- **Fixed:**
  Excluding occurrences was causing an anomaly in tactics
  (e.g., :g:`pattern _ at L` where :g:`L` is :g:`-2`)
  (`#12541 <https://github.com/rocq-prover/rocq/pull/12541>`_,
  fixes `#12228 <https://github.com/rocq-prover/rocq/issues/12228>`_,
  by Pierre Roux).
- **Fixed:**
  Parsing of multi-parameters Ltac2 types
  (`#12594 <https://github.com/rocq-prover/rocq/pull/12594>`_,
  fixes `#12595 <https://github.com/rocq-prover/rocq/issues/12595>`_,
  by Pierre-Marie Pédrot).

**SSReflect**

- **Fixed:**
  Do not store the full environment inside ssr ast_closure_term
  (`#12708 <https://github.com/rocq-prover/rocq/pull/12708>`_,
  fixes `#12707 <https://github.com/rocq-prover/rocq/issues/12707>`_,
  by Pierre-Marie Pédrot).

**Commands and options**

- **Fixed:**
  Properly report the mismatched magic number of vo files
  (`#12677 <https://github.com/rocq-prover/rocq/pull/12677>`_,
  fixes `#12513 <https://github.com/rocq-prover/rocq/issues/12513>`_,
  by Pierre-Marie Pédrot).
- **Changed:**
  Arbitrary hints have been undeprecated, and their definition
  now triggers a standard warning instead
  (`#12678 <https://github.com/rocq-prover/rocq/pull/12678>`_,
  fixes `#11970 <https://github.com/rocq-prover/rocq/issues/11970>`_,
  by Pierre-Marie Pédrot).

**CoqIDE**

- **Fixed:** CoqIDE no longer exits when trying to open a file whose name is not a valid identifier
  (`#12562 <https://github.com/rocq-prover/rocq/pull/12562>`_,
  fixes `#10988 <https://github.com/rocq-prover/rocq/issues/10988>`_,
  by Vincent Laporte).

**Infrastructure and dependencies**

- **Fixed:**
  Running ``make`` in ``test-suite/`` twice (or more) in a row will no longer
  rebuild the ``modules/`` tests on subsequent runs, if they have not been
  modified in the meantime (`#12583 <https://github.com/rocq-prover/rocq/pull/12583>`_,
  fixes `#12582 <https://github.com/rocq-prover/rocq/issues/12582>`_, by Jason Gross).

Changes in 8.12.1
~~~~~~~~~~~~~~~~~~~~~

**Kernel**

- **Fixed:** Incompleteness of conversion checking on problems
  involving :ref:`eta-expansion-sect` and :ref:`cumulative universe
  polymorphic inductive types <cumulative>` (`#12738
  <https://github.com/rocq-prover/rocq/pull/12738>`_, fixes `#7015
  <https://github.com/rocq-prover/rocq/issues/7015>`_, by Gaëtan Gilbert).

- **Fixed:**
  Polymorphic side-effects inside monomorphic definitions were incorrectly
  handled as not inlined. This allowed deriving an inconsistency
  (`#13331 <https://github.com/rocq-prover/rocq/pull/13331>`_,
  fixes `#13330 <https://github.com/rocq-prover/rocq/issues/13330>`_,
  by Pierre-Marie Pédrot).

**Notations**

- **Fixed:**
  Undetected collision between a lonely notation and a notation in
  scope at printing time
  (`#12946 <https://github.com/rocq-prover/rocq/pull/12946>`_,
  fixes the first part of `#12908 <https://github.com/rocq-prover/rocq/issues/12908>`_,
  by Hugo Herbelin).
- **Fixed:**
  Printing of notations in custom entries with
  variables not mentioning an explicit level
  (`#13026 <https://github.com/rocq-prover/rocq/pull/13026>`_,
  fixes `#12775 <https://github.com/rocq-prover/rocq/issues/12775>`_
  and `#13018 <https://github.com/rocq-prover/rocq/issues/13018>`_,
  by Hugo Herbelin).

**Tactics**

- **Added:**
  :tacn:`replace` and :tacn:`inversion` support registration of a
  :g:`core.identity`\-like equality in :g:`Type`, such as HoTT's :g:`path`
  (`#12847 <https://github.com/rocq-prover/rocq/pull/12847>`_,
  partially fixes `#12846 <https://github.com/rocq-prover/rocq/issues/12846>`_,
  by Hugo Herbelin).
- **Fixed:**
  Anomaly with :tacn:`injection` involving artificial
  dependencies disappearing by reduction
  (`#12816 <https://github.com/rocq-prover/rocq/pull/12816>`_,
  fixes `#12787 <https://github.com/rocq-prover/rocq/issues/12787>`_,
  by Hugo Herbelin).

**Tactic language**

- **Fixed:**
  Miscellaneous issues with locating tactic errors
  (`#13247 <https://github.com/rocq-prover/rocq/pull/13247>`_,
  fixes `#12773 <https://github.com/rocq-prover/rocq/issues/12773>`_
  and `#12992 <https://github.com/rocq-prover/rocq/issues/12992>`_,
  by Hugo Herbelin).

**SSReflect**

- **Fixed:**
  Regression in error reporting after :tacn:`case <case (ssreflect)>`.
  A generic error message "Could not fill dependent hole in apply" was
  reported for any error following :tacn:`case <case (ssreflect)>` or
  :tacn:`elim <elim (ssreflect)>`
  (`#12857 <https://github.com/rocq-prover/rocq/pull/12857>`_,
  fixes `#12837 <https://github.com/rocq-prover/rocq/issues/12837>`_,
  by Enrico Tassi).

**Commands and options**

- **Fixed:**
  Failures of :cmd:`Search` in the presence of primitive projections
  (`#13301 <https://github.com/rocq-prover/rocq/pull/13301>`_,
  fixes `#13298 <https://github.com/rocq-prover/rocq/issues/13298>`_,
  by Hugo Herbelin).
- **Fixed:**
  :cmd:`Search` supports filtering on parts of identifiers which are
  not proper identifiers themselves, such as :n:`"1"`
  (`#13351 <https://github.com/rocq-prover/rocq/pull/13351>`_,
  fixes `#13349 <https://github.com/rocq-prover/rocq/issues/13349>`_,
  by Hugo Herbelin).

**Tools**

- **Fixed:**
  Special symbols now escaped in the index produced by coqdoc,
  avoiding collision with the syntax of the output format
  (`#12754 <https://github.com/rocq-prover/rocq/pull/12754>`_,
  fixes `#12752 <https://github.com/rocq-prover/rocq/issues/12752>`_,
  by Hugo Herbelin).
- **Fixed:**
  The `details` environment added in the 8.12 release can now be used
  as advertised in the reference manual
  (`#12772 <https://github.com/rocq-prover/rocq/pull/12772>`_,
  by Thomas Letan).
- **Fixed:**
  Targets such as ``print-pretty-timed`` in ``coq_makefile``\-made
  ``Makefile``\s no longer error in rare cases where ``--output-sync`` is not
  passed to make and the timing output gets interleaved in just the wrong way
  (`#13063 <https://github.com/rocq-prover/rocq/pull/13063>`_, fixes `#13062
  <https://github.com/rocq-prover/rocq/issues/13062>`_, by Jason Gross).

**CoqIDE**

- **Fixed:**
  View menu "Display parentheses"
  (`#12794 <https://github.com/rocq-prover/rocq/pull/12794>`_ and `#13067 <https://github.com/rocq-prover/rocq/pull/13067>`_,
  fixes `#12793 <https://github.com/rocq-prover/rocq/issues/12793>`_,
  by Jean-Christophe Léchenet and Hugo Herbelin).

**Infrastructure and dependencies**

- **Added:**
  Coq is now tested against OCaml 4.11.1
  (`#12972 <https://github.com/rocq-prover/rocq/pull/12972>`_,
  by Emilio Jesus Gallego Arias).
- **Fixed:**
  The reference manual can now build with Sphinx 3
  (`#13011 <https://github.com/rocq-prover/rocq/pull/13011>`_,
  fixes `#12332 <https://github.com/rocq-prover/rocq/issues/12332>`_,
  by Théo Zimmermann and Jim Fehrle).

Changes in 8.12.2
~~~~~~~~~~~~~~~~~

**Notations**

- **Fixed:**
  8.12 regression causing notations mentioning a coercion to be ignored
  (`#13436 <https://github.com/rocq-prover/rocq/pull/13436>`_,
  fixes `#13432 <https://github.com/rocq-prover/rocq/issues/13432>`_,
  by Hugo Herbelin).

**Tactics**

- **Fixed:**
  8.12 regression: incomplete inference of implicit arguments in :tacn:`exists`
  (`#13468 <https://github.com/rocq-prover/rocq/pull/13468>`_,
  fixes `#13456 <https://github.com/rocq-prover/rocq/issues/13456>`_,
  by Hugo Herbelin).

Version 8.11
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

The main changes brought by Coq version 8.11 are:

- :ref:`Ltac2<811Ltac2>`, a new tactic language for writing more robust larger scale
  tactics, with built-in support for datatypes and the multi-goal tactic monad.
- :ref:`Primitive floats<811PrimitiveFloats>` are integrated in terms and follow the binary64 format
  of the IEEE 754 standard, as specified in the `Coq.Float.Floats` library.
- :ref:`Cleanups<811Sections>` of the section mechanism, delayed proofs and further
  restrictions of template polymorphism to fix soundness issues related to
  universes.
- New :ref:`unsafe flags<811UnsafeFlags>` to disable locally guard, positivity and universe
  checking. Reliance on these flags is always printed by
  :g:`Print Assumptions`.
- :ref:`Fixed bugs<811ExportBug>` of :g:`Export` and :g:`Import` that can have a
  significant impact on user developments (**common source of
  incompatibility!**).
- New interactive development method based on `vos` :ref:`interface files<811vos>`,
  allowing to work on a file without recompiling the proof parts of their
  dependencies.
- New :g:`Arguments` annotation for :ref:`bidirectional type inference<811BidirArguments>`
  configuration for reference (e.g. constants, inductive) applications.
- New :ref:`refine attribute<811RefineInstance>` for :cmd:`Instance` can be used instead of
  the removed ``Refine Instance Mode``.
- Generalization of the :g:`under` and :g:`over` :ref:`tactics<811SSRUnderOver>` of SSReflect to
  arbitrary relations.
- :ref:`Revision<811Reals>` of the :g:`Coq.Reals` library, its axiomatisation and
  instances of the constructive and classical real numbers.

Additionally, while the `omega` tactic is not yet deprecated in
this version of Coq, it should soon be the case and we already
recommend users to switch to :tacn:`lia` in new proof scripts.

The ``dev/doc/critical-bugs`` file documents the known critical bugs
of Coq and affected releases. See the `Changes in 8.11+beta1`_
section and following sections for the detailed list of changes,
including potentially breaking changes marked with **Changed**.

Coq's documentation is available at https://coq.github.io/doc/v8.11/api (documentation of
the ML API), https://coq.github.io/doc/v8.11/refman (reference
manual), and https://coq.github.io/doc/v8.11/stdlib (documentation of
the standard library).

Maxime Dénès, Emilio Jesús Gallego Arias, Gaëtan Gilbert, Michael
Soegtrop and Théo Zimmermann worked on maintaining and improving the
continuous integration system and package building infrastructure.

The opam repository for Coq packages has been maintained by
Guillaume Claret, Karl Palmskog, Matthieu Sozeau and Enrico Tassi with
contributions from many users. A list of packages is available at
https://coq.inria.fr/opam/www/.

The 61 contributors to this version are Michael D. Adams, Guillaume
Allais, Helge Bahmann, Langston Barrett, Guillaume Bertholon, Frédéric
Besson, Simon Boulier, Michele Caci, Tej Chajed, Arthur Charguéraud,
Cyril Cohen, Frédéric Dabrowski, Arthur Azevedo de Amorim, Maxime
Dénès, Nikita Eshkeev, Jim Fehrle, Emilio Jesús Gallego Arias,
Paolo G. Giarrusso, Gaëtan Gilbert, Georges Gonthier, Jason Gross,
Samuel Gruetter, Armaël Guéneau, Hugo Herbelin, Florent Hivert, Jasper
Hugunin, Shachar Itzhaky, Jan-Oliver Kaiser, Robbert Krebbers, Vincent
Laporte, Olivier Laurent, Samuel Lelièvre, Nicholas Lewycky, Yishuai
Li, Jose Fernando Lopez Fernandez, Andreas Lynge, Kenji Maillard, Erik
Martin-Dorel, Guillaume Melquiond, Alexandre Moine, Oliver Nash,
Wojciech Nawrocki, Antonio Nikishaev, Pierre-Marie Pédrot, Clément
Pit-Claudel, Lars Rasmusson, Robert Rand, Talia Ringer, JP Rodi,
Pierre Roux, Kazuhiko Sakaguchi, Vincent Semeria, Michael Soegtrop,
Matthieu Sozeau, spanjel, Claude Stolze, Enrico Tassi, Laurent Théry,
James R. Wilcox, Xia Li-yao, Théo Zimmermann

Many power users helped to improve the design of the new features via
the issue and pull request system, the Coq development mailing list,
the coq-club@inria.fr mailing list or the `Discourse forum
<https://coq.discourse.group/>`_. It would be impossible to mention
exhaustively the names of everybody who to some extent influenced the
development.

Version 8.11 is the sixth release of Coq developed on a time-based
development cycle. Its development spanned 3 months from the release of
Coq 8.10. Pierre-Marie Pédrot is the release manager and maintainer of this
release, assisted by Matthieu Sozeau. This release is the result of 2000+
commits and 300+ PRs merged, closing 75+ issues.

| Paris, November 2019,
| Matthieu Sozeau for the Coq development team
|


Changes in 8.11+beta1
~~~~~~~~~~~~~~~~~~~~~

**Kernel**

  .. _811PrimitiveFloats:

- **Added:**
  A built-in support of floating-point arithmetic, allowing
  one to devise efficient reflection tactics involving numerical
  computation. Primitive floats are added in the language of terms,
  following the binary64 format of the IEEE 754 standard, and the
  related operations are implemented for the different reduction
  engines of Coq by using the corresponding processor operators in
  rounding-to-nearest-even. The properties of these operators are
  axiomatized in the theory :g:`Coq.Floats.FloatAxioms` which is part
  of the library :g:`Coq.Floats.Floats`.
  See Section :ref:`primitive-floats`
  (`#9867 <https://github.com/rocq-prover/rocq/pull/9867>`_,
  closes `#8276 <https://github.com/rocq-prover/rocq/issues/8276>`_,
  by Guillaume Bertholon, Erik Martin-Dorel, Pierre Roux).
- **Changed:**
  Internal definitions generated by :tacn:`abstract`\-like tactics are now inlined
  inside universe :cmd:`Qed`\-terminated polymorphic definitions, similarly to what
  happens for their monomorphic counterparts,
  (`#10439 <https://github.com/rocq-prover/rocq/pull/10439>`_, by Pierre-Marie Pédrot).

  .. _811Sections:

- **Fixed:**
  Section data is now part of the kernel. Solves a soundness issue
  in interactive mode where global monomorphic universe constraints would be
  dropped when forcing a delayed opaque proof inside a polymorphic section. Also
  relaxes the nesting criterion for sections, as polymorphic sections can now
  appear inside a monomorphic one
  (`#10664 <https://github.com/rocq-prover/rocq/pull/10664>`_, by Pierre-Marie Pédrot).
- **Changed:**
  Using ``SProp`` is now allowed by default, without needing to pass
  ``-allow-sprop`` or use :flag:`Allow StrictProp` (`#10811
  <https://github.com/rocq-prover/rocq/pull/10811>`_, by Gaëtan Gilbert).

**Specification language, type inference**

  .. _811BidirArguments:

- **Added:**
  Annotation in `Arguments` for bidirectionality hints: it is now possible
  to tell type inference to use type information from the context once the `n`
  first arguments of an application are known. The syntax is:
  `Arguments foo x y & z`. See :ref:`bidirectionality_hints`
  (`#10049 <https://github.com/rocq-prover/rocq/pull/10049>`_, by Maxime Dénès with
  help from Enrico Tassi).
- **Added:**
  Record fields can be annotated to prevent them from being used as canonical projections;
  see :ref:`canonicalstructures` for details
  (`#10076 <https://github.com/rocq-prover/rocq/pull/10076>`_,
  by Vincent Laporte).
- **Changed:**
  Require parentheses around nested disjunctive patterns, so that pattern and
  term syntax are consistent; match branch patterns no longer require
  parentheses for notation at level 100 or more.

  .. warning:: Incompatibilities

     + In :g:`match p with (_, (0|1)) => ...` parentheses may no longer be
       omitted around :n:`0|1`.
     + Notation :g:`(p | q)` now potentially clashes with core pattern syntax,
       and should be avoided. ``-w disj-pattern-notation`` flags such :cmd:`Notation`.

  See :ref:`extendedpatternmatching` for details
  (`#10167 <https://github.com/rocq-prover/rocq/pull/10167>`_,
  by Georges Gonthier).
- **Changed:**
  :cmd:`Function` always opens a proof when used with a ``measure`` or ``wf``
  annotation, see :ref:`advanced-recursive-functions` for the updated
  documentation (`#10215 <https://github.com/rocq-prover/rocq/pull/10215>`_,
  by Enrico Tassi).
- **Changed:**
  The legacy command :cmd:`Add Morphism` always opens a proof and cannot be used
  inside a module type. In order to declare a module type parameter that
  happens to be a morphism, use :cmd:`Declare Morphism`. See
  :ref:`deprecated_syntax_for_generalized_rewriting` for the updated
  documentation (`#10215 <https://github.com/rocq-prover/rocq/pull/10215>`_,
  by Enrico Tassi).
- **Changed:**
  The universe polymorphism setting now applies from the opening of a section.
  In particular, it is not possible anymore to mix polymorphic and monomorphic
  definitions in a section when there are no variables nor universe constraints
  defined in this section. This makes the behavior consistent with the
  documentation. (`#10441 <https://github.com/rocq-prover/rocq/pull/10441>`_,
  by Pierre-Marie Pédrot)
- **Added:**
  The :cmd:`Section` command now accepts the "universes" attribute. In
  addition to setting the section universe polymorphism, it also locally sets
  the universe polymorphic option inside the section
  (`#10441 <https://github.com/rocq-prover/rocq/pull/10441>`_, by Pierre-Marie Pédrot)
- **Fixed:**
  ``Program Fixpoint`` now uses ``ex`` and ``sig`` to make telescopes
  involving ``Prop`` types (`#10758
  <https://github.com/rocq-prover/rocq/pull/10758>`_, by Gaëtan Gilbert, fixing
  `#10757 <https://github.com/rocq-prover/rocq/issues/10757>`_ reported by
  Xavier Leroy).
- **Changed:**
  Output of the :cmd:`Print` and :cmd:`About` commands.
  Arguments meta-data is now displayed as the corresponding
  :cmd:`Arguments` command instead of the
  human-targeted prose used in previous Coq versions. (`#10985
  <https://github.com/rocq-prover/rocq/pull/10985>`_, by Gaëtan Gilbert).

  .. _811RefineInstance:

- **Added:** :attr:`refine` attribute for :cmd:`Instance`, a more
  predictable version of the old ``Refine Instance Mode`` which
  unconditionally opens a proof (`#10996
  <https://github.com/rocq-prover/rocq/pull/10996>`_, by Gaëtan Gilbert).
- **Changed:**
  The unsupported attribute error is now an error-by-default warning,
  meaning it can be disabled (`#10997
  <https://github.com/rocq-prover/rocq/pull/10997>`_, by Gaëtan Gilbert).
- **Fixed:** Bugs sometimes preventing to define valid (co)fixpoints with implicit arguments
  in the presence of local definitions, see `#3282 <https://github.com/rocq-prover/rocq/issues/3282>`_
  (`#11132 <https://github.com/rocq-prover/rocq/pull/11132>`_, by Hugo Herbelin).

  .. example::

     The following features an implicit argument after a local
     definition. It was wrongly rejected.

     .. rocqtop:: in

        Definition f := fix f (o := true) {n : nat} m {struct m} :=
          match m with 0 => 0 | S m' => f (n:=n+1) m' end.

**Notations**

- **Added:**
  Numeral Notations now support sorts in the input to printing
  functions (e.g., numeral notations can be defined for terms
  containing things like `@cons Set nat nil`).  (`#9883
  <https://github.com/rocq-prover/rocq/pull/9883>`_, by Jason Gross).
- **Added:**
  The :cmd:`Notation` and :cmd:`Infix` commands now support the `deprecated`
  attribute
  (`#10180 <https://github.com/rocq-prover/rocq/pull/10180>`_, by Maxime Dénès).
- **Deprecated:**
  The former `compat` annotation for notations is
  deprecated, and its semantics changed. It is now made equivalent to using
  a `deprecated` attribute, and is no longer connected with the `-compat`
  command-line flag
  (`#10180 <https://github.com/rocq-prover/rocq/pull/10180>`_, by Maxime Dénès).
- **Changed:**
  A simplification of parsing rules could cause a slight change of
  parsing precedences for the very rare users who defined notations
  with `constr` at level strictly between 100 and 200 and used these
  notations on the right-hand side of a cast operator (`:`, `<:`,
  `<<:`) (`#10963 <https://github.com/rocq-prover/rocq/pull/10963>`_, by Théo
  Zimmermann, simplification initially noticed by Jim Fehrle).

**Tactics**

- **Added:**
  Syntax :n:`injection @term as [= {+ @intropattern} ]` as
  an alternative to :n:`injection @term as {+ @simple_intropattern}` using
  the standard injection intropattern syntax (`#9288
  <https://github.com/rocq-prover/rocq/pull/9288>`_, by Hugo Herbelin).
- **Changed:**
  Reimplementation of the :tacn:`zify` tactic. The tactic is more efficient and copes with dependent hypotheses.
  It can also be extended by redefining the tactic ``zify_post_hook``
  (`#9856 <https://github.com/rocq-prover/rocq/pull/9856>`_, fixes
  `#8898 <https://github.com/rocq-prover/rocq/issues/8898>`_,
  `#7886 <https://github.com/rocq-prover/rocq/issues/7886>`_,
  `#9848 <https://github.com/rocq-prover/rocq/issues/9848>`_ and
  `#5155 <https://github.com/rocq-prover/rocq/issues/5155>`_, by Frédéric Besson).
- **Changed:**
  The goal selector tactical ``only`` now checks that the goal range
  it is given is valid instead of ignoring goals out of the focus
  range (`#10318 <https://github.com/rocq-prover/rocq/pull/10318>`_, by Gaëtan
  Gilbert).
- **Added:**
  Flags :flag:`Lia Cache`, :flag:`Nia Cache` and :flag:`Nra Cache`
  (`#10765 <https://github.com/rocq-prover/rocq/pull/10765>`_, by Frédéric Besson,
  see `#10772 <https://github.com/rocq-prover/rocq/issues/10772>`_ for use case).
- **Added:**
  The :tacn:`zify` tactic is now aware of `Z.to_N`
  (`#10774 <https://github.com/rocq-prover/rocq/pull/10774>`_, grants
  `#9162 <https://github.com/rocq-prover/rocq/issues/9162>`_, by Kazuhiko Sakaguchi).
- **Changed:**
  The :tacn:`assert_succeeds` and :tacn:`assert_fails` tactics now
  only run their tactic argument once, even if it has multiple
  successes.  This prevents blow-up and looping from using
  multisuccess tactics with :tacn:`assert_succeeds`.  (`#10966
  <https://github.com/rocq-prover/rocq/pull/10966>`_ fixes `#10965
  <https://github.com/rocq-prover/rocq/issues/10965>`_, by Jason Gross).
- **Fixed:**
  The :tacn:`assert_succeeds` and :tacn:`assert_fails` tactics now
  behave correctly when their tactic fully solves the goal.  (`#10966
  <https://github.com/rocq-prover/rocq/pull/10966>`_ fixes `#9114
  <https://github.com/rocq-prover/rocq/issues/9114>`_, by Jason Gross).

**Tactic language**

  .. _811Ltac2:

- **Added:**
  Ltac2, a new version of the tactic language Ltac, that doesn't
  preserve backward compatibility, has been integrated in the main Coq
  distribution.  It is still experimental, but we already recommend
  users of advanced Ltac to start using it and report bugs or request
  enhancements.  See its documentation in the :ref:`dedicated chapter
  <ltac2>` (`#10002 <https://github.com/rocq-prover/rocq/pull/10002>`_, plugin
  authored by Pierre-Marie Pédrot, with contributions by various
  users, integration by Maxime Dénès, help on integrating / improving
  the documentation by Théo Zimmermann and Jim Fehrle).
- **Added:**
  Ltac2 tactic notations with “constr” arguments can specify the
  notation scope for these arguments;
  see :ref:`ltac2_notations` for details
  (`#10289 <https://github.com/rocq-prover/rocq/pull/10289>`_,
  by Vincent Laporte).
- **Changed:**
  White spaces are forbidden in the :n:`&@ident` syntax for ltac2 references
  that are described in :ref:`ltac2_built-in-quotations`
  (`#10324 <https://github.com/rocq-prover/rocq/pull/10324>`_,
  fixes `#10088 <https://github.com/rocq-prover/rocq/issues/10088>`_,
  authored by Pierre-Marie Pédrot).

**SSReflect**

  .. _811SSRUnderOver:

- **Added:**
  Generalize tactics :tacn:`under` and :tacn:`over` for any registered
  relation. More precisely, assume the given context lemma has type
  `forall f1 f2, .. -> (forall i, R1 (f1 i) (f2 i)) -> R2 f1 f2`.  The
  first step performed by :tacn:`under` (since Coq 8.10) amounts to
  calling the tactic :tacn:`rewrite <rewrite (ssreflect)>`, which
  itself relies on :tacn:`setoid_rewrite` if need be. So this step was
  already compatible with a double implication or setoid equality for
  the conclusion head symbol `R2`. But a further step consists in
  tagging the generated subgoal `R1 (f1 i) (?f2 i)` to protect it from
  unwanted evar instantiation, and get `Under_rel _ R1 (f1 i) (?f2 i)`
  that is displayed as ``'Under[ f1 i ]``. In Coq 8.10, this second
  (convenience) step was only performed when `R1` was Leibniz' `eq` or
  `iff`. Now, it is also performed for any relation `R1` which has a
  ``RewriteRelation`` instance (a `RelationClasses.Reflexive` instance
  being also needed so :tacn:`over` can discharge the ``'Under[ _ ]``
  goal by instantiating the hidden evar.)
  This feature generalizing support for setoid-like relations is
  enabled as soon as we do both ``Require Import ssreflect.`` and
  ``Require Setoid.`` Finally, a rewrite rule ``UnderE`` has been
  added if one wants to "unprotect" the evar, and instantiate it
  manually with another rule than reflexivity (i.e., without using the
  :tacn:`over` tactic nor the ``over`` rewrite rule). See also Section
  :ref:`under_ssr` (`#10022 <https://github.com/rocq-prover/rocq/pull/10022>`_,
  by Erik Martin-Dorel, with suggestions and review by Enrico Tassi
  and Cyril Cohen).
- **Added:**
  A :g:`void` notation for the standard library empty type (:g:`Empty_set`)
  (`#10932 <https://github.com/rocq-prover/rocq/pull/10932>`_, by Arthur Azevedo de
  Amorim).
- **Added:** Lemma :g:`inj_compr` to :g:`ssr.ssrfun`
  (`#11136 <https://github.com/rocq-prover/rocq/pull/11136>`_, by Cyril Cohen).

**Commands and options**

- **Removed:**
  Deprecated flag `Refine Instance Mode`
  (`#9530 <https://github.com/rocq-prover/rocq/pull/9530>`_, fixes
  `#3632 <https://github.com/rocq-prover/rocq/issues/3632>`_, `#3890
  <https://github.com/rocq-prover/rocq/issues/3890>`_ and `#4638
  <https://github.com/rocq-prover/rocq/issues/4638>`_
  by Maxime Dénès, review by Gaëtan Gilbert).
- **Changed:**
  :cmd:`Fail` does not catch critical errors (including "stack overflow")
  anymore (`#10173 <https://github.com/rocq-prover/rocq/pull/10173>`_,
  by Gaëtan Gilbert).
- **Removed:**
  Undocumented :n:`Instance : !@type` syntax
  (`#10185 <https://github.com/rocq-prover/rocq/pull/10185>`_, by Gaëtan Gilbert).
- **Removed:**
  Deprecated ``Show Script`` command
  (`#10277 <https://github.com/rocq-prover/rocq/pull/10277>`_, by Gaëtan Gilbert).

  .. _811UnsafeFlags:

- **Added:**
  Unsafe commands to enable/disable guard checking, positivity checking
  and universes checking (providing a local `-type-in-type`).
  See :ref:`controlling-typing-flags`
  (`#10291 <https://github.com/rocq-prover/rocq/pull/10291>`_ by Simon Boulier).

  .. _811ExportBug:

- **Fixed:**
  Two bugs in :cmd:`Export`. This can have an impact on the behavior of the
  :cmd:`Import` command on libraries. `Import A` when `A` imports `B` which exports
  `C` was importing `C`, whereas :cmd:`Import` is not transitive. Also, after
  `Import A B`, the import of `B` was sometimes incomplete
  (`#10476 <https://github.com/rocq-prover/rocq/pull/10476>`_, by Maxime Dénès).

  .. warning::

     This is a common source of incompatibilities in projects
     migrating to Coq 8.11.

- **Changed:**
  Output generated by :flag:`Printing Dependent Evars Line` flag
  used by the Prooftree tool in Proof General
  (`#10489 <https://github.com/rocq-prover/rocq/pull/10489>`_,
  closes `#4504 <https://github.com/rocq-prover/rocq/issues/4504>`_,
  `#10399 <https://github.com/rocq-prover/rocq/issues/10399>`_ and
  `#10400 <https://github.com/rocq-prover/rocq/issues/10400>`_,
  by Jim Fehrle).
- **Added:**
  Optionally highlight the differences between successive proof steps in the
  :cmd:`Show Proof` command.  Experimental; only available in coqtop
  and Proof General for now, may be supported in other IDEs
  in the future
  (`#10494 <https://github.com/rocq-prover/rocq/pull/10494>`_,
  by Jim Fehrle).
- **Removed:** Legacy commands ``AddPath``, ``AddRecPath``, and ``DelPath``
  which were undocumented, broken variants of ``Add LoadPath``,
  ``Add Rec LoadPath``, and ``Remove LoadPath``
  (`#11187 <https://github.com/rocq-prover/rocq/pull/11187>`_,
  by Maxime Dénès and Théo Zimmermann).

**Tools**

  .. _811vos:

- **Added:**
  `coqc` now provides the ability to generate compiled interfaces.
  Use `coqc -vos foo.v` to skip all opaque proofs during the
  compilation of `foo.v`, and output a file called `foo.vos`.
  This feature is experimental. It enables working on a Coq file without the need to
  first compile the proofs contained in its dependencies
  (`#8642 <https://github.com/rocq-prover/rocq/pull/8642>`_ by Arthur Charguéraud, review by
  Maxime Dénès and Emilio Gallego).
- **Added:**
  Command-line options `-require-import`, `-require-export`,
  `-require-import-from` and `-require-export-from`, as well as their
  shorthand, `-ri`, `-re`, `-refrom` and -`rifrom`. Deprecate
  confusing command line option `-require`
  (`#10245 <https://github.com/rocq-prover/rocq/pull/10245>`_
  by Hugo Herbelin, review by Emilio Gallego).
- **Changed:**
  Renamed `VDFILE` from `.coqdeps.d` to `.<CoqMakefile>.d` in the `coq_makefile`
  utility, where `<CoqMakefile>` is the name of the output file given by the
  `-o` option. In this way two generated makefiles can coexist in the same
  directory
  (`#10947 <https://github.com/rocq-prover/rocq/pull/10947>`_, by Kazuhiko Sakaguchi).
- **Fixed:** ``coq_makefile`` now supports environment variable ``COQBIN`` with
  no ending ``/`` character (`#11068
  <https://github.com/rocq-prover/rocq/pull/11068>`_, by Gaëtan Gilbert).

**Standard library**

- **Changed:**
  Moved the :tacn:`auto` hints of the `OrderedType` module into a new `ordered_type`
  database
  (`#9772 <https://github.com/rocq-prover/rocq/pull/9772>`_,
  by Vincent Laporte).
- **Removed:**
  Deprecated modules `Coq.ZArith.Zlogarithm` and `Coq.ZArith.Zsqrt_compat`
  (`#9811 <https://github.com/rocq-prover/rocq/pull/9811>`_,
  by Vincent Laporte).

  .. _811Reals:

- **Added:**
  Module `Reals.Cauchy.ConstructiveCauchyReals` defines constructive real numbers
  by Cauchy sequences of rational numbers
  (`#10445 <https://github.com/rocq-prover/rocq/pull/10445>`_, by Vincent Semeria,
  with the help and review of Guillaume Melquiond and Bas Spitters).
  This module is not meant to be imported directly, please import
  `Reals.Abstract.ConstructiveReals` instead.
- **Added:**
  New module `Reals.ClassicalDedekindReals` defines Dedekind real
  numbers as boolean-valued functions along with 3 logical axioms:
  limited principle of omniscience, excluded middle of negations, and
  functional extensionality.  The exposed type :g:`R` in module
  :g:`Reals.Rdefinitions` now corresponds to these Dedekind reals,
  hidden behind an opaque module, which significantly reduces the
  number of axioms needed (see `Reals.Rdefinitions` and
  `Reals.Raxioms`), while preserving backward compatibility.
  Classical Dedekind reals are a quotient of constructive reals, which
  allows to transport many constructive proofs to the classical case
  (`#10827 <https://github.com/rocq-prover/rocq/pull/10827>`_, by Vincent Semeria,
  based on discussions with Guillaume Melquiond, Bas Spitters and Hugo Herbelin,
  code review by Hugo Herbelin).
- **Added:**
  New lemmas on :g:`combine`, :g:`filter`, :g:`nodup`, :g:`nth`, and
  :g:`nth_error` functions on lists
  (`#10651 <https://github.com/rocq-prover/rocq/pull/10651>`_, and
  `#10731 <https://github.com/rocq-prover/rocq/pull/10731>`_, by Oliver Nash).
- **Changed:**
  The lemma :g:`filter_app` was moved to the :g:`List` module
  (`#10651 <https://github.com/rocq-prover/rocq/pull/10651>`_, by Oliver Nash).
- **Added:**
  Standard equivalence between weak excluded-middle and the
  classical instance of De Morgan's law, in module :g:`ClassicalFacts`
  (`#10895 <https://github.com/rocq-prover/rocq/pull/10895>`_, by Hugo Herbelin).

**Infrastructure and dependencies**

- **Changed:**
  Coq now officially supports OCaml 4.08.
  See `INSTALL` file for details
  (`#10471 <https://github.com/rocq-prover/rocq/pull/10471>`_,
  by Emilio Jesús Gallego Arias).

Changes in 8.11.0
~~~~~~~~~~~~~~~~~

**Kernel**

- **Changed:** the native compilation (:tacn:`native_compute`) now
  creates a directory to contain temporary files instead of putting
  them in the root of the system temporary directory (`#11081
  <https://github.com/rocq-prover/rocq/pull/11081>`_, by Gaëtan Gilbert).
- **Fixed:** `#11360 <https://github.com/issues/11360>`_.
  Broken section closing when a template polymorphic inductive type depends on
  a section variable through its parameters (`#11361
  <https://github.com/rocq-prover/rocq/pull/11361>`_, by Gaëtan Gilbert).
- **Fixed:** The type of :g:`Set+1` would be computed to be itself,
  leading to a proof of False (`#11422
  <https://github.com/rocq-prover/rocq/pull/11422>`_, by Gaëtan Gilbert).

**Specification language, type inference**

- **Changed:** Heuristics for universe minimization to :g:`Set`: only
  minimize flexible universes (`#10657 <https://github.com/rocq-prover/rocq/pull/10657>`_,
  by Gaëtan Gilbert with help from Maxime Dénès and Matthieu Sozeau).
- **Fixed:**
  A dependency was missing when looking for default clauses in the
  algorithm for printing pattern matching clauses (`#11233
  <https://github.com/rocq-prover/rocq/pull/11233>`_, by Hugo Herbelin, fixing
  `#11231 <https://github.com/rocq-prover/rocq/pull/11231>`_, reported by Barry
  Jay).

**Notations**

- **Fixed:**
  :cmd:`Print Visibility` was failing in the presence of only-printing notations
  (`#11276 <https://github.com/rocq-prover/rocq/pull/11276>`_,
  by Hugo Herbelin, fixing `#10750 <https://github.com/rocq-prover/rocq/pull/10750>`_).
- **Fixed:**
  Recursive notations with custom entries were incorrectly parsing `constr`
  instead of custom grammars (`#11311 <https://github.com/rocq-prover/rocq/pull/11311>`_
  by Maxime Dénès, fixes `#9532 <https://github.com/rocq-prover/rocq/pull/9532>`_,
  `#9490 <https://github.com/rocq-prover/rocq/pull/9490>`_).

**Tactics**

- **Changed:**
  The tactics :tacn:`eapply`, :tacn:`refine` and variants no
  longer allow shelved goals to be solved by typeclass resolution
  (`#10762 <https://github.com/rocq-prover/rocq/pull/10762>`_, by Matthieu Sozeau).
- **Fixed:** The optional string argument to :tacn:`time` is now
  properly quoted under :cmd:`Print Ltac` (`#11203
  <https://github.com/rocq-prover/rocq/pull/11203>`_, fixes `#10971
  <https://github.com/rocq-prover/rocq/issues/10971>`_, by Jason Gross)
- **Fixed:**
  Efficiency regression of :tacn:`lia` introduced in 8.10
  by PR `#9725 <https://github.com/rocq-prover/rocq/pull/9725>`_
  (`#11263 <https://github.com/rocq-prover/rocq/pull/11263>`_,
  fixes `#11063 <https://github.com/rocq-prover/rocq/issues/11063>`_,
  and `#11242 <https://github.com/rocq-prover/rocq/issues/11242>`_,
  and `#11270 <https://github.com/rocq-prover/rocq/issues/11270>`_, by Frédéric Besson).
- **Deprecated:**
  The undocumented ``omega with`` tactic variant has been deprecated.
  Using :tacn:`lia` is the recommended replacement, though the old semantics
  of ``omega with *`` can be recovered with ``zify; omega``
  (`#11337 <https://github.com/rocq-prover/rocq/pull/11337>`_,
  by Emilio Jesus Gallego Arias).
- **Fixed**
  For compatibility reasons, in 8.11, :tacn:`zify` does not support :g:`Z.pow_pos` by default.
  It can be enabled by explicitly loading the module :g:`ZifyPow`
  (`#11430 <https://github.com/rocq-prover/rocq/pull/11430>`_ by Frédéric Besson
  fixes `#11191 <https://github.com/rocq-prover/rocq/issues/11191>`_).

**Tactic language**

- **Fixed:**
  Syntax of tactic `cofix ... with ...` was broken since Coq 8.10
  (`#11241 <https://github.com/rocq-prover/rocq/pull/11241>`_,
  by Hugo Herbelin).

**Commands and options**

- **Deprecated:** The `-load-ml-source` and `-load-ml-object` command
  line options have been deprecated; their use was very limited, you
  can achieve the same by adding object files in the linking step or
  by using a plugin (`#11428
  <https://github.com/rocq-prover/rocq/pull/11428>`_, by Emilio Jesus Gallego
  Arias).

**Tools**

- **Fixed:**
  ``coqtop --version`` was broken when called in the middle of an installation process
  (`#11255 <https://github.com/rocq-prover/rocq/pull/11255>`_, by Hugo Herbelin, fixing
  `#11254 <https://github.com/rocq-prover/rocq/pull/11254>`_).
- **Deprecated:** The ``-quick`` command is renamed to ``-vio``, for
  consistency with the new ``-vos`` and ``-vok`` flags. Usage of
  ``-quick`` is now deprecated (`#11280
  <https://github.com/rocq-prover/rocq/pull/11280>`_, by Arthur Charguéraud).
- **Fixed:**
  ``coq_makefile`` does not break when using the ``CAMLPKGS`` variable
  together with an unpacked (``mllib``) plugin (`#11357
  <https://github.com/rocq-prover/rocq/pull/11357>`_, by Gaëtan Gilbert).
- **Fixed:**
  ``coqdoc`` with option ``-g`` (Gallina only) now correctly prints
  commands with attributes (`#11394 <https://github.com/rocq-prover/rocq/pull/11394>`_,
  fixes `#11353 <https://github.com/rocq-prover/rocq/issues/11353>`_,
  by Karl Palmskog).

**CoqIDE**

- **Changed:** CoqIDE now uses the GtkSourceView native implementation
  of the autocomplete mechanism (`#11400
  <https://github.com/rocq-prover/rocq/pull/11400>`_, by Pierre-Marie Pédrot).

**Standard library**

- **Removed:** Export of module :g:`RList` in :g:`Ranalysis` and
  :g:`Ranalysis_reg`. Module :g:`RList` is still there but must be
  imported explicitly where required (`#11396
  <https://github.com/rocq-prover/rocq/pull/11396>`_, by Michael Soegtrop).

**Infrastructure and dependencies**

- **Added:**
  Build date can now be overridden by setting the `SOURCE_DATE_EPOCH`
  environment variable
  (`#11227 <https://github.com/rocq-prover/rocq/pull/11227>`_,
  by Bernhard M. Wiedemann).

Changes in 8.11.1
~~~~~~~~~~~~~~~~~

**Kernel**

- **Fixed:**
  Allow more inductive types in `Unset Positivity Checking` mode
  (`#11811 <https://github.com/rocq-prover/rocq/pull/11811>`_,
  by SimonBoulier).

**Notations**

- **Fixed:**
  Bugs in dealing with precedences of notations in custom entries
  (`#11530 <https://github.com/rocq-prover/rocq/pull/11530>`_,
  by Hugo Herbelin, fixing in particular
  `#9517 <https://github.com/rocq-prover/rocq/pull/9517>`_,
  `#9519 <https://github.com/rocq-prover/rocq/pull/9519>`_,
  `#9521 <https://github.com/rocq-prover/rocq/pull/9521>`_,
  `#11331 <https://github.com/rocq-prover/rocq/pull/11331>`_).
- **Added:**
  In primitive floats, print a warning when parsing a decimal value
  that is not exactly a binary64 floating-point number.
  For instance, parsing 0.1 will print a warning whereas parsing 0.5 won't
  (`#11859 <https://github.com/rocq-prover/rocq/pull/11859>`_,
  by Pierre Roux).

**CoqIDE**

- **Fixed:**
  Compiling file paths containing spaces
  (`#10008 <https://github.com/rocq-prover/rocq/pull/10008>`_,
  by snyke7, fixing `#11595 <https://github.com/rocq-prover/rocq/pull/11595>`_).

**Infrastructure and dependencies**

- **Added:**
  Bump official OCaml support and CI testing to 4.10.0
  (`#11131 <https://github.com/rocq-prover/rocq/pull/11131>`_,
  `#11123 <https://github.com/rocq-prover/rocq/pull/11123>`_,
  `#11102 <https://github.com/rocq-prover/rocq/pull/11102>`_,
  by Emilio Jesus Gallego Arias, Jacques-Henri Jourdan,
  Guillaume Melquiond, and Guillaume Munch-Maccagnoni).

**Miscellaneous**

- **Fixed:**
  :cmd:`Extraction Implicit` on the constructor of a record was leading to an anomaly
  (`#11329 <https://github.com/rocq-prover/rocq/pull/11329>`_,
  by Hugo Herbelin, fixes `#11114 <https://github.com/rocq-prover/rocq/pull/11114>`_).

Changes in 8.11.2
~~~~~~~~~~~~~~~~~

**Kernel**

- **Fixed:**
  Using :cmd:`Require` inside a section caused an anomaly when closing
  the section. (`#11972 <https://github.com/rocq-prover/rocq/pull/11972>`_, by
  Gaëtan Gilbert, fixing `#11783
  <https://github.com/rocq-prover/rocq/issues/11783>`_, reported by Attila
  Boros).

**Tactics**

- **Fixed:**
  Anomaly with induction schemes whose conclusion is not normalized
  (`#12116 <https://github.com/rocq-prover/rocq/pull/12116>`_,
  by Hugo Herbelin; fixes
  `#12045 <https://github.com/rocq-prover/rocq/pull/12045>`_)
- **Fixed:**
  Loss of location of some tactic errors
  (`#12223 <https://github.com/rocq-prover/rocq/pull/12223>`_,
  by Hugo Herbelin; fixes
  `#12152 <https://github.com/rocq-prover/rocq/pull/12152>`_ and
  `#12255 <https://github.com/rocq-prover/rocq/pull/12255>`_).

**Commands and options**

- **Changed:**
  Ignore -native-compiler option when built without native compute
  support
  (`#12070 <https://github.com/rocq-prover/rocq/pull/12070>`_,
  by Pierre Roux).

**CoqIDE**

- **Changed:**
  CoqIDE now uses native window frames by default on Windows.
  The GTK window frames can be restored by setting the `GTK_CSD` environment variable to `1`
  (`#12060 <https://github.com/rocq-prover/rocq/pull/12060>`_,
  fixes `#11080 <https://github.com/rocq-prover/rocq/issues/11080>`_,
  by Attila Gáspár).
- **Fixed:**
  New patch presumably fixing the random Coq 8.11 segfault issue with CoqIDE completion
  (`#12068 <https://github.com/rocq-prover/rocq/pull/12068>`_,
  by Hugo Herbelin, presumably fixing
  `#11943 <https://github.com/rocq-prover/rocq/pull/11943>`_).
- **Fixed:**
  Highlighting style consistently applied to all three buffers of CoqIDE
  (`#12106 <https://github.com/rocq-prover/rocq/pull/12106>`_,
  by Hugo Herbelin; fixes
  `#11506 <https://github.com/rocq-prover/rocq/pull/11506>`_).

Version 8.10
------------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.10 contains two major new features: support for a native
fixed-precision integer type and a new sort :math:`\SProp` of strict
propositions. It is also the result of refinements and stabilization of
previous features, deprecations or removals of deprecated features,
cleanups of the internals of the system and API, and many documentation improvements.
This release includes many user-visible changes, including deprecations that are
documented in the next subsection, and new features that are documented in the
reference manual. Here are the most important user-visible changes:

- Kernel:

  - A notion of primitive object was added to the calculus. Its first
    instance is primitive cyclic unsigned integers, axiomatized in
    module :g:`UInt63`. See Section :ref:`primitive-integers`.
    The `Coq.Numbers.Cyclic.Int31` library is deprecated
    (`#6914 <https://github.com/rocq-prover/rocq/pull/6914>`_, by Maxime Dénès,
    Benjamin Grégoire and Vincent Laporte,
    with help and reviews from many others).

  - The :math:`\SProp` sort of definitionally proof-irrelevant propositions was
    introduced. :math:`\SProp` allows to mark proof
    terms as irrelevant for conversion, and is treated like :math:`\Prop`
    during extraction. It is enabled using the `-allow-sprop`
    command-line flag or the :flag:`Allow StrictProp` flag.
    See Chapter :ref:`sprop`
    (`#8817 <https://github.com/rocq-prover/rocq/pull/8817>`_, by Gaëtan Gilbert).

  - The unfolding heuristic in termination checking was made more
    complete, allowing more constants to be unfolded to discover valid
    recursive calls.  Performance regression may occur in Fixpoint
    declarations without an explicit ``{struct}`` annotation, since
    guessing the decreasing argument can now be more expensive
    (`#9602 <https://github.com/rocq-prover/rocq/pull/9602>`_, by Enrico Tassi).

- Universes:

  - Added Subgraph variant to :cmd:`Print Universes`.
    Try for instance
    :g:`Print Universes Subgraph(sigT2.u1 sigT_of_sigT2.u1 projT3_eq.u1).`
    (`#8451 <https://github.com/rocq-prover/rocq/pull/8451>`_, by Gaëtan Gilbert).

  - Added private universes for opaque polymorphic constants, see the
    documentation for the :flag:`Private Polymorphic Universes` flag,
    and unset it to get the previous behavior
    (`#8850 <https://github.com/rocq-prover/rocq/pull/8850>`_, by Gaëtan Gilbert).

- Notations:

  - New command :cmd:`String Notation` to register string syntax for custom
    inductive types
    (`#8965 <https://github.com/rocq-prover/rocq/pull/8965>`_, by Jason Gross).

  - Experimental: :ref:`Number Notations <number-notations>` now parse decimal
    constants such as ``1.02e+01`` or ``10.2``. Parsers added for :g:`Q` and :g:`R`.
    In the rare case when such numeral notations were used
    in a development along with :g:`Q` or :g:`R`, they may have to be removed or
    disambiguated through explicit scope annotations
    (`#8764 <https://github.com/rocq-prover/rocq/pull/8764>`_, by Pierre Roux).

- Ltac backtraces can be turned on using the :flag:`Ltac Backtrace`
  flag, which is off by default
  (`#9142 <https://github.com/rocq-prover/rocq/pull/9142>`_,
  fixes `#7769 <https://github.com/rocq-prover/rocq/issues/7769>`_
  and `#7385 <https://github.com/rocq-prover/rocq/issues/7385>`_,
  by Pierre-Marie Pédrot).

- The tactics :tacn:`lia`, :tacn:`nia`, :tacn:`lra`, :tacn:`nra` are now using a novel
  Simplex-based proof engine. In case of regression, unset `Simplex`
  to get the venerable Fourier-based engine
  (`#8457 <https://github.com/rocq-prover/rocq/pull/8457>`_, by Fréderic Besson).

- SSReflect:

  - New intro patterns:

    - temporary introduction: `=> +`
    - block introduction: `=> [^ prefix ] [^~ suffix ]`
    - fast introduction: `=> >`
    - tactics as views: `=> /ltac:mytac`
    - replace hypothesis: `=> {}H`

      See Section :ref:`introduction_ssr`
      (`#6705 <https://github.com/rocq-prover/rocq/pull/6705>`_, by Enrico Tassi,
      with help from Maxime Dénès,
      ideas coming from various users).

  - New tactic :tacn:`under` to rewrite under binders, given an
    extensionality lemma:

    - interactive mode: :n:`under @term`, associated terminator: :tacn:`over`
    - one-liner mode: :n:`under @term do [@tactic | ...]`

    It can take occurrence switches, contextual patterns, and intro patterns:
    :g:`under {2}[in RHS]eq_big => [i|i ?]`
    (`#9651 <https://github.com/rocq-prover/rocq/pull/9651>`_,
    by Erik Martin-Dorel and Enrico Tassi).

- :cmd:`Combined Scheme` now works when inductive schemes are generated in sort
  :math:`\Type`. It used to be limited to sort `Prop`
  (`#7634 <https://github.com/rocq-prover/rocq/pull/7634>`_, by Théo Winterhalter).

- A new registration mechanism for reference from ML code to Coq
  constructs has been added
  (`#186 <https://github.com/rocq-prover/rocq/pull/186>`_,
  by Emilio Jesús Gallego Arias, Maxime Dénès and Vincent Laporte).

- CoqIDE:

  - CoqIDE now depends on gtk+3 and lablgtk3 instead of gtk+2 and lablgtk2.
    The INSTALL file available in the Coq sources has been updated to list
    the new dependencies
    (`#9279 <https://github.com/rocq-prover/rocq/pull/9279>`_,
    by Hugo Herbelin, with help from Jacques Garrigue,
    Emilio Jesús Gallego Arias, Michael Sogetrop and Vincent Laporte).

  - Smart input for Unicode characters. For example, typing
    ``\alpha`` then ``Shift+Space`` will insert the greek letter alpha.
    A larger number of default bindings are provided, following the latex
    naming convention. Bindings can be customized, either globally, or on a
    per-project basis. See Section :ref:`rocqide-unicode` for details
    (`#8560 <https://github.com/rocq-prover/rocq/pull/8560>`_, by Arthur Charguéraud).

- Infrastructure and dependencies:

  - Coq 8.10 requires OCaml >= 4.05.0, bumped from 4.02.3 See the
    `INSTALL` file for more information on dependencies
    (`#7522 <https://github.com/rocq-prover/rocq/pull/7522>`_, by Emilio Jesús Gallego Arías).

  - Coq 8.10 doesn't need Camlp5 to build anymore. It now includes a
    fork of the core parsing library that Coq uses, which is a small
    subset of the whole Camlp5 distribution. In particular, this subset
    doesn't depend on the OCaml AST, allowing easier compilation and
    testing on experimental OCaml versions. Coq also ships a new parser
    `coqpp` that plugin authors must switch to
    (`#7902 <https://github.com/rocq-prover/rocq/pull/7902>`_,
    `#7979 <https://github.com/rocq-prover/rocq/pull/7979>`_,
    `#8161 <https://github.com/rocq-prover/rocq/pull/8161>`_,
    `#8667 <https://github.com/rocq-prover/rocq/pull/8667>`_,
    and `#8945 <https://github.com/rocq-prover/rocq/pull/8945>`_,
    by Pierre-Marie Pédrot and Emilio Jesús Gallego Arias).

    The Coq developers would like to thank Daniel de Rauglaudre for many
    years of continued support.

  - Coq now supports building with Dune, in addition to the traditional
    Makefile which is scheduled for deprecation
    (`#6857 <https://github.com/rocq-prover/rocq/pull/6857>`_,
    by Emilio Jesús Gallego Arias, with help from Rudi Grinberg).

    Experimental support for building Coq projects has been integrated
    in Dune at the same time, providing an `improved experience
    <https://coq.discourse.group/t/a-guide-to-building-your-coq-libraries-and-plugins-with-dune/>`_
    for plugin developers. We thank the Dune team for their work
    supporting Coq.

Version 8.10 also comes with a bunch of smaller-scale changes and
improvements regarding the different components of the system, including
many additions to the standard library (see the next subsection for details).

On the implementation side, the ``dev/doc/changes.md`` file documents
the numerous changes to the implementation and improvements of
interfaces. The file provides guidelines on porting a plugin to the new
version and a plugin development tutorial originally made by Yves Bertot
is now in `doc/plugin_tutorial`. The ``dev/doc/critical-bugs`` file
documents the known critical bugs of Coq and affected releases.

The efficiency of the whole system has seen improvements thanks to
contributions from Gaëtan Gilbert, Pierre-Marie Pédrot, and Maxime Dénès.

Maxime Dénès, Emilio Jesús Gallego Arias, Gaëtan Gilbert, Michael
Soegtrop, Théo Zimmermann worked on maintaining and improving the
continuous integration system and package building infrastructure.
Coq is now continuously tested against the OCaml trunk, in addition to the
oldest supported and latest OCaml releases.

Coq's documentation for the development branch is now deployed
continuously at https://coq.github.io/doc/master/api (documentation of
the ML API), https://coq.github.io/doc/master/refman (reference
manual), and https://coq.github.io/doc/master/stdlib (documentation of
the standard library). Similar links exist for the `v8.10` branch.

The opam repository for Coq packages has been maintained by Guillaume
Melquiond, Matthieu Sozeau, Enrico Tassi (who migrated it to opam 2)
with contributions from many users. A list of packages is available at
https://coq.inria.fr/opam/www/.

The 61 contributors to this version are Tanaka Akira, Benjamin
Barenblat, Yves Bertot, Frédéric Besson, Lasse Blaauwbroek, Martin
Bodin, Joachim Breitner, Tej Chajed, Frédéric Chapoton, Arthur
Charguéraud, Cyril Cohen, Lukasz Czajka, David A. Dalrymple, Christian
Doczkal, Maxime Dénès, Andres Erbsen, Jim Fehrle, Emilio Jesus Gallego
Arias, Gaëtan Gilbert, Matěj Grabovský, Simon Gregersen, Jason Gross,
Samuel Gruetter, Hugo Herbelin, Jasper Hugunin, Mirai Ikebuchi,
Chantal Keller, Matej Košík, Sam Pablo Kuper, Vincent Laporte, Olivier
Laurent, Larry Darryl Lee Jr, Nick Lewycky, Yao Li, Yishuai Li, Assia
Mahboubi, Simon Marechal, Erik Martin-Dorel, Thierry Martinez,
Guillaume Melquiond, Kayla Ngan, Karl Palmskog, Pierre-Marie Pédrot,
Clément Pit-Claudel, Pierre Roux, Kazuhiko Sakaguchi, Ryan Scott,
Vincent Semeria, Gan Shen, Michael Soegtrop, Matthieu Sozeau, Enrico
Tassi, Laurent Théry, Kamil Trzciński, whitequark, Théo Winterhalter,
Xia Li-yao, Beta Ziliani and Théo Zimmermann.

Many power users helped to improve the design of the new features via
the issue and pull request system, the Coq development mailing list,
the coq-club@inria.fr mailing list or the new Discourse forum. It would
be impossible to mention exhaustively the names of everybody who to some
extent influenced the development.

Version 8.10 is the fifth release of Coq developed on a time-based
development cycle. Its development spanned 6 months from the release of
Coq 8.9. Vincent Laporte is the release manager and maintainer of this
release. This release is the result of ~2500 commits and ~650 PRs merged,
closing 150+ issues.

| Santiago de Chile, April 2019,
| Matthieu Sozeau for the Coq development team
|

Other changes in 8.10+beta1
~~~~~~~~~~~~~~~~~~~~~~~~~~~

- Command-line tools and options:

  - The use of `coqtop` as a compiler has been deprecated, in favor of
    `coqc`. Consequently option `-compile` will stop to be accepted in
    the next release. `coqtop` is now reserved to interactive
    use
    (`#9095 <https://github.com/rocq-prover/rocq/pull/9095>`_,
    by Emilio Jesús Gallego Arias).

  - New option ``-topfile filename``, which will set the current module name
    (*à la* ``-top``) based on the filename passed, taking into account the
    proper ``-R``/``-Q`` options. For example, given ``-R Foo foolib`` using
    ``-topfile foolib/bar.v`` will set the module name to ``Foo.Bar``.
    CoqIDE now properly sets the module name for a given file based on
    its path
    (`#8991 <https://github.com/rocq-prover/rocq/pull/8991>`_,
    closes `#8989 <https://github.com/rocq-prover/rocq/issues/8989>`_,
    by Gaëtan Gilbert).

  - Experimental: Coq flags and options can now be set on the
    command-line, e.g. ``-set "Universe Polymorphism=true"``
    (`#9876 <https://github.com/rocq-prover/rocq/pull/9876>`_, by Gaëtan Gilbert).

  - The `-native-compiler` flag of `coqc` and `coqtop` now takes an
    argument which can have three values:

    - `no` disables native_compute
    - `yes` enables native_compute and precompiles `.v` files to
      native code
    - `ondemand` enables native_compute but compiles code only when
      `native_compute` is called

    The default value is `ondemand`. Note that this flag now has
    priority over the configure flag of the same name.

    A new `-bytecode-compiler` flag for `coqc` and `coqtop` controls
    whether conversion can use the VM. The default value is `yes`.

    (`#8870 <https://github.com/rocq-prover/rocq/pull/8870>`_, by Maxime Dénès)

  - The pretty timing diff scripts (flag `TIMING=1` to a
    `coq_makefile`\-made `Makefile`, also
    `tools/make-both-single-timing-files.py`,
    `tools/make-both-time-files.py`, and `tools/make-one-time-file.py`)
    now correctly support non-UTF-8 characters in the output of
    `coqc` / `make` as well as printing to stdout, on both python2 and
    python3
    (`#9872 <https://github.com/rocq-prover/rocq/pull/9872>`_,
    closes `#9767 <https://github.com/rocq-prover/rocq/issues/9767>`_
    and `#9705 <https://github.com/rocq-prover/rocq/issues/9705>`_,
    by Jason Gross)

  - coq_makefile's install target now errors if any file to install is missing
    (`#9906 <https://github.com/rocq-prover/rocq/pull/9906>`_, by Gaëtan Gilbert).

  - Preferences from ``coqide.keys`` are no longer overridden by
    modifiers preferences in ``coqiderc``
    (`#10014 <https://github.com/rocq-prover/rocq/pull/10014>`_, by Hugo Herbelin).

- Specification language, type inference:

  - Fixing a missing check in interpreting instances of existential
    variables that are bound to local definitions. Might exceptionally
    induce an overhead if the cost of checking the conversion of the
    corresponding definitions is additionally high
    (`#8217 <https://github.com/rocq-prover/rocq/pull/8217>`_,
    closes `#8215 <https://github.com/rocq-prover/rocq/issues/8215>`_,
    by Hugo Herbelin).

  - A few improvements in inference of the return clause of `match` that
    can exceptionally introduce incompatibilities. This can be
    solved by writing an explicit `return` clause, sometimes even simply
    an explicit `return _` clause
    (`#262 <https://github.com/rocq-prover/rocq/pull/262>`_, by Hugo Herbelin).

  - Using non-projection values with the projection syntax is not
    allowed. For instance :g:`0.(S)` is not a valid way to write :g:`S 0`.
    Projections from non-primitive (emulated) records are allowed with
    warning "nonprimitive-projection-syntax"
    (`#8829 <https://github.com/rocq-prover/rocq/pull/8829>`_, by Gaëtan Gilbert).

  - An option and attributes to control the automatic decision to declare
    an inductive type as template polymorphic were added.  Warning
    "auto-template" (off by default) can trigger when an inductive is
    automatically declared template polymorphic without the attribute.

    Inductive types declared by Funind will never be template polymorphic.

    (`#8488 <https://github.com/rocq-prover/rocq/pull/8488>`_, by Gaëtan Gilbert)

- Notations:

  - New command :cmd:`Declare Scope` to explicitly declare a scope name
    before any use of it. Implicit declaration of a scope at the time of
    :cmd:`Bind Scope`, :cmd:`Delimit Scope`, :cmd:`Undelimit Scope`,
    or :cmd:`Notation` is deprecated
    (`#7135 <https://github.com/rocq-prover/rocq/pull/7135>`_, by Hugo Herbelin).

  - Various bugs have been fixed (e.g. `#9214
    <https://github.com/rocq-prover/rocq/pull/9214>`_ on removing spurious
    parentheses on abbreviations shortening a strict prefix of an
    application, by Hugo Herbelin).

  - :cmd:`Number Notation` now support inductive types in the input to
    printing functions (e.g., numeral notations can be defined for terms
    containing things like :g:`@cons nat O O`), and parsing functions now
    fully normalize terms including parameters of constructors (so that,
    e.g., a numeral notation whose parsing function outputs a proof of
    :g:`Nat.gcd x y = 1` will no longer fail to parse due to containing the
    constant :g:`Nat.gcd` in the parameter-argument of :g:`eq_refl`)
    (`#9874 <https://github.com/rocq-prover/rocq/pull/9874>`_,
    closes `#9840 <https://github.com/rocq-prover/rocq/issues/9840>`_
    and `#9844 <https://github.com/rocq-prover/rocq/issues/9844>`_,
    by Jason Gross).

  - Deprecated compatibility notations have actually been
    removed. Uses of these notations are generally easy to fix thanks
    to the hint contained in the deprecation warning emitted by Coq
    8.8 and 8.9.  For projects that require more than a handful of
    such fixes, there is `a script
    <https://gist.github.com/JasonGross/9770653967de3679d131c59d42de6d17#file-replace-notations-py>`_
    that will do it automatically, using the output of ``coqc``
    (`#8638 <https://github.com/rocq-prover/rocq/pull/8638>`_, by Jason Gross).

  - Allow inspecting custom grammar entries by :cmd:`Print Custom Grammar`
    (`#10061 <https://github.com/rocq-prover/rocq/pull/10061>`_,
    fixes `#9681 <https://github.com/rocq-prover/rocq/pull/9681>`_,
    by Jasper Hugunin, review by Pierre-Marie Pédrot and Hugo Herbelin).

- The `quote plugin
  <https://coq.github.io/doc/v8.9/refman/proof-engine/detailed-tactic-examples.html#quote>`_
  was removed. If some users are interested in maintaining this plugin
  externally, the Coq development team can provide assistance for
  extracting the plugin and setting up a new repository
  (`#7894 <https://github.com/rocq-prover/rocq/pull/7894>`_, by Maxime Dénès).

- Ltac:

  - Tactic names are no longer allowed to clash, even if they are not defined in
    the same section. For example, the following is no longer accepted:
    :g:`Ltac foo := idtac. Section S. Ltac foo := fail. End S.`
    (`#8555 <https://github.com/rocq-prover/rocq/pull/8555>`_, by Maxime Dénès).

  - Names of existential variables occurring in Ltac functions
    (e.g. :g:`?[n]` or :g:`?n` in terms - not in patterns) are now interpreted
    the same way as other variable names occurring in Ltac functions
    (`#7309 <https://github.com/rocq-prover/rocq/pull/7309>`_, by Hugo Herbelin).

- Tactics:

  - Removed the deprecated `romega` tactic
    (`#8419 <https://github.com/rocq-prover/rocq/pull/8419>`_,
    by Maxime Dénès and Vincent Laporte).

  - Hint declaration and removal should now specify a database (e.g. `Hint Resolve
    foo : database`). When the database name is omitted, the hint is added to the
    `core` database (as previously), but a deprecation warning is emitted
    (`#8987 <https://github.com/rocq-prover/rocq/pull/8987>`_, by Maxime Dénès).

  - There are now tactics in `PreOmega.v` called
    `Z.div_mod_to_equations`, `Z.quot_rem_to_equations`, and
    `Z.to_euclidean_division_equations` (which combines the `div_mod`
    and `quot_rem` variants) which allow :tacn:`lia`, :tacn:`nia`, etc to
    support `Z.div` and `Z.modulo` (`Z.quot` and `Z.rem`, respectively),
    by posing the specifying equation for `Z.div` and `Z.modulo` before
    replacing them with atoms
    (`#8062 <https://github.com/rocq-prover/rocq/pull/8062>`_, by Jason Gross).

  - The syntax of the :tacn:`autoapply` tactic was fixed to conform with preexisting
    documentation: it now takes a `with` clause instead of a `using` clause
    (`#9524 <https://github.com/rocq-prover/rocq/pull/9524>`_,
    closes `#7632 <https://github.com/rocq-prover/rocq/issues/7632>`_,
    by Théo Zimmermann).

  - Modes are now taken into account by :tacn:`typeclasses eauto` for
    local hypotheses
    (`#9996 <https://github.com/rocq-prover/rocq/pull/9996>`_,
    fixes `#5752 <https://github.com/rocq-prover/rocq/issues/5752>`_,
    by Maxime Dénès, review by Pierre-Marie Pédrot).

  - New variant :tacn:`change_no_check` of :tacn:`change`, usable as a
    documented replacement of `convert_concl_no_check`
    (`#10012 <https://github.com/rocq-prover/rocq/pull/10012>`_,
    `#10017 <https://github.com/rocq-prover/rocq/pull/10017>`_,
    `#10053 <https://github.com/rocq-prover/rocq/pull/10053>`_, and
    `#10059 <https://github.com/rocq-prover/rocq/pull/10059>`_,
    by Hugo Herbelin and Paolo G. Giarrusso).

  - The simplified value returned by :tacn:`field_simplify` is not
    always a fraction anymore.  When the denominator is :g:`1`, it
    returns :g:`x` while previously it was returning :g:`x/1`.  This
    change could break codes that were post-processing application of
    :tacn:`field_simplify` to get rid of these :g:`x/1`
    (`#9854 <https://github.com/rocq-prover/rocq/pull/9854>`_,
    by Laurent Théry,
    with help from Michael Soegtrop, Maxime Dénès, and Vincent Laporte).

- SSReflect:

  - Clear discipline made consistent across the entire proof language.
    Whenever a clear switch `{x..}` comes immediately before an existing proof
    context entry (used as a view, as a rewrite rule or as name for a new
    context entry) then such entry is cleared too.

    E.g. The following sentences are elaborated as follows (when H is an existing
    proof context entry):

    - `=> {x..} H`       ->  `=> {x..H} H`
    - `=> {x..} /H`      ->  `=> /v {x..H}`
    - `rewrite {x..} H`  ->  `rewrite E {x..H}`

    (`#9341 <https://github.com/rocq-prover/rocq/pull/9341>`_, by Enrico Tassi).

  - `inE` now expands `y \in r x` when `r` is a `simpl_rel`.
    New `{pred T}` notation for a `pred T` alias in the `pred_sort` coercion
    class, simplified `predType` interface: `pred_class` and `mkPredType`
    deprecated, `{pred T}` and `PredType` should be used instead.
    `if c return t then ...` now expects `c` to be a variable bound in `t`.
    New `nonPropType` interface matching types that do _not_ have sort `Prop`.
    New `relpre R f` definition for the preimage of a relation R under f
    (`#9995 <https://github.com/rocq-prover/rocq/pull/9995>`_, by Georges Gonthier).

- Commands:

  - Binders for an :cmd:`Instance` now act more like binders for a :cmd:`Theorem`.
    Names may not be repeated, and may not overlap with section variable names
    (`#8820 <https://github.com/rocq-prover/rocq/pull/8820>`_,
    closes `#8791 <https://github.com/rocq-prover/rocq/issues/8791>`_,
    by Jasper Hugunin).

  - Removed the deprecated `Implicit Tactic` family of commands
    (`#8779 <https://github.com/rocq-prover/rocq/pull/8779>`_, by Pierre-Marie Pédrot).

  - The `Automatic Introduction` option has been removed and is now the
    default
    (`#9001 <https://github.com/rocq-prover/rocq/pull/9001>`_,
    by Emilio Jesús Gallego Arias).

  - `Arguments` now accepts names for arguments provided with `extra_scopes`
    (`#9117 <https://github.com/rocq-prover/rocq/pull/9117>`_, by Maxime Dénès).

  - The naming scheme for anonymous binders in a `Theorem` has changed to
    avoid conflicts with explicitly named binders
    (`#9160 <https://github.com/rocq-prover/rocq/pull/9160>`_,
    closes `#8819 <https://github.com/rocq-prover/rocq/issues/8819>`_,
    by Jasper Hugunin).

  - Computation of implicit arguments now properly handles local definitions in the
    binders for an `Instance`, and can be mixed with implicit binders `{x : T}`
    (`#9307 <https://github.com/rocq-prover/rocq/pull/9307>`_,
    closes `#9300 <https://github.com/rocq-prover/rocq/issues/9300>`_,
    by Jasper Hugunin).

  - :cmd:`Declare Instance` now requires an instance name.

    The flag `Refine Instance Mode` has been turned off by default, meaning that
    :cmd:`Instance` no longer opens a proof when a body is provided. The flag
    has been deprecated and will be removed in the next version.

    (`#9270 <https://github.com/rocq-prover/rocq/pull/9270>`_,
    and `#9825 <https://github.com/rocq-prover/rocq/pull/9825>`_,
    by Maxime Dénès)

  - Command :cmd:`Instance`, when no body is provided, now always opens
    a proof. This is a breaking change, as instance of :n:`Instance
    @ident__1 : @ident__2.` where :n:`@ident__2` is a trivial class will
    have to be changed into :n:`Instance @ident__1 : @ident__2 := %{%}.`
    or :n:`Instance @ident__1 : @ident__2. Proof. Qed.`
    (`#9274 <https://github.com/rocq-prover/rocq/pull/9274>`_, by Maxime Dénès).

  - The flag :flag:`Program Mode` now means that the `Program` attribute is enabled
    for all commands that support it. In particular, it does not have any effect
    on tactics anymore. May cause some incompatibilities
    (`#9410 <https://github.com/rocq-prover/rocq/pull/9410>`_, by Maxime Dénès).

  - The algorithm computing implicit arguments now behaves uniformly for primitive
    projection and application nodes
    (`#9509 <https://github.com/rocq-prover/rocq/pull/9509>`_,
    closes `#9508 <https://github.com/rocq-prover/rocq/issues/9508>`_,
    by Pierre-Marie Pédrot).

  - :cmd:`Hypotheses` and :cmd:`Variables` can now take implicit
    binders inside sections
    (`#9364 <https://github.com/rocq-prover/rocq/pull/9364>`_,
    closes `#9363 <https://github.com/rocq-prover/rocq/issues/9363>`_,
    by Jasper Hugunin).

  - Removed deprecated option `Automatic Coercions Import`
    (`#8094 <https://github.com/rocq-prover/rocq/pull/8094>`_, by Maxime Dénès).

  - The ``Show Script`` command has been deprecated
    (`#9829 <https://github.com/rocq-prover/rocq/pull/9829>`_, by Vincent Laporte).

  - :cmd:`Coercion` does not warn ambiguous paths which are obviously
    convertible with existing ones. The ambiguous paths messages have been
    turned to warnings, thus now they could appear in the output of ``coqc``.
    The convertibility checking procedure for coercion paths is complete for
    paths consisting of coercions satisfying the uniform inheritance condition,
    but some coercion paths could be reported as ambiguous even if they are
    convertible with existing ones when they have coercions that don't satisfy
    the uniform inheritance condition
    (`#9743 <https://github.com/rocq-prover/rocq/pull/9743>`_,
    closes `#3219 <https://github.com/rocq-prover/rocq/issues/3219>`_,
    by Kazuhiko Sakaguchi).

  - A new flag :flag:`Fast Name Printing` has been introduced. It changes the
    algorithm used for allocating bound variable names for a faster but less
    clever one
    (`#9078 <https://github.com/rocq-prover/rocq/pull/9078>`_, by Pierre-Marie Pédrot).

  - Option ``Typeclasses Axioms Are Instances`` (compatibility option
    introduced in the previous version) is deprecated. Use :cmd:`Declare
    Instance` for axioms which should be instances
    (`#8920 <https://github.com/rocq-prover/rocq/pull/8920>`_, by Gaëtan Gilbert).

  - Removed option `Printing Primitive Projection Compatibility`
    (`#9306 <https://github.com/rocq-prover/rocq/pull/9306>`_, by Gaëtan Gilbert).

- Standard Library:

  - Added `Bvector.BVeq` that decides whether two `Bvector`\s are equal.
    Added notations for `BVxor`, `BVand`, `BVor`, `BVeq` and `BVneg`
    (`#8171 <https://github.com/rocq-prover/rocq/pull/8171>`_, by Yishuai Li).

  - Added `ByteVector` type that can convert to and from `string`
    (`#8365 <https://github.com/rocq-prover/rocq/pull/8365>`_, by Yishuai Li).

  - Added lemmas about monotonicity of `N.double` and `N.succ_double`, and about
    the upper bound of number represented by a vector.
    Allowed implicit vector length argument in `Ndigits.Bv2N`
    (`#8815 <https://github.com/rocq-prover/rocq/pull/8815>`_, by Yishuai Li).

  - The prelude used to be automatically Exported and is now only
    Imported. This should be relevant only when importing files which
    don't use `-noinit` into files which do
    (`#9013 <https://github.com/rocq-prover/rocq/pull/9013>`_, by Gaëtan Gilbert).

  - Added `Coq.Structures.OrderedTypeEx.String_as_OT` to make strings an
    ordered type, using lexical order
    (`#7221 <https://github.com/rocq-prover/rocq/pull/7221>`_, by Li Yao).

  - Added lemmas about `Z.testbit`, `Z.ones`, and `Z.modulo`
    (`#9425 <https://github.com/rocq-prover/rocq/pull/9425>`_, by Andres Erbsen).

  - Moved the `auto` hints of the `FSet` library into a new
    `fset` database
    (`#9725 <https://github.com/rocq-prover/rocq/pull/9725>`_, by Frédéric Besson).

  - Added :g:`Coq.Structures.EqualitiesFacts.PairUsualDecidableTypeFull`
    (`#9984 <https://github.com/rocq-prover/rocq/pull/9984>`_,
    by Jean-Christophe Léchenet and Oliver Nash).

- Some error messages that show problems with a pair of non-matching
  values will now highlight the differences
  (`#8669 <https://github.com/rocq-prover/rocq/pull/8669>`_, by Jim Fehrle).

- Changelog has been moved from a specific file `CHANGES.md` to the
  reference manual; former Credits chapter of the reference manual has
  been split in two parts: a History chapter which was enriched with
  additional historical information about Coq versions 1 to 5, and a
  Changes chapter which was enriched with the content formerly in
  `CHANGES.md` and `COMPATIBILITY`
  (`#9133 <https://github.com/rocq-prover/rocq/pull/9133>`_,
  `#9668 <https://github.com/rocq-prover/rocq/pull/9668>`_,
  `#9939 <https://github.com/rocq-prover/rocq/pull/9939>`_,
  `#9964 <https://github.com/rocq-prover/rocq/pull/9964>`_,
  and `#10085 <https://github.com/rocq-prover/rocq/pull/10085>`_,
  by Théo Zimmermann,
  with help and ideas from Emilio Jesús Gallego Arias, Gaëtan
  Gilbert, Clément Pit-Claudel, Matthieu Sozeau, and Enrico Tassi).

Changes in 8.10+beta2
~~~~~~~~~~~~~~~~~~~~~

Many bug fixes and documentation improvements, in particular:

**Tactics**

- Make the :tacn:`discriminate` tactic work together with
  :flag:`Universe Polymorphism` and equality in :g:`Type`. This,
  in particular, makes :tacn:`discriminate` compatible with the HoTT
  library https://github.com/HoTT/HoTT
  (`#10205 <https://github.com/rocq-prover/rocq/pull/10205>`_,
  by Andreas Lynge, review by Pierre-Marie Pédrot and Matthieu Sozeau).

**SSReflect**

- Make the ``case E: t`` tactic work together with
  :flag:`Universe Polymorphism` and equality in :g:`Type`.
  This makes :tacn:`case <case (ssreflect)>` compatible with the HoTT
  library https://github.com/HoTT/HoTT
  (`#10302 <https://github.com/rocq-prover/rocq/pull/10302>`_,
  fixes `#10301 <https://github.com/rocq-prover/rocq/issues/10301>`_,
  by Andreas Lynge, review by Enrico Tassi)
- Make the ``rewrite /t`` tactic work together with
  :flag:`Universe Polymorphism`.
  This makes :tacn:`rewrite <rewrite (ssreflect)>` compatible with the HoTT
  library https://github.com/HoTT/HoTT
  (`#10305 <https://github.com/rocq-prover/rocq/pull/10305>`_,
  fixes `#9336 <https://github.com/rocq-prover/rocq/issues/9336>`_,
  by Andreas Lynge, review by Enrico Tassi)

**CoqIDE**

- Fix CoqIDE instability on Windows after the update to gtk3
  (`#10360 <https://github.com/rocq-prover/rocq/pull/10360>`_, by Michael Soegtrop,
  closes `#9885 <https://github.com/rocq-prover/rocq/issues/9885>`_).

**Miscellaneous**

- Proof General can now display Coq-generated diffs between proof steps
  in color
  (`#10019 <https://github.com/rocq-prover/rocq/pull/10019>`_ and
  (in Proof General) `#421 <https://github.com/ProofGeneral/PG/pull/421>`_,
  by Jim Fehrle).

Changes in 8.10+beta3
~~~~~~~~~~~~~~~~~~~~~

**Kernel**

- Fix soundness issue with template polymorphism (`#9294
  <https://github.com/rocq-prover/rocq/issues/9294>`_).

  Declarations of template-polymorphic inductive types ignored the
  provenance of the universes they were abstracting on and did not
  detect if they should be greater or equal to :math:`\Set` in
  general. Previous universes and universes introduced by the inductive
  definition could have constraints that prevented their instantiation
  with e.g. :math:`\Prop`, resulting in unsound instantiations later. The
  implemented fix only allows abstraction over universes introduced by
  the inductive declaration, and properly records all their constraints
  by making them by default only :math:`>= \Prop`. It is also checked
  that a template polymorphic inductive actually is polymorphic on at
  least one universe.

  This prevents inductive declarations in sections to be universe
  polymorphic over section parameters. For a backward compatible fix,
  simply hoist the inductive definition out of the section.
  An alternative is to declare the inductive as universe-polymorphic and
  cumulative in a universe-polymorphic section: all universes and
  constraints will be properly gathered in this case.
  See :ref:`Template-polymorphism` for a detailed exposition of the
  rules governing template-polymorphic types.

  To help users incrementally fix this issue, a command line option
  `-no-template-check` and a global flag ``Template Check`` are
  available to selectively disable the new check. Use at your own risk.

  (`#9918 <https://github.com/rocq-prover/rocq/pull/9918>`_, by Matthieu Sozeau
  and Maxime Dénès).

**User messages**

- Improve the ambiguous paths warning to indicate which path is ambiguous with
  new one
  (`#10336 <https://github.com/rocq-prover/rocq/pull/10336>`_,
  closes `#3219 <https://github.com/rocq-prover/rocq/issues/3219>`_,
  by Kazuhiko Sakaguchi).

**Extraction**

- Fix extraction to OCaml of primitive machine integers;
  see :ref:`primitive-integers`
  (`#10430 <https://github.com/rocq-prover/rocq/pull/10430>`_,
  fixes `#10361 <https://github.com/rocq-prover/rocq/issues/10361>`_,
  by Vincent Laporte).
- Fix a printing bug of OCaml extraction on dependent record projections, which
  produced improper `assert false`. This change makes the OCaml extractor
  internally inline record projections by default; thus the monolithic OCaml
  extraction (:cmd:`Extraction` and :cmd:`Recursive Extraction`) does not
  produce record projection constants anymore except for record projections
  explicitly instructed to extract, and records declared in opaque modules
  (`#10577 <https://github.com/rocq-prover/rocq/pull/10577>`_,
  fixes `#7348 <https://github.com/rocq-prover/rocq/issues/7348>`_,
  by Kazuhiko Sakaguchi).

**Standard library**

- Added ``splitat`` function and lemmas about ``splitat`` and ``uncons``
  (`#9379 <https://github.com/rocq-prover/rocq/pull/9379>`_,
  by Yishuai Li, with help of Konstantinos Kallas,
  follow-up of `#8365 <https://github.com/rocq-prover/rocq/pull/8365>`_,
  which added ``uncons`` in 8.10+beta1).

Changes in 8.10.0
~~~~~~~~~~~~~~~~~

- Micromega tactics (:tacn:`lia`, :tacn:`nia`, etc) are no longer confused by
  primitive projections (`#10806 <https://github.com/rocq-prover/rocq/pull/10806>`_,
  fixes `#9512 <https://github.com/rocq-prover/rocq/issues/9512>`_
  by Vincent Laporte).

Changes in 8.10.1
~~~~~~~~~~~~~~~~~

A few bug fixes and documentation improvements, in particular:

**Kernel**

- Fix proof of False when using |SProp| (incorrect De Bruijn handling
  when inferring the relevance mark of a function) (`#10904
  <https://github.com/rocq-prover/rocq/pull/10904>`_, by Pierre-Marie Pédrot).

**Tactics**

- Fix an anomaly when unsolved evar in :cmd:`Add Ring`
  (`#10891 <https://github.com/rocq-prover/rocq/pull/10891>`_,
  fixes `#9851 <https://github.com/rocq-prover/rocq/issues/9851>`_,
  by Gaëtan Gilbert).

**Tactic language**

- Fix Ltac regression in binding free names in uconstr
  (`#10899 <https://github.com/rocq-prover/rocq/pull/10899>`_,
  fixes `#10894 <https://github.com/rocq-prover/rocq/issues/10894>`_,
  by Hugo Herbelin).

**CoqIDE**

- Fix handling of unicode input before space
  (`#10852 <https://github.com/rocq-prover/rocq/pull/10852>`_,
  fixes `#10842 <https://github.com/rocq-prover/rocq/issues/10842>`_,
  by Arthur Charguéraud).

**Extraction**

- Fix custom extraction of inductives to JSON
  (`#10897 <https://github.com/rocq-prover/rocq/pull/10897>`_,
  fixes `#4741 <https://github.com/rocq-prover/rocq/issues/4741>`_,
  by Helge Bahmann).

Changes in 8.10.2
~~~~~~~~~~~~~~~~~

**Kernel**

- Fixed a critical bug of template polymorphism and nonlinear universes
  (`#11128 <https://github.com/rocq-prover/rocq/pull/11128>`_,
  fixes `#11039 <https://github.com/rocq-prover/rocq/issues/11039>`_,
  by Gaëtan Gilbert).

- Fixed an anomaly “Uncaught exception Constr.DestKO” on :g:`Inductive`
  (`#11052 <https://github.com/rocq-prover/rocq/pull/11052>`_,
  fixes `#11048 <https://github.com/rocq-prover/rocq/issues/11048>`_,
  by Gaëtan Gilbert).

- Fixed an anomaly “not enough abstractions in fix body”
  (`#11014 <https://github.com/rocq-prover/rocq/pull/11014>`_,
  fixes `#8459 <https://github.com/rocq-prover/rocq/issues/8459>`_,
  by Gaëtan Gilbert).

**Notations**

- Fixed an 8.10 regression related to the printing of coercions associated with notations
  (`#11090 <https://github.com/rocq-prover/rocq/pull/11090>`_,
  fixes `#11033 <https://github.com/rocq-prover/rocq/issues/11033>`_, by Hugo Herbelin).

**CoqIDE**

- Fixed uneven dimensions of CoqIDE panels when window has been resized
  (`#11070 <https://github.com/rocq-prover/rocq/pull/11070>`_,
  fixes 8.10-regression `#10956 <https://github.com/rocq-prover/rocq/issues/10956>`_,
  by Guillaume Melquiond).

- Do not include final stops in queries
  (`#11069 <https://github.com/rocq-prover/rocq/pull/11069>`_,
  fixes 8.10-regression `#11058 <https://github.com/rocq-prover/rocq/issues/11058>`_,
  by Guillaume Melquiond).

**Infrastructure and dependencies**

- Enable building of executables when they are running
  (`#11000 <https://github.com/rocq-prover/rocq/pull/11000>`_,
  fixes 8.9-regression `#10728 <https://github.com/rocq-prover/rocq/issues/10728>`_,
  by Gaëtan Gilbert).

Version 8.9
-----------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.9 contains the result of refinements and stabilization
of features and deprecations or removals of deprecated features,
cleanups of the internals of the system and API along with a few new
features. This release includes many user-visible changes, including
deprecations that are documented in the next subsection and new features that
are documented in the reference manual. Here are the most important
changes:

- Kernel: mutually recursive records are now supported, by Pierre-Marie
  Pédrot.

- Notations:

  - Support for autonomous grammars of terms called “custom entries”, by
    Hugo Herbelin (see Section :ref:`custom-entries` of the reference
    manual).

  - Deprecated notations of the standard library will be removed in the
    next version of Coq, see the next subsection for a script to
    ease porting, by Jason Gross and Jean-Christophe Léchenet.

  - Added the :cmd:`Number Notation` command for registering decimal
    numeral notations for custom types, by Daniel de Rauglaudre, Pierre
    Letouzey and Jason Gross.

- Tactics: Introduction tactics :tacn:`intro`/:tacn:`intros` on a goal that is an
  existential variable now force a refinement of the goal into a
  dependent product rather than failing, by Hugo Herbelin.

- Decision procedures: deprecation of tactic ``romega`` in favor of
  :tacn:`lia` and removal of ``fourier``, replaced by :tacn:`lra` which
  subsumes it, by Frédéric Besson, Maxime Dénès, Vincent Laporte and
  Laurent Théry.

- Proof language: focusing bracket ``{`` now supports named
  :ref:`goals <curly-braces>`, e.g. ``[x]:{`` will focus
  on a goal (existential variable) named ``x``, by Théo Zimmermann.

- SSReflect: the implementation of delayed clear was simplified by
  Enrico Tassi: the variables are always renamed using inaccessible
  names when the clear switch is processed and finally cleared at the
  end of the intro pattern. In addition to that, the use-and-discard flag
  ``{}`` typical of rewrite rules can now be also applied to views,
  e.g. ``=> {}/v`` applies ``v`` and then clears ``v``. See Section
  :ref:`introduction_ssr`.

- Vernacular:

  - Experimental support for :term:`attributes <attribute>` on
    commands, by Vincent Laporte, as in ``#[local] Lemma foo : bar.``
    Tactics and tactic notations now support the ``deprecated``
    attribute.

  - Removed deprecated commands ``Arguments Scope`` and ``Implicit
    Arguments`` in favor of :cmd:`Arguments`, with the help of Jasper Hugunin.

  - New flag :flag:`Uniform Inductive Parameters` by Jasper Hugunin to
    avoid repeating uniform parameters in constructor declarations.

  - New commands :cmd:`Hint Variables` and :cmd:`Hint Constants`, by
    Matthieu Sozeau, for controlling the opacity status of variables and
    constants in hint databases. It is recommended to always use these
    commands after creating a hint database with :cmd:`Create HintDb`.

  - Multiple sections with the same name are now allowed, by Jasper
    Hugunin.

- Library: additions and changes in the ``VectorDef``, ``Ascii``, and
  ``String`` libraries. Syntax notations are now available only when using
  ``Import`` of libraries and not merely ``Require``, by various
  contributors (source of incompatibility, see the next subsection for details).

- Toplevels: ``coqtop`` and ``coqide`` can now display diffs between proof
  steps in color, using the :opt:`Diffs` option, by Jim Fehrle.

- Documentation: we integrated a large number of fixes to the new Sphinx
  documentation by various contributors, coordinated by Clément
  Pit-Claudel and Théo Zimmermann.

- Tools: removed the ``gallina`` utility and the homebrewed ``Emacs`` mode.

- Packaging: as in Coq 8.8.2, the Windows installer now includes many
  more external packages that can be individually selected for
  installation, by Michael Soegtrop.

Version 8.9 also comes with a bunch of smaller-scale changes and
improvements regarding the different components of the system.  Most
important ones are documented in the next subsection file.

On the implementation side, the ``dev/doc/changes.md`` file documents
the numerous changes to the implementation and improvements of
interfaces. The file provides guidelines on porting a plugin to the new
version and a plugin development tutorial kept in sync with Coq was
introduced by Yves Bertot http://github.com/ybertot/plugin_tutorials.
The new ``dev/doc/critical-bugs`` file documents the known critical bugs
of Coq and affected releases.

The efficiency of the whole system has seen improvements thanks to
contributions from Gaëtan Gilbert, Pierre-Marie Pédrot, and Maxime Dénès.

Maxime Dénès, Emilio Jesús Gallego Arias, Gaëtan Gilbert, Michael
Soegtrop, Théo Zimmermann worked on maintaining and improving the
continuous integration system.

The opam repository for Coq packages has been maintained by Guillaume
Melquiond, Matthieu Sozeau, Enrico Tassi with contributions from many
users. A list of packages is available at https://coq.inria.fr/opam/www/.

The 54 contributors for this version are Léo Andrès, Rin Arakaki,
Benjamin Barenblat, Langston Barrett, Siddharth Bhat, Martin Bodin,
Simon Boulier, Timothy Bourke, Joachim Breitner, Tej Chajed, Arthur
Charguéraud, Pierre Courtieu, Maxime Dénès, Andres Erbsen, Jim Fehrle,
Julien Forest, Emilio Jesus Gallego Arias, Gaëtan Gilbert, Matěj
Grabovský, Jason Gross, Samuel Gruetter, Armaël Guéneau, Hugo Herbelin,
Jasper Hugunin, Ralf Jung, Sam Pablo Kuper, Ambroise Lafont, Leonidas
Lampropoulos, Vincent Laporte, Peter LeFanu Lumsdaine, Pierre Letouzey,
Jean-Christophe Léchenet, Nick Lewycky, Yishuai Li, Sven M. Hallberg,
Assia Mahboubi, Cyprien Mangin, Guillaume Melquiond, Perry E. Metzger,
Clément Pit-Claudel, Pierre-Marie Pédrot, Daniel R. Grayson, Kazuhiko
Sakaguchi, Michael Soegtrop, Matthieu Sozeau, Paul Steckler, Enrico
Tassi, Laurent Théry, Anton Trunov, whitequark, Théo Winterhalter,
Zeimer, Beta Ziliani, Théo Zimmermann.

Many power users helped to improve the design of the new features via
the issue and pull request system, the Coq development mailing list or
the coq-club@inria.fr mailing list. It would be impossible to mention
exhaustively the names of everybody who to some extent influenced the
development.

Version 8.9 is the fourth release of Coq developed on a time-based
development cycle. Its development spanned 7 months from the release of
Coq 8.8. The development moved to a decentralized merging process
during this cycle. Guillaume Melquiond was in charge of the release
process and is the maintainer of this release. This release is the
result of ~2,000 commits and ~500 PRs merged, closing 75+ issues.

The Coq development team welcomed Vincent Laporte, a new Coq
engineer working with Maxime Dénès in the Coq consortium.

| Paris, November 2018,
| Matthieu Sozeau for the Coq development team
|

Details of changes in 8.9+beta1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Kernel

- Mutually defined records are now supported.

Notations

- New support for autonomous grammars of terms, called "custom
  entries" (see chapter "Syntax extensions" of the reference manual).

- Deprecated compatibility notations will actually be removed in the
  next version of Coq.  Uses of these notations are generally easy to
  fix thanks to the hint contained in the deprecation warnings. For
  projects that require more than a handful of such fixes, there is `a
  script
  <https://gist.github.com/JasonGross/9770653967de3679d131c59d42de6d17#file-replace-notations-py>`_
  that will do it automatically, using the output of ``coqc``. The script
  contains documentation on its usage in a comment at the top.

Tactics

- Added toplevel goal selector `!` which expects a single focused goal.
  Use with `Set Default Goal Selector` to force focusing before tactics
  are called.

- The undocumented "nameless" forms `fix N`, `cofix` that were
  deprecated in 8.8 have been removed from Ltac's syntax; please use
  `fix ident N/cofix ident` to explicitly name the (co)fixpoint
  hypothesis to be introduced.

- Introduction tactics `intro`/`intros` on a goal that is an
  existential variable now force a refinement of the goal into a
  dependent product rather than failing.

- Support for `fix`/`cofix` added in Ltac `match` and `lazymatch`.

- Ltac backtraces now include trace information about tactics
  called by OCaml-defined tactics.

- Option `Ltac Debug` now applies also to terms built using Ltac functions.

- Deprecated the `Implicit Tactic` family of commands.

- The default program obligation tactic uses a bounded proof search
  instead of an unbounded and potentially non-terminating one now
  (source of incompatibility).

- The `simple apply` tactic now respects the `Opaque` flag when called from
  Ltac (`auto` still does not respect it).

- Tactic `constr_eq` now adds universe constraints needed for the
  identity to the context (it used to ignore them). New tactic
  `constr_eq_strict` checks that the required constraints already hold
  without adding new ones. Preexisting tactic `constr_eq_nounivs` can
  still be used if you really want to ignore universe constraints.

- Tactics and tactic notations now understand the `deprecated` attribute.
- The `fourier` tactic has been removed. Please now use `lra` instead. You
  may need to add `Require Import Lra` to your developments. For compatibility,
  we now define `fourier` as a deprecated alias of `lra`.

- The `romega` tactics have been deprecated; please use `lia` instead.

Focusing

- Focusing bracket `{` now supports named goal selectors,
  e.g. `[x]: {` will focus on a goal (existential variable) named `x`.
  As usual, unfocus with `}` once the subgoal is fully solved.

Specification language

- A fix to unification (which was sensitive to the ascii name of
  variables) may occasionally change type inference in incompatible
  ways, especially regarding the inference of the return clause of `match`.

Standard Library

- Added `Ascii.eqb` and `String.eqb` and the `=?` notation for them,
  and proved some lemmas about them.  Note that this might cause
  incompatibilities if you have, e.g., `string_scope` and `Z_scope` both
  open with `string_scope` on top, and expect `=?` to refer to `Z.eqb`.
  Solution: wrap `_ =? _` in `(_ =? _)%Z` (or whichever scope you
  want).

- Added `Ndigits.N2Bv_sized`, and proved some lemmas about it.
  Deprecated `Ndigits.N2Bv_gen`.

- The scopes `int_scope` and `uint_scope` have been renamed to
  `dec_int_scope` and `dec_uint_scope`, to clash less with ssreflect
  and other packages.  They are still delimited by `%int` and `%uint`.

- Syntax notations for `string`, `ascii`, `Z`, `positive`, `N`, `R`,
  and `int31` are no longer available merely by :cmd:`Require`\ing the files
  that define the inductives.  You must :cmd:`Import` `Coq.Strings.String.StringSyntax`
  (after `Require` `Coq.Strings.String`), `Coq.Strings.Ascii.AsciiSyntax` (after
  `Require` `Coq.Strings.Ascii`), `Coq.ZArith.BinIntDef`, `Coq.PArith.BinPosDef`,
  `Coq.NArith.BinNatDef`, `Coq.Reals.Rdefinitions`, and
  `Coq.Numbers.Cyclic.Int31.Int31`, respectively, to be able to use
  these notations.  Note that passing `-compat 8.8` or issuing
  `Require Import Coq.Compat.Coq88` will make these notations
  available.  Users wishing to port their developments automatically
  may download `fix.py` from
  https://gist.github.com/JasonGross/5d4558edf8f5c2c548a3d96c17820169
  and run a command like `while true; do make -Okj 2>&1 |
  /path/to/fix.py; done` and get a cup of coffee.  (This command must
  be manually interrupted once the build finishes all the way though.
  Note also that this method is not fail-proof; you may have to adjust
  some scopes if you were relying on string notations not being
  available even when `string_scope` was open.)

- Numeral syntax for `nat` is no longer available without loading the
  entire prelude (`Require Import Coq.Init.Prelude`).  This only
  impacts users running Coq without the init library (`-nois` or
  `-noinit`) and also issuing `Require Import Coq.Init.Datatypes`.

Tools

- Coq_makefile lets one override or extend the following variables from
  the command line: `COQFLAGS`, `COQCHKFLAGS`, `COQDOCFLAGS`.
  `COQFLAGS` is now entirely separate from `COQLIBS`, so in custom Makefiles
  `$(COQFLAGS)` should be replaced by `$(COQFLAGS) $(COQLIBS)`.

- Removed the `gallina` utility (extracts specification from Coq vernacular files).
  If you would like to maintain this tool externally, please contact us.

- Removed the Emacs modes distributed with Coq. You are advised to
  use `Proof-General <https://proofgeneral.github.io/>`_ (and optionally
  `Company-Coq <https://github.com/cpitclaudel/company-coq>`_) instead.
  If your use case is not covered by these alternative Emacs modes,
  please open an issue. We can help set up external maintenance as part
  of Proof-General, or independently as part of coq-community.

Commands

- Removed deprecated commands `Arguments Scope` and `Implicit Arguments`
  (not the option). Use the `Arguments` command instead.
- Nested proofs may be enabled through the option `Nested Proofs Allowed`.
  By default, they are disabled and produce an error. The deprecation
  warning which used to occur when using nested proofs has been removed.
- Added option `Uniform Inductive Parameters` which abstracts over parameters
  before typechecking constructors, allowing to write for example
  `Inductive list (A : Type) := nil : list | cons : A -> list -> list.`
- New `Set Hint Variables/Constants Opaque/Transparent` commands for setting
  globally the opacity flag of variables and constants in hint databases,
  overriding the opacity setting of the hint database.
- Added generic syntax for "attributes", as in:
  `#[local] Lemma foo : bar.`
- Added the `Numeral Notation` command for registering decimal numeral
  notations for custom types
- The `Set SsrHave NoTCResolution` command no longer has special global
  scope. If you want the previous behavior, use `Global Set SsrHave
  NoTCResolution`.
- Multiple sections with the same name are allowed.

Coq binaries and process model

- Before 8.9, Coq distributed a single `coqtop` binary and a set of
  dynamically loadable plugins that used to take over the main loop
  for tasks such as IDE language server or parallel proof checking.

  These plugins have been turned into full-fledged binaries so each
  different process has associated a particular binary now, in
  particular `coqidetop` is the CoqIDE language server, and
  `coq{proof,tactic,query}worker` are in charge of task-specific and
  parallel proof checking.

SSReflect

- The implementation of delayed clear switches in intro patterns
  is now simpler to explain:

  1. The immediate effect of a clear switch like `{x}` is to rename the
     variable `x` to `_x_` (i.e. a reserved identifier that cannot be mentioned
     explicitly)
  2. The delayed effect of `{x}` is that `_x_` is cleared at the end of the intro
     pattern
  3. A clear switch immediately before a view application like `{x}/v` is
     translated to `/v{x}`.

  In particular, the third rule lets one write `{x}/v` even if `v` uses the variable `x`:
  indeed the view is executed before the renaming.

- An empty clear switch is now accepted in intro patterns before a
  view application whenever the view is a variable.
  One can now write `{}/v` to mean `{v}/v`.  Remark that `{}/x` is very similar
  to the idiom `{}e` for the rewrite tactic (the equation `e` is used for
  rewriting and then discarded).

Standard Library

- There are now conversions between `string` and `positive`, `Z`,
  `nat`, and `N` in binary, octal, and hex.

Display diffs between proof steps

- `coqtop` and `coqide` can now highlight the differences between proof steps
  in color. This can be enabled from the command line or the
  `Set Diffs "on"/"off"/"removed"` command. Please see the documentation for
  details.  Showing diffs in Proof General requires small changes to PG
  (under discussion).

Notations

- Added `++` infix for `VectorDef.append`.
  Note that this might cause incompatibilities if you have, e.g., `list_scope`
  and `vector_scope` both open with `vector_scope` on top, and expect `++` to
  refer to `app`.
  Solution: wrap `_ ++ _` in `(_ ++ _)%list` (or whichever scope you want).

Changes in 8.8.0
~~~~~~~~~~~~~~~~

Various bug fixes.

Changes in 8.8.1
~~~~~~~~~~~~~~~~

- Some quality-of-life fixes.
- Numerous improvements to the documentation.
- Fix a critical bug related to primitive projections and :tacn:`native_compute`.
- Ship several additional Coq libraries with the Windows installer.

Version 8.8
-----------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.8 contains the result of refinements and stabilization of
features and deprecations, cleanups of the internals of the system along
with a few new features. The main user visible changes are:

- Kernel: fix a subject reduction failure due to allowing fixpoints
  on non-recursive values, by Matthieu Sozeau.
  Handling of evars in the VM (the kernel still does not accept evars)
  by Pierre-Marie Pédrot.

- Notations: many improvements on recursive notations and support for
  destructuring patterns in the syntax of notations by Hugo Herbelin.

- Proof language: tacticals for profiling, timing and checking success
  or failure of tactics by Jason Gross. The focusing bracket ``{``
  supports single-numbered goal selectors, e.g. ``2:{``, by Théo
  Zimmermann.

- Vernacular: deprecation of commands and more uniform handling of the
  ``Local`` flag, by Vincent Laporte and Maxime Dénès, part of a larger
  attribute system overhaul. Experimental ``Show Extraction`` command by
  Pierre Letouzey. Coercion now accepts ``Prop`` or ``Type`` as a source
  by Arthur Charguéraud. ``Export`` modifier for options allowing to
  export the option to modules that ``Import`` and not only ``Require``
  a module, by Pierre-Marie Pédrot.

- Universes: many user-level and API level enhancements: qualified
  naming and printing, variance annotations for cumulative inductive
  types, more general constraints and enhancements of the minimization
  heuristics, interaction with modules by Gaëtan Gilbert, Pierre-Marie
  Pédrot and Matthieu Sozeau.

- Library: Decimal Numbers library by Pierre Letouzey and various small
  improvements.

- Documentation: a large community effort resulted in the migration
  of the reference manual to the Sphinx documentation tool. The result
  is this manual. The new documentation infrastructure (based on Sphinx)
  is by Clément Pit-Claudel. The migration was coordinated by Maxime Dénès
  and Paul Steckler, with some help of Théo Zimmermann during the
  final integration phase. The 14 people who ported the manual are
  Calvin Beck, Heiko Becker, Yves Bertot, Maxime Dénès, Richard Ford,
  Pierre Letouzey, Assia Mahboubi, Clément Pit-Claudel,
  Laurence Rideau, Matthieu Sozeau, Paul Steckler, Enrico Tassi,
  Laurent Théry, Nikita Zyuzin.

- Tools: experimental ``-mangle-names`` option to ``coqtop``/``coqc`` for
  linting proof scripts, by Jasper Hugunin.

On the implementation side, the ``dev/doc/changes.md`` file
documents the numerous changes to the implementation and improvements of
interfaces. The file provides guidelines on porting a plugin to the new
version.

Version 8.8 also comes with a bunch of smaller-scale changes and
improvements regarding the different components of the system.
Most important ones are documented in the next subsection file.

The efficiency of the whole system has seen improvements thanks to
contributions from Gaëtan Gilbert, Pierre-Marie Pédrot, Maxime Dénès and
Matthieu Sozeau and performance issue tracking by Jason Gross and Paul
Steckler.

The official wiki and the bugtracker of Coq migrated to the GitHub
platform, thanks to the work of Pierre Letouzey and Théo
Zimmermann. Gaëtan Gilbert, Emilio Jesús Gallego Arias worked on
maintaining and improving the continuous integration system.

The opam repository for Coq packages has been maintained by Guillaume
Melquiond, Matthieu Sozeau, Enrico Tassi with contributions from many
users. A list of packages is available at https://coq.inria.fr/opam/www/.

The 44 contributors for this version are Yves Bertot, Joachim Breitner, Tej
Chajed, Arthur Charguéraud, Jacques-Pascal Deplaix, Maxime Dénès, Jim Fehrle,
Julien Forest, Yannick Forster, Gaëtan Gilbert, Jason Gross, Samuel Gruetter,
Thomas Hebb, Hugo Herbelin, Jasper Hugunin, Emilio Jesus Gallego Arias, Ralf
Jung, Johannes Kloos, Matej Košík, Robbert Krebbers, Tony Beta Lambda, Vincent
Laporte, Peter LeFanu Lumsdaine, Pierre Letouzey, Farzon Lotfi, Cyprien Mangin,
Guillaume Melquiond, Raphaël Monat, Carl Patenaude Poulin, Pierre-Marie Pédrot,
Clément Pit-Claudel, Matthew Ryan, Matt Quinn, Sigurd Schneider, Bernhard
Schommer, Michael Soegtrop, Matthieu Sozeau, Arnaud Spiwack, Paul Steckler,
Enrico Tassi, Anton Trunov, Martin Vassor, Vadim Zaliva and Théo Zimmermann.

Version 8.8 is the third release of Coq developed on a time-based
development cycle. Its development spanned 6 months from the release of
Coq 8.7 and was based on a public roadmap. The development process
was coordinated by Matthieu Sozeau. Maxime Dénès was in charge of the
release process. Théo Zimmermann is the maintainer of this release.

Many power users helped to improve the design of the new features via
the bug tracker, the pull request system, the Coq development mailing
list or the coq-club@inria.fr mailing list. Special thanks to the users who
contributed patches and intensive brain-storming and code reviews,
starting with Jason Gross, Ralf Jung, Robbert Krebbers and Amin Timany.
It would however be impossible to mention exhaustively the names
of everybody who to some extent influenced the development.

The Coq consortium, an organization directed towards users and
supporters of the system, is now running and employs Maxime Dénès.
The contacts of the Coq Consortium are Yves Bertot and Maxime Dénès.

| Santiago de Chile, March 2018,
| Matthieu Sozeau for the Coq development team
|

Details of changes in 8.8+beta1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Kernel

- Support for template polymorphism for definitions was removed. May trigger
  more "universe inconsistency" errors in rare occasions.
- Fixpoints are no longer allowed on non-recursive inductive types.

Notations

- Recursive notations with the recursive pattern repeating on the
  right (e.g. "( x ; .. ; y ; z )") now supported.
- Notations with a specific level for the leftmost nonterminal,
  when printing-only, are supported.
- Notations can now refer to the syntactic category of patterns (as in
  "fun 'pat =>" or "match p with pat => ... end"). Two variants are
  available, depending on whether a single variable is considered as a
  pattern or not.
- Recursive notations now support ".." patterns with several
  occurrences of the recursive term or binder, possibly mixing terms
  and binders, possibly in reverse left-to-right order.
- "Locate" now working also on notations of the form "x + y" (rather
  than "_ + _").

Specification language

- When printing clauses of a "match", clauses with same right-hand
  side are factorized and the last most factorized clause with no
  variables, if it exists, is turned into a default clause.
  Use "Unset Printing Allow Default Clause" do deactivate printing
  of a default clause.
  Use "Unset Printing Factorizable Match Patterns" to deactivate
  factorization of clauses with same right-hand side.

Tactics

- On Linux, "native_compute" calls can be profiled using the "perf"
  utility. The command "Set NativeCompute Profiling" enables
  profiling, and "Set NativeCompute Profile Filename" customizes
  the profile filename.
- The tactic "omega" is now aware of the bodies of context variables
  such as "x := 5 : Z" (see #1362). This could be disabled via
  Unset Omega UseLocalDefs.
- The tactic "romega" is also aware now of the bodies of context variables.
- The tactic "zify" resp. "omega with N" is now aware of N.pred.
- Tactic "decide equality" now able to manage constructors which
  contain proofs.
- Added tactics reset ltac profile, show ltac profile (and variants)
- Added tactics restart_timer, finish_timing, and time_constr as an
  experimental way of timing Ltac's evaluation phase
- Added tactic optimize_heap, analogous to the Vernacular Optimize
  Heap, which performs a major garbage collection and heap compaction
  in the OCaml run-time system.
- The tactics "dtauto", "dintuition", "firstorder" now handle inductive types
  with let bindings in the parameters.
- The tactic ``dtauto`` now handles some inductives such as
  ``@sigT A (fun _ => B)`` as non-dependent conjunctions.
- A bug fixed in ``rewrite H in *`` and ``rewrite H in * |-`` may cause a
  few rare incompatibilities (it was unintendedly recursively
  rewriting in the side conditions generated by H).
- Added tactics "assert_succeeds tac" and "assert_fails tac" to ensure
  properties of the execution of a tactic without keeping the effect
  of the execution.
- `vm_compute` now supports existential variables.
- Calls to `shelve` and `give_up` within calls to tactic `refine` now working.
- Deprecated tactic `appcontext` was removed.

Focusing

- Focusing bracket `{` now supports single-numbered goal selector,
  e.g. `2: {` will focus on the second subgoal. As usual, unfocus
  with `}` once the subgoal is fully solved.
  The `Focus` and `Unfocus` commands are now deprecated.

Commands

- Proofs ending in "Qed exporting ident, .., ident" are not supported
  anymore. Constants generated during `abstract` are kept private to the
  local environment.
- The deprecated Coercion Local, Open Local Scope, Notation Local syntax
  was removed. Use Local as a prefix instead.
- For the Extraction Language command, "OCaml" is spelled correctly.
  The older "Ocaml" is still accepted, but deprecated.
- Using “Require” inside a section is deprecated.
- An experimental command "Show Extraction" allows to extract the content
  of the current ongoing proof (grant wish #4129).
- Coercion now accepts the type of its argument to be "Prop" or "Type".
- The "Export" modifier can now be used when setting and unsetting options, and
  will result in performing the same change when the module corresponding the
  command is imported.
- The `Axiom` command does not automatically declare axioms as instances when
  their type is a class. Previous behavior can be restored using `Set
  Typeclasses Axioms Are Instances`.

Universes

- Qualified naming of global universes now works like other namespaced
  objects (e.g. constants), with a separate namespace, inside and across
  module and library boundaries. Global universe names introduced in an
  inductive / constant / Let declaration get qualified with the name of
  the declaration.
- Universe cumulativity for inductive types is now specified as a
  variance for each polymorphic universe. See the reference manual for
  more information.
- Inference of universe constraints with cumulative inductive types
  produces more general constraints. Unsetting new option Cumulativity
  Weak Constraints produces even more general constraints (but may
  produce too many universes to be practical).
- Fix #5726: Notations that start with `Type` now support universe instances
  with `@{u}`.
- `with Definition` now understands universe declarations
  (like `@{u| Set < u}`).

Tools

- Coq can now be run with the option -mangle-names to change the auto-generated
  name scheme. This is intended to function as a linter for developments that
  want to be robust to changes in auto-generated names. This feature is experimental,
  and may change or disappear without warning.
- GeoProof support was removed.

Checker

- The checker now accepts filenames in addition to logical paths.

CoqIDE

- Find and Replace All report the number of occurrences found; Find indicates
  when it wraps.

coqdep

- Learned to read -I, -Q, -R and filenames from _CoqProject files.
  This is used by coq_makefile when generating dependencies for .v
  files (but not other files).

Documentation

- The Coq FAQ, formerly located at https://coq.inria.fr/faq, has been
  moved to the GitHub wiki section of this repository; the main entry
  page is https://github.com/rocq-prover/rocq/wiki/The-Coq-FAQ.
- Documentation: a large community effort resulted in the migration
  of the reference manual to the Sphinx documentation tool. The result
  is partially integrated in this version.

Standard Library

- New libraries Coq.Init.Decimal, Coq.Numbers.DecimalFacts,
  Coq.Numbers.DecimalNat, Coq.Numbers.DecimalPos,
  Coq.Numbers.DecimalN, Coq.Numbers.DecimalZ,
  Coq.Numbers.DecimalString providing a type of decimal numbers, some
  facts about them, and conversions between decimal numbers and nat,
  positive, N, Z, and string.
- Added [Coq.Strings.String.concat] to concatenate a list of strings
  inserting a separator between each item
- Notation `'` for Zpos in QArith was removed.

- Some deprecated aliases are now emitting warnings when used.

Compatibility support

- Support for compatibility with versions before 8.6 was dropped.

Options

- The following deprecated options have been removed:

  + `Refolding Reduction`
  + `Standard Proposition Elimination`
  + `Dependent Propositions Elimination`
  + `Discriminate Introduction`
  + `Shrink Abstract`
  + `Tactic Pattern Unification`
  + `Intuition Iff Unfolding`
  + `Injection L2R Pattern Order`
  + `Record Elimination Schemes`
  + `Match Strict`
  + `Tactic Compat Context`
  + `Typeclasses Legacy Resolution`
  + `Typeclasses Module Eta`
  + `Typeclass Resolution After Apply`

Details of changes in 8.8.0
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Tools

- Asynchronous proof delegation policy was fixed. Since version 8.7
  Coq was ignoring previous runs and the `-async-proofs-delegation-threshold`
  option did not have the expected behavior.

Tactic language

- The undocumented "nameless" forms `fix N`, `cofix` have been
  deprecated; please use `fix ident N /cofix ident` to explicitly
  name the (co)fixpoint hypothesis to be introduced.

Documentation

- The reference manual is now fully ported to Sphinx.

Other small deprecations and bug fixes.

Details of changes in 8.8.1
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Kernel

- Fix a critical bug with cofixpoints and `vm_compute`/`native_compute` (#7333).
- Fix a critical bug with modules and algebraic universes (#7695)
- Fix a critical bug with inlining of polymorphic constants (#7615).
- Fix a critical bug with universe polymorphism and `vm_compute` (#7723). Was
  present since 8.5.

Notations

- Fixed unexpected collision between only-parsing and only-printing
  notations (issue #7462).

Windows installer

- The Windows installer now includes external packages Ltac2 and Equations
  (it included the Bignums package since 8.8+beta1).

Many other bug fixes, documentation improvements (including fixes of
regressions due to the Sphinx migration), and user message improvements
(for details, see the 8.8.1 milestone at
https://github.com/rocq-prover/rocq/milestone/13?closed=1).

Details of changes in 8.8.2
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Documentation

- A PDF version of the reference manual is available once again.

Tools

- The coq-makefile targets `print-pretty-timed`, `print-pretty-timed-diff`,
  and `print-pretty-single-time-diff` now correctly label the "before" and
  "after" columns, rather than swapping them.

Kernel

- The kernel does not tolerate capture of global universes by
  polymorphic universe binders, fixing a soundness break (triggered
  only through custom plugins)

Windows installer

- The Windows installer now includes many more external packages that can be
  individually selected for installation.

Many other bug fixes and lots of documentation improvements (for details,
see the 8.8.2 milestone at https://github.com/rocq-prover/rocq/milestone/15?closed=1).

Version 8.7
-----------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.7 contains the result of refinements, stabilization of features
and cleanups of the internals of the system along with a few new features. The
main user visible changes are:

- New tactics: variants of tactics supporting existential variables :tacn:`eassert`,
  :tacn:`eenough`, etc... by Hugo Herbelin. Tactics ``extensionality in H`` and
  :tacn:`inversion_sigma` by Jason Gross, ``specialize with ...`` accepting partial bindings
  by Pierre Courtieu.

- ``Cumulative Polymorphic Inductive`` types, allowing cumulativity of universes to
  go through applied inductive types, by Amin Timany and Matthieu Sozeau.

- Integration of the SSReflect plugin and its documentation in the reference
  manual, by Enrico Tassi, Assia Mahboubi and Maxime Dénès.

- The ``coq_makefile`` tool was completely redesigned to improve its maintainability
  and the extensibility of generated Makefiles, and to make ``_CoqProject`` files
  more palatable to IDEs by Enrico Tassi.

Coq 8.7 involved a large amount of work on cleaning and speeding up the code
base, notably the work of Pierre-Marie Pédrot on making the tactic-level system
insensitive to existential variable expansion, providing a safer API to plugin
writers and making the code more robust. The ``dev/doc/changes.txt`` file
documents the numerous changes to the implementation and improvements of
interfaces. An effort to provide an official, streamlined API to plugin writers
is in progress, thanks to the work of Matej Košík.

Version 8.7 also comes with a bunch of smaller-scale changes and improvements
regarding the different components of the system. We shall only list a few of
them.

The efficiency of the whole system has been significantly improved thanks to
contributions from Pierre-Marie Pédrot, Maxime Dénès and Matthieu Sozeau and
performance issue tracking by Jason Gross and Paul Steckler.

Thomas Sibut-Pinote and Hugo Herbelin added support for side effect hooks in
cbv, cbn and simpl. The side effects are provided via a plugin available at
https://github.com/herbelin/reduction-effects/.

The BigN, BigZ, BigQ libraries are no longer part of the Coq standard library,
they are now provided by a separate repository https://github.com/coq/bignums,
maintained by Pierre Letouzey.

In the Reals library, ``IZR`` has been changed to produce a compact representation
of integers and real constants are now represented using ``IZR`` (work by
Guillaume Melquiond).

Standard library additions and improvements by Jason Gross, Pierre Letouzey and
others, documented in the next subsection file.

The mathematical proof language/declarative mode plugin was removed from the
archive.

The opam repository for Coq packages has been maintained by Guillaume Melquiond,
Matthieu Sozeau, Enrico Tassi with contributions from many users. A list of
packages is available at https://coq.inria.fr/opam/www/.

Packaging tools and software development kits were prepared by Michael Soegtrop
with the help of Maxime Dénès and Enrico Tassi for Windows, and Maxime Dénès for
MacOS X. Packages are regularly built on the Travis continuous integration
server.

The contributors for this version are Abhishek Anand, C.J. Bell, Yves Bertot,
Frédéric Besson, Tej Chajed, Pierre Courtieu, Maxime Dénès, Julien Forest,
Gaëtan Gilbert, Jason Gross, Hugo Herbelin, Emilio Jesús Gallego Arias, Ralf
Jung, Matej Košík, Xavier Leroy, Pierre Letouzey, Assia Mahboubi, Cyprien
Mangin, Erik Martin-Dorel, Olivier Marty, Guillaume Melquiond, Sam Pablo Kuper,
Benjamin Pierce, Pierre-Marie Pédrot, Lars Rasmusson, Lionel Rieg, Valentin
Robert, Yann Régis-Gianas, Thomas Sibut-Pinote, Michael Soegtrop, Matthieu
Sozeau, Arnaud Spiwack, Paul Steckler, George Stelle, Pierre-Yves Strub, Enrico
Tassi, Hendrik Tews, Amin Timany, Laurent Théry, Vadim Zaliva and Théo
Zimmermann.

The development process was coordinated by Matthieu Sozeau with the help of
Maxime Dénès, who was also in charge of the release process. Théo Zimmermann is
the maintainer of this release.

Many power users helped to improve the design of the new features via the bug
tracker, the pull request system, the Coq development mailing list or the
Coq-Club mailing list. Special thanks to the users who contributed patches and
intensive brain-storming and code reviews, starting with Jason Gross, Ralf Jung,
Robbert Krebbers, Xavier Leroy, Clément Pit–Claudel and Gabriel Scherer. It
would however be impossible to mention exhaustively the names of everybody who
to some extent influenced the development.

Version 8.7 is the second release of Coq developed on a time-based development
cycle. Its development spanned 9 months from the release of Coq 8.6 and was
based on a public road-map. It attracted many external contributions. Code
reviews and continuous integration testing were systematically used before
integration of new features, with an important focus given to compatibility and
performance issues, resulting in a hopefully more robust release than Coq 8.6
while maintaining compatibility.

Coq Enhancement Proposals (CEPs for short) and open pull request discussions
were used to discuss publicly the new features.

The Coq consortium, an organization directed towards users and supporters of the
system, is now upcoming and will rely on Inria’s newly created Foundation.

| Paris, August 2017,
| Matthieu Sozeau and the Coq development team
|

Potential compatibility issues
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

- Extra superfluous names in introduction patterns may now raise an
  error rather than a warning when the superfluous name is already in
  use. The easy fix is to remove the superfluous name.

Details of changes in 8.7+beta1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Tactics

- New tactic "extensionality in H" which applies (possibly dependent)
  functional extensionality in H supposed to be a quantified equality
  until giving a bare equality.

- New tactic ``inversion_sigma`` which turns equalities of dependent
  pairs (e.g., ``existT P x p = existT P y q``, frequently left over by
  ``inversion`` on a dependent type family) into pairs of equalities
  (e.g., a hypothesis ``H : x = y`` and a hypothesis of type ``rew H in p = q``);
  these hypotheses can subsequently be simplified using
  ``subst``, without ever invoking any kind of axiom asserting
  uniqueness of identity proofs. If you want to explicitly specify the
  hypothesis to be inverted, or name the generated hypotheses, you can
  invoke ``induction H as [H1 H2] using eq_sigT_rect``.  The tactic also
  works for ``sig``, ``sigT2``, and ``sig2``, and there are similar
  ``eq_sig*_rect`` induction lemmas.

- Tactic "specialize with ..." now accepts any partial bindings.
  Missing bindings are either solved by unification or left quantified
  in the hypothesis.

- New representation of terms that statically ensure stability by
  evar-expansion. This has several consequences.

  * In terms of performance, this adds a cost to every term destructuration,
    but at the same time most eager evar normalizations were removed, which
    couterbalances this drawback and even sometimes outperforms the old
    implementation. For instance, many operations that would require O(n)
    normalization of the term are now O(1) in tactics. YMMV.

  * This triggers small changes in unification, which was not evar-insensitive.
    Most notably, the new implementation recognizes Miller patterns that were
    missed before because of a missing normalization step. Hopefully this should
    be fairly uncommon.

- Tactic "auto with real" can now discharge comparisons of literals.

- The types of variables in patterns of "match" are now
  beta-iota-reduced after type checking. This has an impact on the
  type of the variables that the tactic "refine" introduces in the
  context, producing types that should be closer to the expectations.

- In "Tactic Notation" or "TACTIC EXTEND", entry "constr_with_bindings"
  now uses type classes and rejects terms with unresolved holes, like
  entry "constr" does. To get the former behavior use
  "open_constr_with_bindings" (possible source of incompatibility).

- New e-variants eassert, eenough, epose proof, eset, eremember, epose
  which behave like the corresponding variants with no "e" but turn
  unresolved implicit arguments into existential variables, on the
  shelf, rather than failing.

- Tactic injection has become more powerful (closes bug #4890) and its
  documentation has been updated.

- New variants of the `first` and `solve` tacticals that do not rely
  on parsing rules, meant to define tactic notations.

- Added support for side effects hooks in `cbv`, `cbn` and `simpl`.
  The side effects are provided via a plugin:
  https://github.com/herbelin/reduction-effects/

- It is now possible to take hint database names as parameters in a
  Ltac definition or a Tactic Notation.

- New option `Set Ltac Batch Debug` on top of `Set Ltac Debug` for
  non-interactive Ltac debug output.

Gallina

- Now supporting all kinds of binders, including 'pat, in syntax of record fields.

Commands

- Goals context can be printed in a more compact way when `Set
  Printing Compact Contexts` is activated.
- Unfocused goals can be printed with the `Set Printing Unfocused`
  option.
- `Print` now shows the types of let-bindings.
- The compatibility options for printing primitive projections
  (`Set Printing Primitive Projection Parameters` and
  `Set Printing Primitive Projection Compatibility`) are now off by default.
- Possibility to unset the printing of notations in a more fine grained
  fashion than `Unset Printing Notations` is provided without any
  user-syntax. The goal is that someone creates a plugin to experiment
  such a user-syntax, to be later integrated in Coq when stabilized.
- `About` now tells if a reference is a coercion.
- The deprecated `Save` vernacular and its form `Save Theorem id` to
  close proofs have been removed from the syntax. Please use `Qed`.
- `Search` now sorts results by relevance (the relevance metric is a
  weighted sum of number of distinct symbols and size of the term).

Standard Library

- New file PropExtensionality.v to explicitly work in the axiomatic
  context of propositional extensionality.
- New file SetoidChoice.v axiomatically providing choice over setoids,
  and, consequently, choice of representatives in equivalence classes.
  Various proof-theoretic characterizations of choice over setoids in
  file ChoiceFacts.v.
- New lemmas about iff and about orders on positive and Z.
- New lemmas on powerRZ.
- Strengthened statement of JMeq_eq_dep (closes bug #4912).
- The BigN, BigZ, BigZ libraries are no longer part of the Coq standard
  library, they are now provided by a separate repository
  https://github.com/coq/bignums
  The split has been done just after the Int31 library.

- IZR (Reals) has been changed to produce a compact representation of
  integers. As a consequence, IZR is no longer convertible to INR and
  lemmas such as INR_IZR_INZ should be used instead.
- Real constants are now represented using IZR rather than R0 and R1;
  this might cause rewriting rules to fail to apply to constants.
- Added new notation {x & P} for sigT (without a type for x)

Plugins

- The Ssreflect plugin is now distributed with Coq. Its documentation has
  been integrated as a chapter of the reference manual. This chapter is
  work in progress so feedback is welcome.
- The mathematical proof language (also known as declarative mode) was removed.
- A new command Extraction TestCompile has been introduced, not meant
  for the general user but instead for Coq's test-suite.
- The extraction plugin is no longer loaded by default. It must be
  explicitly loaded with [Require Extraction], which is backwards
  compatible.
- The functional induction plugin (which provides the [Function]
  vernacular) is no longer loaded by default. It must be explicitly
  loaded with [Require FunInd], which is backwards compatible.


Dependencies

- Support for camlp4 has been removed.

Tools

- coq_makefile was completely redesigned to improve its maintainability and
  the extensibility of generated Makefiles, and to make _CoqProject files
  more palatable to IDEs.  Overview:

  * _CoqProject files contain only Coq specific data (i.e. the list of
    files, -R options, ...)
  * coq_makefile translates _CoqProject to Makefile.conf and copies in the
    desired location a standard Makefile (that reads Makefile.conf)
  * Makefile extensions can be implemented in a Makefile.local file (read
    by the main Makefile) by installing a hook in the extension points
    provided by the standard Makefile

  The current version contains code for retro compatibility that prints
  warnings when a deprecated feature is used.  Please upgrade your _CoqProject
  accordingly.

  * Additionally, coq_makefile-made Makefiles now support experimental timing
    targets `pretty-timed`, `pretty-timed-before`, `pretty-timed-after`,
    `print-pretty-timed-diff`, `print-pretty-single-time-diff`,
    `all.timing.diff`, and the variable `TIMING=1` (or `TIMING=before` or
    `TIMING=after`); see the documentation for more details.

Build Infrastructure

- Note that 'make world' does not build the bytecode binaries anymore.
  For that, you can use 'make byte' (and 'make install-byte' afterwards).
  Warning: native and byte compilations should *not* be mixed in the same
  instance of 'make -j', otherwise both ocamlc and ocamlopt might race for
  access to the same .cmi files. In short, use "make -j && make -j byte"
  instead of "make -j world byte".

Universes

- Cumulative inductive types. see prefixes "Cumulative", "NonCumulative"
  for inductive definitions and the option "Set Polymorphic Inductive Cumulativity"
  in the reference manual.
- New syntax `foo@{_}` to instantiate a polymorphic definition with
  anonymous universes (can also be used with `Type`).

XML Protocol and internal changes

See dev/doc/changes.txt

Many bugfixes including #1859, #2884, #3613, #3943, #3994,
#4250, #4709, #4720, #4824, #4844, #4911, #5026, #5233,
#5275, #5315, #5336, #5360, #5390, #5414, #5417, #5420,
#5439, #5449, #5475, #5476, #5482, #5501, #5507, #5520,
#5523, #5524, #5553, #5577, #5578, #5589, #5597, #5598,
#5607, #5618, #5619, #5620, #5641, #5648, #5651, #5671.

Many bugfixes on OS X and Windows (now the test-suite passes on these
platforms too).

Many optimizations.

Many documentation improvements.

Details of changes in 8.7+beta2
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Tools

- In CoqIDE, the "Compile Buffer" command takes account of flags in
  _CoqProject or other project file.

Improvements around some error messages.

Many bug fixes including two important ones:

- Bug #5730: CoqIDE becomes unresponsive on file open.
- coq_makefile: make sure compile flags for Coq and coq_makefile are in sync
  (in particular, make sure the `-safe-string` option is used to compile plugins).

Details of changes in 8.7.0
~~~~~~~~~~~~~~~~~~~~~~~~~~~

OCaml

- Users can pass specific flags to the OCaml optimizing compiler by
  -using the flambda-opts configure-time option.

  Beware that compiling Coq with a flambda-enabled compiler is
  experimental and may require large amounts of RAM and CPU, see
  INSTALL for more details.

Details of changes in 8.7.1
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Compatibility with OCaml 4.06.0.

Many bug fixes, documentation improvements, and user message improvements (for
details see the 8.7.1 milestone at https://github.com/rocq-prover/rocq/milestone/10?closed=1).

Details of changes in 8.7.2
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Fixed a critical bug in the VM handling of universes (#6677). This bug
affected all releases since 8.5.

Improved support for building with OCaml 4.06.0 and external num package.

Many other bug fixes, documentation improvements, and user
message improvements (for details, see the 8.7.2 milestone at
https://github.com/rocq-prover/rocq/milestone/11?closed=1).

Version 8.6
-----------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.6 contains the result of refinements, stabilization of
8.5’s features and cleanups of the internals of the system. Over the
year of (now time-based) development, about 450 bugs were resolved and
over 100 contributions integrated. The main user visible changes are:

-  A new, faster state-of-the-art universe constraint checker, by
   Jacques-Henri Jourdan.

-  In CoqIDE and other asynchronous interfaces, more fine-grained
   asynchronous processing and error reporting by Enrico Tassi, making
   Coq capable of recovering from errors and continue processing the
   document.

-  More access to the proof engine features from Ltac: goal management
   primitives, range selectors and a :tacn:`typeclasses eauto` engine handling
   multiple goals and multiple successes, by Cyprien Mangin, Matthieu
   Sozeau and Arnaud Spiwack.

-  Tactic behavior uniformization and specification, generalization of
   intro-patterns by Hugo Herbelin and others.

-  A brand new warning system allowing to control warnings, turn them
   into errors or ignore them selectively by Maxime Dénès, Guillaume
   Melquiond, Pierre-Marie Pédrot and others.

-  Irrefutable patterns in abstractions, by Daniel de Rauglaudre.

-  The ssreflect subterm selection algorithm by Georges Gonthier and
   Enrico Tassi is now accessible to tactic writers through the
   ssrmatching plugin.

-  Integration of LtacProf, a profiler for Ltac by Jason Gross, Paul
   Steckler, Enrico Tassi and Tobias Tebbi.

Coq 8.6 also comes with a bunch of smaller-scale changes and
improvements regarding the different components of the system. We shall
only list a few of them.

The iota reduction flag is now a shorthand for match, fix and cofix
flags controlling the corresponding reduction rules (by Hugo Herbelin
and Maxime Dénès).

Maxime Dénès maintained the native compilation machinery.

Pierre-Marie Pédrot separated the Ltac code from general purpose
tactics, and generalized and rationalized the handling of generic
arguments, allowing to create new versions of Ltac more easily in the
future.

In patterns and terms, @, abbreviations and notations are now
interpreted the same way, by Hugo Herbelin.

Name handling for universes has been improved by Pierre-Marie Pédrot and
Matthieu Sozeau. The minimization algorithm has been improved by
Matthieu Sozeau.

The unifier has been improved by Hugo Herbelin and Matthieu Sozeau,
fixing some incompatibilities introduced in Coq 8.5. Unification
constraints can now be left floating around and be seen by the user
thanks to a new option. The Keyed Unification mode has been improved by
Matthieu Sozeau.

The typeclass resolution engine and associated proof search tactic have
been reimplemented on top of the proof-engine monad, providing better
integration in tactics, and new options have been introduced to control
it, by Matthieu Sozeau with help from Théo Zimmermann.

The efficiency of the whole system has been significantly improved
thanks to contributions from Pierre-Marie Pédrot, Maxime Dénès and
Matthieu Sozeau and performance issue tracking by Jason Gross and Paul
Steckler.

Standard library improvements by Jason Gross, Sébastien Hinderer, Pierre
Letouzey and others.

Emilio Jesús Gallego Arias contributed many cleanups and refactorings of
the pretty-printing and user interface communication components.

Frédéric Besson maintained the micromega tactic.

The opam repository for Coq packages has been maintained by Guillaume
Claret, Guillaume Melquiond, Matthieu Sozeau, Enrico Tassi and others. A
list of packages is now available at https://coq.inria.fr/opam/www/.

Packaging tools and software development kits were prepared by Michael
Soegtrop with the help of Maxime Dénès and Enrico Tassi for Windows, and
Maxime Dénès and Matthieu Sozeau for MacOS X. Packages are now regularly
built on the continuous integration server. Coq now comes with a META
file usable with ocamlfind, contributed by Emilio Jesús Gallego Arias,
Gregory Malecha, and Matthieu Sozeau.

Matej Košík maintained and greatly improved the continuous integration
setup and the testing of Coq contributions. He also contributed many API
improvements and code cleanups throughout the system.

The contributors for this version are Bruno Barras, C.J. Bell, Yves
Bertot, Frédéric Besson, Pierre Boutillier, Tej Chajed, Guillaume
Claret, Xavier Clerc, Pierre Corbineau, Pierre Courtieu, Maxime Dénès,
Ricky Elrod, Emilio Jesús Gallego Arias, Jason Gross, Hugo Herbelin,
Sébastien Hinderer, Jacques-Henri Jourdan, Matej Košík, Xavier Leroy,
Pierre Letouzey, Gregory Malecha, Cyprien Mangin, Erik Martin-Dorel,
Guillaume Melquiond, Clément Pit–Claudel, Pierre-Marie Pédrot, Daniel de
Rauglaudre, Lionel Rieg, Gabriel Scherer, Thomas Sibut-Pinote, Matthieu
Sozeau, Arnaud Spiwack, Paul Steckler, Enrico Tassi, Laurent Théry,
Nickolai Zeldovich and Théo Zimmermann. The development process was
coordinated by Hugo Herbelin and Matthieu Sozeau with the help of Maxime
Dénès, who was also in charge of the release process.

Many power users helped to improve the design of the new features via
the bug tracker, the pull request system, the Coq development mailing
list or the Coq-Club mailing list. Special thanks to the users who
contributed patches and intensive brain-storming and code reviews,
starting with Cyril Cohen, Jason Gross, Robbert Krebbers, Jonathan
Leivent, Xavier Leroy, Gregory Malecha, Clément Pit–Claudel, Gabriel
Scherer and Beta Ziliani. It would however be impossible to mention
exhaustively the names of everybody who to some extent influenced the
development.

Version 8.6 is the first release of Coq developed on a time-based
development cycle. Its development spanned 10 months from the release of
Coq 8.5 and was based on a public roadmap. To date, it contains more
external contributions than any previous Coq system. Code reviews were
systematically done before integration of new features, with an
important focus given to compatibility and performance issues, resulting
in a hopefully more robust release than Coq 8.5.

Coq Enhancement Proposals (CEPs for short) were introduced by Enrico
Tassi to provide more visibility and a discussion period on new
features, they are publicly available https://github.com/coq/ceps.

Started during this period, an effort is led by Yves Bertot and Maxime
Dénès to put together a Coq consortium.

| Paris, November 2016,
| Matthieu Sozeau and the Coq development team
|

Potential sources of incompatibilities
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

- Symptom: An obligation generated by Program or an abstracted subproof
  has different arguments.

  Cause: Set Shrink Abstract and Set Shrink Obligations are on by default
  and the subproof does not use the argument.

  Remedy:

  + Adapt the script.
  + Write an explicit lemma to prove the obligation/subproof and use it
    instead (compatible with 8.4).
  + Unset the option for the program/proof the obligation/subproof originates
    from.

- Symptom: In a goal, order of hypotheses, or absence of an equality of
  the form "x = t" or "t = x", or no unfolding of a local definition.

  Cause: This might be connected to a number of fixes in the tactic
  "subst". The former behavior can be reactivated by issuing "Unset
  Regular Subst Tactic".

Details of changes in 8.6beta1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Kernel

- A new, faster state-of-the-art universe constraint checker.

Specification language

- Giving implicit arguments explicitly to a constant with multiple
  choices of implicit arguments does not break any more insertion of
  further maximal implicit arguments.
- Ability to put any pattern in binders, prefixed by quote, e.g.
  "fun '(a,b) => ...", "λ '(a,(b,c)), ...", "Definition foo '(x,y) := ...".
  It expands into a "let 'pattern := ..."

Tactics

- Flag "Bracketing Last Introduction Pattern" is now on by default.
- Flag "Regular Subst Tactic" is now on by default: it respects the
  initial order of hypothesis, it contracts cycles, it unfolds no
  local definitions (common source of incompatibilities, fixable by
  "Unset Regular Subst Tactic").
- New flag "Refolding Reduction", now disabled by default, which turns
  on refolding of constants/fixpoints (as in cbn) during the reductions
  done during type inference and tactic retyping. Can be extremely
  expensive. When set off, this recovers the 8.4 behavior of unification
  and type inference. Potential source of incompatibility with 8.5 developments
  (the option is set on in Compat/Coq85.v).
- New flag "Shrink Abstract" that minimalizes proofs generated by the abstract
  tactical w.r.t. variables appearing in the body of the proof.
  On by default and deprecated. Minor source of incompatibility
  for code relying on the precise arguments of abstracted proofs.
- Serious bugs are fixed in tactic "double induction" (source of
  incompatibilities as soon as the inductive types have dependencies in
  the type of their constructors; "double induction" remains however
  deprecated).
- In introduction patterns of the form (pat1,...,patn), n should match
  the exact number of hypotheses introduced (except for local definitions
  for which pattern can be omitted, as in regular pattern-matching).
- Tactic scopes in Ltac like constr: and ltac: now require parentheses around
  their argument.
- Every generic argument type declares a tactic scope of the form "name:(...)"
  where name is the name of the argument. This generalizes the constr: and ltac:
  instances.
- When in strict mode (i.e. in a Ltac definition), if the "intro" tactic is
  given a free identifier, it is not bound in subsequent tactics anymore.
  In order to introduce a binding, use e.g. the "fresh" primitive instead
  (potential source of incompatibilities).
- New tactics is_ind, is_const, is_proj, is_constructor for use in Ltac.
- New goal selectors.  Sets of goals can be selected by listing integers
  ranges. Example: "1,4-7,24: tac" focuses "tac" on goals 1,4,5,6,7,24.
- For uniformity with "destruct"/"induction" and for a more natural
  behavior, "injection" can now work in place by activating option
  "Structural Injection". In this case, hypotheses are also put in the
  context in the natural left-to-right order and the hypothesis on
  which injection applies is cleared.
- Tactic "contradiction" (hence "easy") now also solve goals with
  hypotheses of the form "~True" or "t<>t" (possible source of
  incompatibilities because of more successes in automation, but
  generally a more intuitive strategy).
- Option "Injection On Proofs" was renamed "Keep Proof Equalities". When
  enabled, injection and inversion do not drop equalities between objects
  in Prop. Still disabled by default.
- New tactics "notypeclasses refine" and "simple notypeclasses refine" that
  disallow typeclass resolution when typechecking their argument, for use
  in typeclass hints.
- Integration of LtacProf, a profiler for Ltac.
- Reduction tactics now accept more fine-grained flags: iota is now a shorthand
  for the new flags match, fix and cofix.
- The ssreflect subterm selection algorithm is now accessible to tactic writers
  through the ssrmatching plugin.
- When used as an argument of an ltac function, "auto" without "with"
  nor "using" clause now correctly uses only the core hint database by
  default.

Hints

- Revised the syntax of [Hint Cut] to follow standard notation for regexps.
- Hint Mode now accepts "!" which means that the mode matches only if the
  argument's head is not an evar (it goes under applications, casts, and
  scrutinees of matches and projections).
- Hints can now take an optional user-given pattern, used only by
  [typeclasses eauto] with the [Filtered Unification] option on.

Typeclasses

- Many new options and new engine based on the proof monad. The
  [typeclasses eauto] tactic is now a multi-goal, multi-success tactic.
  See reference manual for more information. It is planned to
  replace auto and eauto in the following version. The 8.5 resolution
  engine is still available to help solve compatibility issues.

Program

- The "Shrink Obligations" flag now applies to all obligations, not only
  those solved by the automatic tactic.
- "Shrink Obligations" is on by default and deprecated. Minor source of
  incompatibility for code relying on the precise arguments of
  obligations.

Notations

- "Bind Scope" can once again bind "Funclass" and "Sortclass".

General infrastructure

- New configurable warning system which can be controlled with the vernacular
  command "Set Warnings", or, under coqc/coqtop, with the flag "-w". In
  particular, the default is now that warnings are printed by coqc.
- In asynchronous mode, Coq is now capable of recovering from errors and
  continue processing the document.

Tools

- coqc accepts a -o option to specify the output file name
- coqtop accepts --print-version to print Coq and OCaml versions in
  easy to parse format
- Setting [Printing Dependent Evars Line] can be unset to disable the
  computation associated with printing the "dependent evars: " line in
  -emacs mode
- Removed the -verbose-compat-notations flag and the corresponding Set
  Verbose Compat vernacular, since these warnings can now be silenced or
  turned into errors using "-w".

XML protocol

- message format has changed, see dev/doc/changes.txt for more details.

Many bug fixes, minor changes and documentation improvements are not mentioned
here.

Details of changes in 8.6
~~~~~~~~~~~~~~~~~~~~~~~~~

Kernel

- Fixed critical bug #5248 in VM long multiplication on 32-bit
  architectures. Was there only since 8.6beta1, so no stable release impacted.

Other bug fixes in universes, type class shelving,...

Details of changes in 8.6.1
~~~~~~~~~~~~~~~~~~~~~~~~~~~

- Fix #5380: Default colors for CoqIDE are actually applied.
- Fix plugin warnings
- Document named evars (including Show ident)
- Fix Bug #5574, document function scope
- Adding a test case as requested in bug 5205.
- Fix Bug #5568, no dup notation warnings on repeated module imports
- Fix documentation of Typeclasses eauto :=
- Refactor documentation of records.
- Protecting from warnings while compiling 8.6
- Fixing an inconsistency between configure and configure.ml
- Add test-suite checks for coqchk with constraints
- Fix bug #5019 (looping zify on dependent types)
- Fix bug 5550: "typeclasses eauto with" does not work with section variables.
- Bug 5546, qualify datatype constructors when needed in Show Match
- Bug #5535, test for Show with -emacs
- Fix bug #5486, don't reverse ids in tuples
- Fixing #5522 (anomaly with free vars of pat)
- Fix bug #5526, don't check for nonlinearity in notation if printing only
- Fix bug #5255
- Fix bug #3659: -time should understand multibyte encodings.
- FIx bug #5300: Anomaly: Uncaught exception Not_found" in "Print Assumptions".
- Fix outdated description in RefMan.
- Repairing `Set Rewriting Schemes`
- Fixing #5487 (v8.5 regression on ltac-matching expressions with evars).
- Fix description of command-line arguments for Add (Rec) LoadPath
- Fix bug #5377: @? patterns broken.
- add XML protocol doc
- Fix anomaly when doing [all:Check _.] during a proof.
- Correction of bug #4306
- Fix #5435: [Eval native_compute in] raises anomaly.
- Instances should obey universe binders even when defined by tactics.
- Intern names bound in match patterns
- funind: Ignore missing info for current function
- Do not typecheck twice the type of opaque constants.
- show unused intro pattern warning
- [future] Be eager when "chaining" already resolved future values.
- Opaque side effects
- Fix #5132: coq_makefile generates incorrect install goal
- Run non-tactic comands without resilient_command
- Univs: fix bug #5365, generation of u+k <= v constraints
- make ``emit`` tail recursive
- Don't require printing-only notation to be productive
- Fix the way setoid_rewrite handles bindings.
- Fix for bug 5244 - set printing width ignored when given enough space
- Fix bug 4969, autoapply was not tagging shelved subgoals correctly

Version 8.5
-----------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.5 contains the result of five specific long-term projects:

-  A new asynchronous evaluation and compilation mode by Enrico Tassi
   with help from Bruno Barras and Carst Tankink.

-  Full integration of the new proof engine by Arnaud Spiwack helped by
   Pierre-Marie Pédrot,

-  Addition of conversion and reduction based on native compilation by
   Maxime Dénès and Benjamin Grégoire.

-  Full universe polymorphism for definitions and inductive types by
   Matthieu Sozeau.

-  An implementation of primitive projections with
   η-conversion bringing significant performance improvements
   when using records by Matthieu Sozeau.

The full integration of the proof engine, by Arnaud Spiwack and
Pierre-Marie Pédrot, brings to primitive tactics and the user level Ltac
language dependent subgoals, deep backtracking and multiple goal
handling, along with miscellaneous features and an improved potential
for future modifications. Dependent subgoals allow statements in a goal
to mention the proof of another. Proofs of unsolved subgoals appear as
existential variables. Primitive backtracking makes it possible to write
a tactic with several possible outcomes which are tried successively
when subsequent tactics fail. Primitives are also available to control
the backtracking behavior of tactics. Multiple goal handling paves the
way for smarter automation tactics. It is currently used for simple goal
manipulation such as goal reordering.

The way Coq processes a document in batch and interactive mode has been
redesigned by Enrico Tassi with help from Bruno Barras. Opaque proofs,
the text between Proof and Qed, can be processed asynchronously,
decoupling the checking of definitions and statements from the checking
of proofs. It improves the responsiveness of interactive development,
since proofs can be processed in the background. Similarly, compilation
of a file can be split into two phases: the first one checking only
definitions and statements and the second one checking proofs. A file
resulting from the first phase – with the .vio extension – can be
already Required. All .vio files can be turned into complete .vo files
in parallel. The same infrastructure also allows terminating tactics to
be run in parallel on a set of goals via the ``par:`` goal selector.

CoqIDE was modified to cope with asynchronous checking of the document.
Its source code was also made separate from that of Coq, so that CoqIDE
no longer has a special status among user interfaces, paving the way for
decoupling its release cycle from that of Coq in the future.

Carst Tankink developed a Coq back-end for user interfaces built on
Makarius Wenzel’s Prover IDE framework (PIDE), like PIDE/jEdit (with
help from Makarius Wenzel) or PIDE/Coqoon (with help from Alexander
Faithfull and Jesper Bengtson). The development of such features was
funded by the Paral-ITP French ANR project.

The full universe polymorphism extension was designed by Matthieu
Sozeau. It conservatively extends the universes system and core calculus
with definitions and inductive declarations parameterized by universes
and constraints. It is based on a modification of the kernel
architecture to handle constraint checking only, leaving the generation
of constraints to the refinement/type inference engine. Accordingly,
tactics are now fully universe aware, resulting in more localized error
messages in case of inconsistencies and allowing higher-level algorithms
like unification to be entirely type safe. The internal representation
of universes has been modified but this is invisible to the user.

The underlying logic has been extended with η-conversion for
records defined with primitive projections by Matthieu Sozeau. This
additional form of η-conversion is justified using the same
principle than the previously added η-conversion for function
types, based on formulations of the Calculus of Inductive Constructions
with typed equality. Primitive projections, which do not carry the
parameters of the record and are rigid names (not defined as a
pattern matching construct), make working with nested records more
manageable in terms of time and space consumption. This extension and
universe polymorphism were carried out partly while Matthieu Sozeau was
working at the IAS in Princeton.

The guard condition has been made compliant with extensional equality
principles such as propositional extensionality and univalence, thanks
to Maxime Dénès and Bruno Barras. To ensure compatibility with the
univalence axiom, a new flag ``-indices-matter`` has been implemented,
taking into account the universe levels of indices when computing the
levels of inductive types. This supports using Coq as a tool to explore
the relations between homotopy theory and type theory.

Maxime Dénès and Benjamin Grégoire developed an implementation of
conversion test and normal form computation using the OCaml native
compiler. It complements the virtual machine conversion offering much
faster computation for expensive functions.

Coq 8.5 also comes with a bunch of many various smaller-scale changes
and improvements regarding the different components of the system. We
shall only list a few of them.

Pierre Boutillier developed an improved tactic for simplification of
expressions called :tacn:`cbn`.

Maxime Dénès maintained the bytecode-based reduction machine. Pierre
Letouzey maintained the extraction mechanism.

Pierre-Marie Pédrot has extended the syntax of terms to, experimentally,
allow holes in terms to be solved by a locally specified tactic.

Existential variables are referred to by identifiers rather than mere
numbers, thanks to Hugo Herbelin who also improved the tactic language
here and there.

Error messages for universe inconsistencies have been improved by
Matthieu Sozeau. Error messages for unification and type inference
failures have been improved by Hugo Herbelin, Pierre-Marie Pédrot and
Arnaud Spiwack.

Pierre Courtieu contributed new features for using Coq through Proof
General and for better interactive experience (bullets, Search, etc).

The efficiency of the whole system has been significantly improved
thanks to contributions from Pierre-Marie Pédrot.

A distribution channel for Coq packages using the opam tool has been
initiated by Thomas Braibant and developed by Guillaume Claret, with
contributions by Enrico Tassi and feedback from Hugo Herbelin.

Packaging tools were provided by Pierre Letouzey and Enrico Tassi
(Windows), Pierre Boutillier, Matthieu Sozeau and Maxime Dénès (MacOS
X). Maxime Dénès improved significantly the testing and benchmarking
support.

Many power users helped to improve the design of the new features via
the bug tracker, the coq development mailing list or the Coq-Club
mailing list. Special thanks are going to the users who contributed
patches and intensive brain-storming, starting with Jason Gross,
Jonathan Leivent, Greg Malecha, Clément Pit-Claudel, Marc Lasson, Lionel
Rieg. It would however be impossible to mention with precision all names
of people who to some extent influenced the development.

Version 8.5 is one of the most important releases of Coq. Its development
spanned over about 3 years and a half with about one year of
beta-testing. General maintenance during part or whole of this period
has been done by Pierre Boutillier, Pierre Courtieu, Maxime Dénès, Hugo
Herbelin, Pierre Letouzey, Guillaume Melquiond, Pierre-Marie Pédrot,
Matthieu Sozeau, Arnaud Spiwack, Enrico Tassi as well as Bruno Barras,
Yves Bertot, Frédéric Besson, Xavier Clerc, Pierre Corbineau,
Jean-Christophe Filliâtre, Julien Forest, Sébastien Hinderer, Assia
Mahboubi, Jean-Marc Notin, Yann Régis-Gianas, François Ripault, Carst
Tankink. Maxime Dénès coordinated the release process.

| Paris, January 2015, revised December 2015,
| Hugo Herbelin, Matthieu Sozeau and the Coq development team
|

Potential sources of incompatibilities
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

List of typical changes to be done to adapt files from Coq 8.4
to Coq 8.5 when not using compatibility option ``-compat 8.4``.

- Symptom: "The reference omega was not found in the current environment".

  Cause: "Require Omega" does not import the tactic "omega" any more

  Possible solutions:

  + use "Require Import OmegaTactic" (not compatible with 8.4)
  + use "Require Import Omega" (compatible with 8.4)
  + add definition "Ltac omega := Coq.omega.Omega.omega."

- Symptom: "intuition" cannot solve a goal (not working anymore on nonstandard connective)

  Cause: "intuition" had an accidental non-uniform behavior fixed on nonstandard connectives

  Possible solutions:

  + use "dintuition" instead; it is stronger than "intuition" and works
    uniformly on nonstandard connectives, such as n-ary conjunctions or disjunctions
    (not compatible with 8.4)
  + do the script differently

- Symptom: The constructor foo (in type bar) expects n arguments.

  Cause: parameters must now be given in patterns

  Possible solutions:

  + use option "Set Asymmetric Patterns" (compatible with 8.4)
  + add "_" for the parameters (not compatible with 8.4)
  + turn the parameters into implicit arguments (compatible with 8.4)

- Symptom: "NPeano.Nat.foo" not existing anymore\

  Possible solutions:

  + use "Nat.foo" instead

  Symptom: typing problems with proj1_sig or similar

  Cause: coercion from sig to sigT and similar coercions have been
  removed so as to make the initial state easier to understand for
  beginners

  Solution: change proj1_sig into projT1 and similarly (compatible with 8.4)

Other detailed changes

- options for *coq* compilation (see below for ocaml).

  + [-I foo] is now deprecated and will not add directory foo to the
    coq load path (only for ocaml, see below). Just replace [-I foo] by
    [-Q foo ""] in your project file and re-generate makefile. Or
    perform the same operation directly in your makefile if you edit it
    by hand.

  + Option -R Foo bar is the same in v8.5 than in v8.4 concerning coq
    load path.

  + Option [-I foo -as bar] is unchanged but discouraged unless you
    compile ocaml code. Use -Q foo bar instead.

  for more details: see section "Customization at launch
  time" of the reference manual.

- Command line options for ocaml  Compilation of ocaml code (plugins)

  + [-I foo] is *not* deprecated to add foo to the ocaml load path.

  + [-I foo -as bar] adds foo to the ocaml load path *and* adds foo to
    the coq load path with logical name bar (shortcut for -I foo -Q foo
    bar).

  for more details: section "Customization at launch
  time" of the reference manual.

- Universe Polymorphism.

- Refinement, unification and tactics are now aware of universes,
  resulting in more localized errors. Universe inconsistencies
  should no more get raised at Qed time but during the proof.
  Unification *always* produces well-typed substitutions, hence
  some rare cases of unifications that succeeded while producing
  ill-typed terms before will now fail.

- The [change p with c] tactic semantics changed, now typechecking
  [c] at each matching occurrence [t] of the pattern [p], and
  converting [t] with [c].

- Template polymorphic inductive types: the partial application
  of a template polymorphic type (e.g. list) is not polymorphic.
  An explicit parameter application (e.g [fun A => list A]) or
  [apply (list _)] will result in a polymorphic instance.

- The type inference algorithm now takes opacity of constants into
  account. This may have effects on tactics using type inference
  (e.g. induction). Extra "Transparent" might have to be added to
  revert opacity of constants.

Type classes.

- When writing an ``Instance foo : Class A := {| proj := t |}`` (note the
  vertical bars), support for typechecking the projections using the
  type information and switching to proof mode is no longer available.
  Use ``{ }`` (without the vertical bars) instead.

Tactic abstract.

- Auxiliary lemmas generated by the abstract tactic are removed from
  the global environment and inlined in the proof term when a proof
  is ended with Qed.  The behavior of 8.4 can be obtained by ending
  proofs with "Qed exporting" or "Qed exporting ident, .., ident".

Details of changes in 8.5beta1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logic

- Primitive projections for records allow for a compact representation
  of projections, without parameters and avoid the behavior of defined
  projections that can unfold to a case expression. To turn the use of
  native projections on, use [Set Primitive Projections]. Record,
  Class and Structure types defined while this option is set will be
  defined with primitive projections instead of the usual encoding as
  a case expression. For compatibility, when p is a primitive
  projection, @p can be used to refer to the projection with explicit
  parameters, i.e. [@p] is definitionally equal to [λ params r. r.(p)].
  Records with primitive projections have eta-conversion, the
  canonical form being [mkR pars (p1 t) ... (pn t)].
- New universe polymorphism (see reference manual)
- New option -type-in-type to collapse the universe hierarchy (this makes the
  logic inconsistent).
- The guard condition for fixpoints is now a bit stricter. Propagation
  of subterm value through pattern matching is restricted according to
  the return predicate. Restores compatibility of Coq's logic with the
  propositional extensionality axiom. May create incompatibilities in
  recursive programs heavily using dependent types.
- Trivial inductive types are no longer defined in Type but in Prop, which
  leads to a non-dependent induction principle being generated in place of
  the dependent one. To recover the old behavior, explicitly define your
  inductive types in Set.

Commands

- A command "Variant" allows to define non-recursive variant types.
- The command "Record foo ..." does not generate induction principles
  (foo_rect, foo_rec, foo_ind) anymore by default (feature wish
  #2693). The command "Variant foo ..." does not either. A flag
  "Set/Unset Nonrecursive Elimination Schemes" allows changing this.
  The tactic "induction" on a "Record" or a "Variant" is now actually
  doing "destruct".
- The "Open Scope" command can now be given also a delimiter (e.g. Z).
- The "Definition" command now allows the "Local" modifier, allowing
  for non-importable definitions. The same goes for "Axiom" and "Parameter".
- Section-specific commands such as "Let" (resp. "Variable", "Hypothesis") used
  out of a section now behave like the corresponding "Local" command, i.e.
  "Local Definition" (resp. "Local Parameter", "Local Axiom"). (potential source
  of rare incompatibilities).
- The "Let" command can now define local (co)fixpoints.
- Command "Search" has been renamed into "SearchHead". The command
  name "Search" now behaves like former "SearchAbout". The latter name
  is deprecated.
- "Search", "About", "SearchHead", "SearchRewrite" and "SearchPattern"
  now search for hypothesis (of the current goal by default) first.
  They now also support the goal selector prefix to specify another
  goal to search: e.g. "n:Search id". This is also true for
  SearchAbout although it is deprecated.
- The coq/user-contrib directory and the XDG directories are no longer
  recursively added to the load path, so files from installed libraries
  now need to be fully qualified for the "Require" command to find them.
  The tools/update-require script can be used to convert a development.
- A new Print Strategies command allows visualizing the opacity status
  of the whole engine.
- The "Locate" command now searches through all sorts of qualified namespaces of
  Coq: terms, modules, tactics, etc. The old behavior of the command can be
  retrieved using the "Locate Term" command.
- New "Derive" command to help writing program by derivation.
- New "Refine Instance Mode" option that allows to deactivate the generation of
  obligations in incomplete typeclass instances, raising an error instead.
- "Collection" command to name sets of section hypotheses.  Named collections
  can be used in the syntax of "Proof using" to assert which section variables
  are used in a proof.
- The "Optimize Proof" command can be placed in the middle of a proof to
  force the compaction of the data structure used to represent the ongoing
  proof (evar map). This may result in a lower memory footprint and speed up
  the execution of the following tactics.
- "Optimize Heap" command to tell the OCaml runtime to perform a major
  garbage collection step and heap compaction.
- ``Instance`` no longer treats the ``{|...|}`` syntax specially; it handles it
  in the same way as other commands, e.g. "Definition". Use the ``{...}``
  syntax (no pipe symbols) to recover the old behavior.

Specification Language

- Slight changes in unification error messages.
- Added a syntax $(...)$ that allows putting tactics in terms (may
  break user notations using "$(", fixable by inserting a space or
  rewriting the notation).
- Constructors in pattern-matching patterns now respect the same rules
  regarding implicit arguments as in applicative position. The old
  behavior can be recovered by the command "Set Asymmetric
  Patterns". As a side effect, notations for constructors explicitly
  mentioning non-implicit parameters can now be used in patterns.
  Considering that the pattern language is already rich enough, binding
  local definitions is however now forbidden in patterns (source of
  incompatibilities for local definitions that delta-reduce to a constructor).
- Type inference algorithm now granting opacity of constants. This might also
  affect behavior of tactics (source of incompatibilities, solvable by
  re-declaring transparent constants which were set opaque).
- Existential variables are now referred to by an identifier and the
  relevant part of their instance is displayed by default. They can be
  reparsed. The naming policy is yet unstable and subject to changes
  in future releases.

Tactics

- New tactic engine allowing dependent subgoals, fully backtracking
  (also known as multiple success) tactics, as well as tactics which
  can consider multiple goals together. In the new tactic engine,
  instantiation information of existential variables is always
  propagated to tactics, removing the need to manually use the
  "instantiate" tactics to mark propagation points.

  * New tactical (a+b) inserts a backtracking point. When (a+b);c fails
    during the execution of c, it can backtrack and try b instead of a.
  * New tactical (once a) removes all the backtracking points from a
    (i.e. it selects the first success of a).
  * Tactic "constructor" is now fully backtracking. In case of
    incompatibilities (e.g. combinatoric explosion), the former
    behavior of "constructor" can be retrieved by using instead
    "[> once constructor ..]". Thanks to backtracking, undocumented
    "constructor <tac>" syntax is now equivalent to
    "[> once (constructor; tac) ..]".
  * New "multimatch" variant of "match" tactic which backtracks to
    new branches in case of a later failure. The "match" tactic is
    equivalent to "once multimatch".
  * New selector "all:" such that "all:tac" applies tactic "tac" to
    all the focused goals, instead of just the first one as is the
    default.
  * A corresponding new option Set Default Goal Selector "all" makes
    the tactics in scripts be applied to all the focused goal by default
  * New selector "par:" such that "par:tac" applies the (terminating)
    tactic "tac" to all the focused goal in parallel. The number of worker
    can be selected with -async-proofs-tac-j and also limited using the
    coqworkmgr utility.
  * New tactics "revgoals", "cycle" and "swap" to reorder goals.
  * The semantics of recursive tactics (introduced with "Ltac t := ..."
    or "let rec t := ... in ...") changed slightly as t is now
    applied to every goal, not each goal independently. In particular
    it may be applied when no goals are left. This may cause tactics
    such as "let rec t := constructor;t" to loop indefinitely. The
    simple fix is to rewrite the recursive calls as follows:
    "let rec t := constructor;[t..]" which recovers the earlier behavior
    (source of rare incompatibilities).
  * New tactic language feature "numgoals" to count number of goals. It is
    accompanied by a "guard" tactic which fails if a Boolean test over
    integers does not pass.
  * New tactical "[> ... ]" to apply tactics to individual goals.
  * New tactic "gfail" which works like "fail" except it will also
    fail if every goal has been solved.
  * The refine tactic is changed not to use an ad hoc typing algorithm
    to generate subgoals. It also uses the dependent subgoal feature
    to generate goals to materialize every existential variable which
    is introduced by the refinement (source of incompatibilities).
  * A tactic shelve is introduced to manage the subgoals which may be
    solved by unification: shelve removes every goal it is applied to
    from focus. These goals can later be called back into focus by the
    Unshelve command.
  * A variant shelve_unifiable only removes those goals which appear
    as existential variables in other goals. To emulate the old
    refine, use "refine c;shelve_unifiable". This can still cause
    incompatibilities in rare occasions.
  * New "give_up" tactic to skip over a goal.  A proof containing
    given up goals cannot be closed with "Qed", but only with "Admitted".

- The implementation of the admit tactic has changed: no axiom is
  generated for the admitted sub proof. "admit" is now an alias for
  "give_up".  Code relying on this specific behavior of "admit"
  can be made to work by:

  * Adding an "Axiom" for each admitted subproof.
  * Adding a single "Axiom proof_admitted : False." and the Ltac definition
    "Ltac admit := case proof_admitted.".

- Matching using "lazymatch" was fundamentally modified. It now behaves
  like "match" (immediate execution of the matching branch) but without
  the backtracking mechanism in case of failure.

- New "tryif t then u else v" tactical which executes "u" in case of success
  of "t" and "v" in case of failure.

- New conversion tactic "native_compute": evaluates the goal (or an hypothesis)
  with a call-by-value strategy, using the OCaml native compiler. Useful on
  very intensive computations.

- New "cbn" tactic, a well-behaved simpl.

- Repeated identical calls to omega should now produce identical proof terms.

- Tactics btauto, a reflexive Boolean tautology solver.

- Tactic "tauto" was exceptionally able to destruct other connectives
  than the binary connectives "and", "or", "prod", "sum", "iff". This
  non-uniform behavior has been fixed (bug #2680) and tauto is
  slightly weaker (possible source of incompatibilities). On the
  opposite side, new tactic "dtauto" is able to destruct any
  record-like inductive types, superseding the old version of "tauto".

- Similarly, "intuition" has been made more uniform and, where it now
  fails, "dintuition" can be used (possible source of incompatibilities).

- New option "Unset Intuition Negation Unfolding" for deactivating automatic
  unfolding of "not" in intuition.

- Tactic notations can now be defined locally to a module (use "Local" prefix).

- Tactic "red" now reduces head beta-iota redexes (potential source of
  rare incompatibilities).

- Tactic "hnf" now reduces inner beta-iota redexes
  (potential source of rare incompatibilities).

- Tactic "intro H" now reduces beta-iota redexes if these hide a product
  (potential source of rare incompatibilities).

- In Ltac matching on patterns of the form "_ pat1 ... patn" now
  behaves like if matching on "?X pat1 ... patn", i.e. accepting "_"
  to be instantiated by an applicative term (experimental at this
  stage, potential source of incompatibilities).

- In Ltac matching on goal, types of hypotheses are now interpreted in
  the %type scope (possible source of incompatibilities).

- "change ... in ..." and "simpl ... in ..." now properly consider nested
  occurrences (possible source of incompatibilities since this alters
  the numbering of occurrences), but do not support nested occurrences.

- Tactics simpl, vm_compute and native_compute can be given a notation string
  to a constant as argument.

- When given a reference as argument, simpl, vm_compute and
  native_compute now strictly interpret it as the head of a pattern
  starting with this reference.

- The "change p with c" tactic semantics changed, now type checking
  "c" at each matching occurrence "t" of the pattern "p", and
  converting "t" with "c".

- Now "appcontext" and "context" behave the same. The old buggy behavior of
  "context" can be retrieved at parse time by setting the
  "Tactic Compat Context" flag (possible source of incompatibilities).

- New introduction pattern p/c which applies lemma c on the fly on the
  hypothesis under consideration before continuing with introduction pattern p.

- New introduction pattern [= x1 .. xn] applies "injection as [x1 .. xn]"
  on the fly if injection is applicable to the hypothesis under consideration
  (idea borrowed from Georges Gonthier). Introduction pattern [=] applies
  "discriminate" if a discriminable equality.

- New introduction patterns * and ** to respectively introduce all forthcoming
  dependent variables and all variables/hypotheses dependent or not.

- Tactic "injection c as ipats" now clears c if c refers to an
  hypothesis and moves the resulting equations in the hypotheses
  independently of the number of ipats, which has itself to be less
  than the number of new hypotheses (possible source of incompatibilities;
  former behavior obtainable by "Unset Injection L2R Pattern Order").

- Tactic "injection" now automatically simplifies subgoals
  "existT n p = existT n p'" into "p = p'" when "n" is in an inductive type for
  which a decidable equality scheme has been generated with "Scheme Equality"
  (possible source of incompatibilities).

- New tactic "rewrite_strat" for generalized rewriting with user-defined
  strategies, subsuming autorewrite.

- Injection can now also deduce equality of arguments of sort Prop, by using
  the option "Set Injection On Proofs" (disabled by default). Also improved the
  error messages.

- Tactic "subst id" now supports id occurring in dependent local definitions.

- Bugs fixed about intro-pattern "*" might lead to some rare incompatibilities.

- New tactical "time" to display time spent executing its argument.

- Tactics referring or using a constant dependent in a section variable which
  has been cleared or renamed in the current goal context now fail
  (possible source of incompatibilities solvable by avoiding clearing
  the relevant hypotheses).

- New construct "uconstr:c" and "type_term c" to build untyped terms.

- Binders in terms defined in Ltac (either "constr" or "uconstr") can
  now take their names from identifiers defined in Ltac. As a
  consequence, a name cannot be used in a binder "constr:(fun x =>
  ...)" if an Ltac variable of that name already exists and does not
  contain an identifier. Source of occasional incompatibilities.

- The "refine" tactic now accepts untyped terms built with "uconstr"
  so that terms with holes can be constructed piecewise in Ltac.

- New bullets --, ++, **, ---, +++, ***, ... made available.

- More informative messages when wrong bullet is used.

- Bullet suggestion when a subgoal is solved.

- New tactic "enough", symmetric to "assert", but with subgoals
  swapped, as a more friendly replacement of "cut".

- In destruct/induction, experimental modifier "!" prefixing the
  hypothesis name to tell not erasing the hypothesis.

- Bug fixes in "inversion as" may occasionally lead to incompatibilities.

- Behavior of introduction patterns -> and <- made more uniform
  (hypothesis is cleared, rewrite in hypotheses and conclusion and
  erasing the variable when rewriting a variable).

- New experimental option "Set Standard Proposition Elimination Names"
  so that case analysis or induction on schemes in Type containing
  propositions now produces "H"-based names.

- Tactics from plugins are now active only when the corresponding module
  is imported (source of incompatibilities, solvable by adding an "Import";
  in the particular case of Omega, use "Require Import OmegaTactic").

- Semantics of destruct/induction has been made more regular in some
  edge cases, possibly leading to incompatibilities:

  + new goals are now opened when the term does not match a subterm of
    the goal and has unresolved holes, while in 8.4 these holes were
    turned into existential variables
  + when no "at" option is given, the historical semantics which
    selects all subterms syntactically identical to the first subterm
    matching the given pattern is used
  + non-dependent destruct/induction on an hypothesis with premises in
    an inductive type with indices is fixed
  + residual local definitions are now correctly removed.

- The rename tactic may now replace variables in parallel.

- A new "Info" command replaces the "info" tactical discontinued in
  v8.4. It still gives informative results in many cases.

- The "info_auto" tactic is known to be broken and does not print a
  trace anymore. Use "Info 1 auto" instead. The same goes for
  "info_trivial". On the other hand "info_eauto" still works fine,
  while "Info 1 eauto" prints a trivial trace.

- When using a lemma of the prototypical form "forall A, {a:A & P a}",
  "apply" and "apply in" do not instantiate anymore "A" with the
  current goal and use "a" as the proof, as they were sometimes doing,
  now considering that it is a too powerful decision.

Program

- "Solve Obligations using" changed to "Solve Obligations with",
  consistent with "Proof with".
- Program Lemma, Definition now respect automatic introduction.
- Program Lemma, Definition, etc.. now interpret "->" like Lemma and
  Definition as a non-dependent arrow (potential source of
  incompatibility).
- Add/document "Set Hide Obligations" (to hide obligations in the final
  term inside an implicit argument) and "Set Shrink Obligations" (to
  minimize dependencies of obligations defined by tactics).

Notations

- The syntax "x -> y" is now declared at level 99. In particular, it has
  now a lower priority than "<->": "A -> B <-> C" is now "A -> (B <-> C)"
  (possible source of incompatibilities)
- Notations accept term-providing tactics using the $(...)$ syntax.
- "Bind Scope" can no longer bind "Funclass" and "Sortclass".
- A notation can be given a (compat "8.x") annotation, making it behave
  like a "only parsing" notation, but the annotation may lead to eventually
  issue warnings or errors in further versions when this notation is used.
- More systematic insertion of spaces as a default for printing
  notations ("format" still available to override the default).
- In notations, a level modifier referring to a non-existent variable is
  now considered an error rather than silently ignored.

Tools

- Option -I now only adds directories to the ml path.
- Option -Q behaves as -R, except that the logical path of any loaded file has
  to be fully qualified.
- Option -R no longer adds recursively to the ml path; only the root
  directory is added. (Behavior with respect to the load path is
  unchanged.)
- Option -nois prevents coq/theories and coq/plugins to be recursively
  added to the load path. (Same behavior as with coq/user-contrib.)
- coqdep accepts a -dumpgraph option generating a dot file.
- Makefiles generated through coq_makefile have three new targets "quick"
  "checkproofs" and "vio2vo", allowing respectively to asynchronously compile
  the files without playing the proof scripts, asynchronously checking
  that the quickly generated proofs are correct and generating the object
  files from the quickly generated proofs.
- The XML plugin was discontinued and removed from the source.
- A new utility called coqworkmgr can be used to limit the number of
  concurrent workers started by independent processes, like make and CoqIDE.
  This is of interest for users of the par: goal selector.

Interfaces

- CoqIDE supports asynchronous edition of the document, ongoing tasks and
  errors are reported in the bottom right window.  The number of workers
  taking care of processing proofs can be selected with -async-proofs-j.
- CoqIDE highlights in yellow "unsafe" commands such as axiom
  declarations, and tactics like "give_up".
- CoqIDE supports Proof General like key bindings;
  to activate the PG mode go to Edit -> Preferences -> Editor.
  For the documentation see Help -> Help for PG mode.
- CoqIDE automatically retracts the locked area when one edits the
  locked text.
- CoqIDE search and replace got regular expressions power. See the
  documentation of OCaml's Str module for the supported syntax.
- Many CoqIDE windows, including the query one, are now detachable to
  improve usability on multi screen work stations.
- Coqtop/coqc outputs highlighted syntax. Colors can be configured thanks
  to the COQ_COLORS environment variable, and their current state can
  be displayed with the -list-tags command line option.
- Third party user interfaces can install their main loop in $ROCQLIB/toploop
  and call coqtop with the -toploop flag to select it.

Internal Infrastructure

- Many reorganizations in the ocaml source files. For instance,
  many internal a.s.t. of Coq are now placed in mli files in
  a new directory intf/, for instance constrexpr.mli or glob_term.mli.
  More details in dev/doc/changes.

- The file states/initial.coq does not exist anymore. Instead, coqtop
  initially does a "Require" of Prelude.vo (or nothing when given
  the options -noinit or -nois).

- The format of vo files has slightly changed: cf final comments in
  checker/cic.mli.

- The build system does not produce anymore programs named coqtop.opt
  and a symbolic link to coqtop. Instead, coqtop is now directly
  an executable compiled with the best OCaml compiler available.
  The bytecode program coqtop.byte is still produced. Same for other
  utilities.

- Some options of the ./configure script slightly changed:

  * The -coqrunbyteflags and its blank-separated argument is replaced
    by option -vmbyteflags which expects a comma-separated argument.
  * The -coqtoolsbyteflags option is discontinued, see -no-custom instead.

Miscellaneous

- ML plugins now require a "DECLARE PLUGIN \"foo\"" statement. The "foo" name
  must be exactly the name of the ML module that will be loaded through a
  "Declare ML \"foo\"" command.

Details of changes in 8.5beta2
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logic

- The VM now supports inductive types with up to 8388851 non-constant
  constructors and up to 8388607 constant ones.

Specification language

- Syntax "$(tactic)$" changed to "ltac: tactic".

Tactics

- A script using the admit tactic can no longer be concluded by either
  Qed or Defined. In the first case, Admitted can be used instead. In
  the second case, a subproof should be used.
- The easy tactic and the now tactical now have a more predictable
  behavior, but they might now discharge some previously unsolved goals.

Extraction

- Definitions extracted to Haskell GHC should no longer randomly
  segfault when some Coq types cannot be represented by Haskell types.
- Definitions can now be extracted to Json for post-processing.

Tools

- Option -I -as has been removed, and option -R -as has been
  deprecated. In both cases, option -R can be used instead.
- coq_makefile now generates double-colon rules for rules such as clean.

API

- The interface of [change] has changed to take a [change_arg], which
  can be built from a [constr] using [make_change_arg].

Details of changes in 8.5beta3
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Commands

- New command "Redirect" to redirect the output of a command to a file.
- New command "Undelimit Scope" to remove the delimiter of a scope.
- New option "Strict Universe Declaration", set by default. It enforces the
  declaration of all polymorphic universes appearing in a definition when
  introducing it.
- New command "Show id" to show goal named id.
- Option "Virtual Machine" removed.

Tactics

- New flag "Regular Subst Tactic" which fixes "subst" in situations where
  it failed to substitute all substitutable equations or failed to simplify
  cycles, or accidentally unfolded local definitions (flag is off by default).
- New flag "Loose Hint Behavior" to handle hints loaded but not imported in a
  special way. It accepts three distinct flags:
  * "Lax", which is the default one, sets the old behavior, i.e. a non-imported
  hint behaves the same as an imported one.
  * "Warn" outputs a warning when a non-imported hint is used. Note that this is
  an over-approximation, because a hint may be triggered by an eauto run that
  will eventually fail and backtrack.
  * "Strict" changes the behavior of an unloaded hint to the one of the fail
  tactic, allowing to emulate the hopefully future import-scoped hint mechanism.
- New compatibility flag "Universal Lemma Under Conjunction" which
  let tactics working under conjunctions apply sublemmas of the form
  "forall A, ... -> A".
- New compatibility flag "Bracketing Last Introduction Pattern" which can be
  set so that the last disjunctive-conjunctive introduction pattern given to
  "intros" automatically complete the introduction of its subcomponents, as the
  the disjunctive-conjunctive introduction patterns in non-terminal position
  already do.
- New flag "Shrink Abstract" that minimalizes proofs generated by the abstract
  tactical w.r.t. variables appearing in the body of the proof.

Program

- The "Shrink Obligations" flag now applies to all obligations, not only those
  solved by the automatic tactic.
- Importing Program no longer overrides the "exists" tactic (potential source
  of incompatibilities).
- Hints costs are now correctly taken into account (potential source of
  incompatibilities).
- Documented the Hint Cut command that allows control of the
  proof search during typeclass resolution (see reference manual).

API

- Some functions from pretyping/typing.ml and their derivatives were potential
  source of evarmap leaks, as they dropped their resulting evarmap. The
  situation was clarified by renaming them according to a ``unsafe_*`` scheme. Their
  sound variant is likewise renamed to their old name. The following renamings
  were made.

  * ``Typing.type_of`` -> ``unsafe_type_of``
  * ``Typing.e_type_of`` -> ``type_of``
  * A new ``e_type_of`` function that matches the ``e_`` prefix policy
  * ``Tacmach.pf_type_of`` -> ``pf_unsafe_type_of``
  * A new safe ``pf_type_of`` function.

  All uses of ``unsafe_*`` functions should be eventually eliminated.

Tools

- Added an option -w to control the output of coqtop warnings.
- Configure now takes an optional -native-compiler (yes|no) flag replacing
  -no-native-compiler. The new flag is set to no by default under Windows.
- Flag -no-native-compiler was removed and became the default for coqc. If
  precompilation of files for native conversion test is desired, use
  -native-compiler.
- The -compile command-line option now takes the full path of the considered
  file, including the ".v" extension, and outputs a warning if such an extension
  is lacking.
- The -require and -load-vernac-object command-line options now take a logical
  path of a given library rather than a physical path, thus they behave like
  Require [Import] path.
- The -vm command-line option has been removed.

Standard Library

 - There is now a Coq.Compat.Coq84 library, which sets the various compatibility
   options and does a few redefinitions to make Coq behave more like Coq v8.4.
   The standard way of putting Coq in v8.4 compatibility mode is to pass the command
   line flags "-require Coq.Compat.Coq84 -compat 8.4".

Details of changes in 8.5
~~~~~~~~~~~~~~~~~~~~~~~~~

Tools

- Flag "-compat 8.4" now loads Coq.Compat.Coq84. The standard way of
  putting Coq in v8.4 compatibility mode is to pass the command line flag
  "-compat 8.4". It can be followed by "-require Coq.Compat.AdmitAxiom"
  if the 8.4 behavior of admit is needed, in which case it uses an axiom.

Specification language

- Syntax "$(tactic)$" changed to "ltac:(tactic)".

Tactics

- Syntax "destruct !hyp" changed to "destruct (hyp)", and similarly
  for induction (rare source of incompatibilities easily solvable by
  removing parentheses around "hyp" when not for the purpose of keeping
  the hypothesis).
- Syntax "p/c" for on-the-fly application of a lemma c before
  introducing along pattern p changed to p%c1..%cn. The feature and
  syntax are in experimental stage.
- "Proof using" does not clear unused section variables.
- Tactic "refine" has been changed back to the 8.4 behavior of shelving subgoals
  that occur in other subgoals. The "refine" tactic of 8.5beta3 has been
  renamed "simple refine"; it does not shelve any subgoal.
- New tactical "unshelve tac" which grab existential variables put on
  the tactic shelve by the execution of "tac".

Details of changes in 8.5pl1
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Critical bugfix

- The subterm relation for the guard condition was incorrectly defined on
  primitive projections (#4588)

Plugin development tools

- add a .merlin target to the makefile

Various performance improvements (time, space used by .vo files)

Other bugfixes

- Fix order of arguments to Big.compare_case in ExtrOcamlZBigInt.v
- Added compatibility coercions from Specif.v which were present in Coq 8.4.
- Fixing a source of inefficiency and an artificial dependency in the printer in the congruence tactic.
- Allow to unset the refinement mode of Instance in ML
- Fixing an incorrect use of prod_appvect on a term which was not a product in setoid_rewrite.
- Add -compat 8.4 econstructor tactics, and tests
- Add compatibility Nonrecursive Elimination Schemes
- Fixing the "No applicable tactic" uninformative error message regression on apply.
- Univs: fix get_current_context (bug #4603, part I)
- Fix a bug in Program coercion code
- Fix handling of arity of definitional classes.
- #4630: Some tactics are 20x slower in 8.5 than 8.4.
- #4627: records with no declared arity can be template polymorphic.
- #4623: set tactic too weak with universes (regression)
- Fix incorrect behavior of CS resolution
- #4591: Uncaught exception in directory browsing.
- CoqIDE is more resilient to initialization errors.
- #4614: "Fully check the document" is uninterruptible.
- Try eta-expansion of records only on non-recursive ones
- Fix bug when a sort is ascribed to a Record
- Primitive projections: protect kernel from erroneous definitions.
- Fixed bug #4533 with previous Keyed Unification commit
- Win: kill unreliable hence do not waitpid after kill -9 (Close #4369)
- Fix strategy of Keyed Unification
- #4608: Anomaly "output_value: abstract value (outside heap)".
- #4607: do not read native code files if native compiler was disabled.
- #4105: poor escaping in the protocol between CoqIDE and coqtop.
- #4596: [rewrite] broke in the past few weeks.
- #4533 (partial): respect declared global transparency of projections in unification.ml
- #4544: Backtrack on using full betaiota reduction during keyed unification.
- #4540: CoqIDE bottom progress bar does not update.
- Fix regression from 8.4 in reflexivity
- #4580: [Set Refine Instance Mode] also used for Program Instance.
- #4582: cannot override notation [ x ]. MAY CREATE INCOMPATIBILITIES, see #4683.
- STM: Print/Extraction have to be skipped if -quick
- #4542: CoqIDE: STOP button also stops workers
- STM: classify some variants of Instance as regular `` `Fork `` nodes.
- #4574: Anomaly: Uncaught exception Invalid_argument("splay_arity").
- Do not give a name to anonymous evars anymore. See bug #4547.
- STM: always stock in vio files the first node (state) of a proof
- STM: not delegate proofs that contain Vernac(Module|Require|Import), #4530
- Don't fail fatally if PATH is not set.
- #4537: Coq 8.5 is slower in typeclass resolution.
- #4522: Incorrect "Warning..." on windows.
- #4373: coqdep does not know about .vio files.
- #3826: "Incompatible module types" is uninformative.
- #4495: Failed assertion in metasyntax.ml.
- #4511: evar tactic can create non-typed evars.
- #4503: mixing universe polymorphic and monomorphic variables and definitions in sections is unsupported.
- #4519: oops, global shadowed local universe level bindings.
- #4506: Anomaly: File "pretyping/indrec.ml", line 169, characters 14-20: Assertion failed.
- #4548: CoqIDE crashes when going back one command

Details of changes in 8.5pl2
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Critical bugfix

- Checksums of .vo files dependencies were not correctly checked.
- Unicode-to-ASCII translation was not injective, leading in a soundness bug in
  the native compiler.

Other bugfixes

- #4097: more efficient occur-check in presence of primitive projections
- #4398: type_scope used consistently in "match goal".
- #4450: eauto does not work with polymorphic lemmas
- #4677: fix alpha-conversion in notations needing eta-expansion.
- Fully preserve initial order of hypotheses in "Regular Subst Tactic" mode.
- #4644: a regression in unification.
- #4725: Function (Error: Conversion test raised an anomaly) and Program
  (Error: Cannot infer this placeholder of type)
- #4747: Problem building Coq 8.5pl1 with OCaml 4.03.0: Fatal warnings
- #4752: CoqIDE crash on files not ended by ".v".
- #4777: printing inefficiency with implicit arguments
- #4818: "Admitted" fails due to undefined universe anomaly after calling
  "destruct"
- #4823: remote counter: avoid thread race on sockets
- #4841: -verbose flag changed semantics in 8.5, is much harder to use
- #4851: [nsatz] cannot handle duplicated hypotheses
- #4858: Anomaly: Uncaught exception Failure("hd"). Please report. in variant
  of nsatz
- #4880: [nsatz_compute] generates invalid certificates if given redundant
  hypotheses
- #4881: synchronizing "Declare Implicit Tactic" with backtrack.
- #4882: anomaly with Declare Implicit Tactic on hole of type with evars
- Fix use of "Declare Implicit Tactic" in refine.
  triggered by CoqIDE
- #4069, #4718: congruence fails when universes are involved.

Universes

- Disallow silently dropping universe instances applied to variables
  (forward compatible)
- Allow explicit universe instances on notations, when they can apply
  to the head reference of their expansion.

Build infrastructure

- New update on how to find camlp5 binary and library at configure time.

Details of changes in 8.5pl3
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Critical bugfix

- #4876: Guard checker incompleteness when using primitive projections

Other bugfixes

- #4780: Induction with universe polymorphism on was creating ill-typed terms.
- #4673: regression in setoid_rewrite, unfolding let-ins for type unification.
- #4754: Regression in setoid_rewrite, allow postponed unification problems to remain.
- #4769: Anomaly with universe polymorphic schemes defined inside sections.
- #3886: Program: duplicate obligations of mutual fixpoints.
- #4994: Documentation typo.
- #5008: Use the "md5" command on OpenBSD.
- #5007: Do not assume the "TERM" environment variable is always set.
- #4606: Output a break before a list only if there was an empty line.
- #5001: metas not cleaned properly in clenv_refine_in.
- #2336: incorrect glob data for module symbols (bug #2336).
- #4832: Remove extraneous dot in error message.
- Anomaly in printing a unification error message.
- #4947: Options which take string arguments are not backwards compatible.
- #4156: micromega cache files are now hidden files.
- #4871: interrupting par:abstract kills coqtop.
- #5043: [Admitted] lemmas pick up section variables.
- Fix name of internal refine ("simple refine").
- #5062: probably a typo in Strict Proofs mode.
- #5065: Anomaly: Not a proof by induction.
- Restore native compiler optimizations, they were disabled since 8.5!
- #5077: failure on typing a fixpoint with evars in its type.
- Fix recursive notation bug.
- #5095: irrelevant too strict test in let-in abstraction.
- Ensuring that the evar name is preserved by "rename".
- #4887: confusion between using and with in documentation of firstorder.
- Bug in subst with let-ins.
- #4762: eauto weaker than auto.
- Remove if_then_else (was buggy). Use tryif instead.
- #4970: confusion between special "{" and non-special "{{" in notations.
- #4529: primitive projections unfolding.
- #4416: Incorrect "Error: Incorrect number of goals".
- #4863: abstract in typeclass hint fails.
- #5123: unshelve can impact typeclass resolution
- Fix a collision about the meta-variable ".." in recursive notations.
- Fix printing of info_auto.
- #3209: Not_found due to an occur-check cycle.
- #5097: status of evars refined by "clear" in ltac: closed wrt evars.
- #5150: Missing dependency of the test-suite subsystems in prerequisite.
- Fix a bug in error printing of unif constraints
- #3941: Do not stop propagation of signals when Coq is busy.
- #4822: Incorrect assertion in cbn.
- #3479 parsing of "{" and "}" when a keyword starts with "{" or "}".
- #5127: Memory corruption with the VM.
- #5102: bullets parsing broken by calls to parse_entry.

Various documentation improvements

Version 8.4
-----------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.4 contains the result of three long-term projects: a new
modular library of arithmetic by Pierre Letouzey, a new proof engine by
Arnaud Spiwack and a new communication protocol for CoqIDE by Vincent
Gross.

The new modular library of arithmetic extends, generalizes and unifies
the existing libraries on Peano arithmetic (types nat, N and BigN),
positive arithmetic (type positive), integer arithmetic (Z and BigZ) and
machine word arithmetic (type Int31). It provides with unified notations
(e.g. systematic use of add and mul for denoting the addition and
multiplication operators), systematic and generic development of
operators and properties of these operators for all the types mentioned
above, including gcd, pcm, power, square root, base 2 logarithm,
division, modulo, bitwise operations, logical shifts, comparisons,
iterators, ...

The most visible feature of the new proof engine is the support for
structured scripts (bullets and proof brackets) but, even if yet not
user-available, the new engine also provides the basis for refining
existential variables using tactics, for applying tactics to several
goals simultaneously, for reordering goals, all features which are
planned for the next release. The new proof engine forced Pierre Letouzey
to reimplement info and Show Script differently.

Before version 8.4, CoqIDE was linked to Coq with the graphical
interface living in a separate thread. From version 8.4, CoqIDE is a
separate process communicating with Coq through a textual channel. This
allows for a more robust interfacing, the ability to interrupt Coq
without interrupting the interface, and the ability to manage several
sessions in parallel. Relying on the infrastructure work made by Vincent
Gross, Pierre Letouzey, Pierre Boutillier and Pierre-Marie Pédrot
contributed many various refinements of CoqIDE.

Coq 8.4 also comes with a bunch of various smaller-scale changes
and improvements regarding the different components of the system.

The underlying logic has been extended with η-conversion
thanks to Hugo Herbelin, Stéphane Glondu and Benjamin Grégoire. The
addition of η-conversion is justified by the confidence that
the formulation of the Calculus of Inductive Constructions based on
typed equality (such as the one considered in Lee and Werner to build a
set-theoretic model of CIC :cite:`LeeWerner11`) is
applicable to the concrete implementation of Coq.

The underlying logic benefited also from a refinement of the guard
condition for fixpoints by Pierre Boutillier, the point being that it is
safe to propagate the information about structurally smaller arguments
through β-redexes that are blocked by the “match”
construction (blocked commutative cuts).

Relying on the added permissiveness of the guard condition, Hugo
Herbelin could extend the pattern matching compilation algorithm so that
matching over a sequence of terms involving dependencies of a term or of
the indices of the type of a term in the type of other terms is
systematically supported.

Regarding the high-level specification language, Pierre Boutillier
introduced the ability to give implicit arguments to anonymous
functions, Hugo Herbelin introduced the ability to define notations with
several binders (e.g. ``exists x y z, P``), Matthieu Sozeau made the
typeclass inference mechanism more robust and predictable, Enrico
Tassi introduced a command Arguments that generalizes Implicit Arguments
and Arguments Scope for assigning various properties to arguments of
constants. Various improvements in the type inference algorithm were
provided by Matthieu Sozeau and Hugo Herbelin with contributions from
Enrico Tassi.

Regarding tactics, Hugo Herbelin introduced support for referring to
expressions occurring in the goal by pattern in tactics such as set or
destruct. Hugo Herbelin also relied on ideas from Chung-Kil Hur’s Heq
plugin to introduce automatic computation of occurrences to generalize
when using destruct and induction on types with indices. Stéphane Glondu
introduced new tactics :tacn:`constr_eq`, :tacn:`is_evar`, and :tacn:`has_evar`, to be used
when writing complex tactics. Enrico Tassi added support to fine-tuning
the behavior of :tacn:`simpl`. Enrico Tassi added the ability to specify over
which variables of a section a lemma has to be exactly generalized.
Pierre Letouzey added a tactic timeout and the interruptibility of
:tacn:`vm_compute`. Bug fixes and miscellaneous improvements of the tactic
language came from Hugo Herbelin, Pierre Letouzey and Matthieu Sozeau.

Regarding decision tactics, Loïc Pottier maintained nsatz, moving in
particular to a typeclass based reification of goals while Frédéric
Besson maintained Micromega, adding in particular support for division.

Regarding commands, Stéphane Glondu provided new commands to
analyze the structure of type universes.

Regarding libraries, a new library about lists of a given length (called
vectors) has been provided by Pierre Boutillier. A new instance of
finite sets based on Red-Black trees and provided by Andrew Appel has
been adapted for the standard library by Pierre Letouzey. In the library
of real analysis, Yves Bertot changed the definition of :math:`\pi` and
provided a proof of the long-standing fact yet remaining unproved in
this library, namely that :math:`sin \frac{\pi}{2} =
1`.

Pierre Corbineau maintained the Mathematical Proof Language (C-zar).

Bruno Barras and Benjamin Grégoire maintained the call-by-value
reduction machines.

The extraction mechanism benefited from several improvements provided by
Pierre Letouzey.

Pierre Letouzey maintained the module system, with contributions from
Élie Soubiran.

Julien Forest maintained the Function command.

Matthieu Sozeau maintained the setoid rewriting mechanism.

Coq related tools have been upgraded too. In particular, coq\_makefile
has been largely revised by Pierre Boutillier. Also, patches from Adam
Chlipala for coqdoc have been integrated by Pierre Boutillier.

Bruno Barras and Pierre Letouzey maintained the `coqchk` checker.

Pierre Courtieu and Arnaud Spiwack contributed new features for using
Coq through Proof General.

The Dp plugin has been removed. Use the plugin provided with Why 3
instead (http://why3.lri.fr/).

Under the hood, the Coq architecture benefited from improvements in
terms of efficiency and robustness, especially regarding universes
management and existential variables management, thanks to Pierre
Letouzey and Yann Régis-Gianas with contributions from Stéphane Glondu
and Matthias Puech. The build system is maintained by Pierre Letouzey
with contributions from Stéphane Glondu and Pierre Boutillier.

A new backtracking mechanism simplifying the task of external interfaces
has been designed by Pierre Letouzey.

The general maintenance was done by Pierre Letouzey, Hugo Herbelin,
Pierre Boutillier, Matthieu Sozeau and Stéphane Glondu with also
specific contributions from Guillaume Melquiond, Julien Narboux and
Pierre-Marie Pédrot.

Packaging tools were provided by Pierre Letouzey (Windows), Pierre
Boutillier (MacOS), Stéphane Glondu (Debian). Releasing, testing and
benchmarking support was provided by Jean-Marc Notin.

Many suggestions for improvements were motivated by feedback from users,
on either the bug tracker or the Coq-Club mailing list. Special thanks
are going to the users who contributed patches, starting with Tom
Prince. Other patch contributors include Cédric Auger, David Baelde, Dan
Grayson, Paolo Herms, Robbert Krebbers, Marc Lasson, Hendrik Tews and
Eelis van der Weegen.

| Paris, December 2011
| Hugo Herbelin
|

Potential sources of incompatibilities
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The main known incompatibilities between 8.3 and 8.4 are consequences
of the following changes:

- The reorganization of the library of numbers:

  Several definitions have new names or are defined in modules of
  different names, but a special care has been taken to have this
  renaming transparent for the user thanks to compatibility notations.

  However some definitions have changed, what might require some
  adaptations. The most noticeable examples are:

  + The "?=" notation which now bind to Pos.compare rather than former
    Pcompare (now Pos.compare_cont).
  + Changes in names may induce different automatically generated
    names in proof scripts (e.g. when issuing "destruct Z_le_gt_dec").
  + Z.add has a new definition, hence, applying "simpl" on subterms of
    its body might give different results than before.
  + BigN.shiftl and BigN.shiftr have reversed arguments order, the
    power function in BigN now takes two BigN.

- Other changes in libraries:

  + The definition of functions over "vectors" (list of fixed length)
    have changed.
  + TheoryList.v has been removed.

- Slight changes in tactics:

  + Less unfolding of fixpoints when applying destruct or inversion on
    a fixpoint hiding an inductive type (add an extra call to simpl to
    preserve compatibility).
  + Less unexpected local definitions when applying "destruct"
    (incompatibilities solvable by adapting name hypotheses).
  + Tactic "apply" might succeed more often, e.g. by now solving
    pattern-matching of the form ?f x y = g(x,y) (compatibility
    ensured by using "Unset Tactic Pattern Unification"), but also
    because it supports (full) betaiota (using "simple apply" might
    then help).
  + Tactic autorewrite does no longer instantiate pre-existing
    existential variables.
  + Tactic "info" is now available only for auto, eauto and trivial.

- Miscellaneous changes:

  + The command "Load" is now atomic for backtracking (use "Unset
    Atomic Load" for compatibility).

Details of changes in 8.4beta
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logic

- Standard eta-conversion now supported (dependent product only).
- Guard condition improvement: subterm property is propagated through beta-redex
  blocked by pattern-matching, as in "(match v with C .. => fun x => u end) x";
  this allows for instance to use "rewrite ... in ..." without breaking
  the guard condition.

Specification language and notations

- Maximal implicit arguments can now be set locally by { }. The registration
  traverses fixpoints and lambdas. Because there is conversion in types,
  maximal implicit arguments are not taken into account in partial
  applications (use eta expanded form with explicit { } instead).
- Added support for recursive notations with binders (allows for instance
  to write "exists x y z, P").
- Structure/Record printing can be disable by "Unset Printing Records".
  In addition, it can be controlled on type by type basis using
  "Add Printing Record" or "Add Printing Constructor".
- Pattern-matching compilation algorithm: in "match x, y with ... end",
  possible dependencies of x (or of the indices of its type) in the type
  of y are now taken into account.

Tactics

- New proof engine.
- Scripts can now be structured thanks to bullets - * + and to subgoal
  delimitation via { }. Note: for use with Proof General, a cvs version of
  Proof General no older than mid-July 2011 is currently required.
- Support for tactical "info" is suspended.
- Support for command "Show Script" is suspended.
- New tactics constr_eq, is_evar and has_evar for use in Ltac (DOC TODO).
- Removed the two-argument variant of "decide equality".
- New experimental tactical "timeout <n> <tac>". Since <n> is a time
  in second for the moment, this feature should rather be avoided
  in scripts meant to be machine-independent.
- Fix in "destruct": removal of unexpected local definitions in context might
  result in some rare incompatibilities (solvable by adapting name hypotheses).
- Introduction pattern "_" made more robust.
- Tactic (and Eval command) vm_compute can now be interrupted via Ctrl-C.
- Unification in "apply" supports unification of patterns of the form
  ?f x y = g(x,y) (compatibility ensured by using
  "Unset Tactic Pattern Unification"). It also supports (full) betaiota.
- Tactic autorewrite does no longer instantiate pre-existing
  existential variables (theoretical source of possible incompatibilities).
- Tactic "dependent rewrite" now supports equality in "sig".
- Tactic omega now understands Zpred (wish #1912) and can prove any goal
  from a context containing an arithmetical contradiction (wish #2236).
- Using "auto with nocore" disables the use of the "core" database (wish #2188).
  This pseudo-database "nocore" can also be used with trivial and eauto.
- Tactics "set", "destruct" and "induction" accepts incomplete terms and
  use the goal to complete the pattern assuming it is unambiguous.
- When used on arguments with a dependent type, tactics such as
  "destruct", "induction", "case", "elim", etc. now try to abstract
  automatically the dependencies over the arguments of the types
  (based on initial ideas from Chung-Kil Hur, extension to nested
  dependencies suggested by Dan Grayson)
- Tactic "injection" now failing on an equality showing no constructors while
  it was formerly generalizing again the goal over the given equality.
- In Ltac, the "context [...]" syntax has now a variant "appcontext [...]"
  allowing to match partial applications in larger applications.
- When applying destruct or inversion on a fixpoint hiding an inductive
  type, recursive calls to the fixpoint now remain folded by default (rare
  source of incompatibility generally solvable by adding a call to simpl).
- In an ltac pattern containing a "match", a final "| _ => _" branch could be
  used now instead of enumerating all remaining constructors. Moreover, the
  pattern "match _ with _ => _ end" now allows to match any "match". A "in"
  annotation can also be added to restrict to a precise inductive type.
- The behavior of "simpl" can be tuned using the "Arguments" vernacular.
  In particular constants can be marked so that they are always/never unfolded
  by "simpl", or unfolded only when a set of arguments evaluates to a
  constructor. Last one can mark a constant so that it is unfolded only if the
  simplified term does not expose a match in head position.

Commands

- It is now mandatory to have a space (or tabulation or newline or end-of-file)
  after a "." ending a sentence.
- In SearchAbout, the [ ] delimiters are now optional.
- New command "Add/Remove Search Blacklist <substring> ...":
  a Search or SearchAbout or similar query will never mention lemmas
  whose qualified names contain any of the declared substrings.
  The default blacklisted substrings are ``_subproof``, ``Private_``.
- When the output file of "Print Universes" ends in ".dot" or ".gv",
  the universe graph is printed in the DOT language, and can be
  processed by Graphviz tools.
- New command "Print Sorted Universes".
- The undocumented and obsolete option "Set/Unset Boxed Definitions" has
  been removed, as well as syntaxes like "Boxed Fixpoint foo".
- A new option "Set Default Timeout n / Unset Default Timeout".
- Qed now uses information from the reduction tactics used in proof script
  to avoid conversion at Qed time to go into a very long computation.
- New command "Show Goal ident" to display the statement of a goal, even
  a closed one (available from Proof General).
- Command "Proof" accept a new modifier "using" to force generalization
  over a given list of section variables at section ending (DOC TODO).
- New command "Arguments" generalizing "Implicit Arguments" and
  "Arguments Scope" and that also allows to rename the parameters of a
  definition and to tune the behavior of the tactic "simpl".

Module System

- During subtyping checks, an opaque constant in a module type could now
  be implemented by anything of the right type, even if bodies differ.
  Said otherwise, with respect to subtyping, an opaque constant behaves
  just as a parameter. Coqchk was already implementing this, but not coqtop.
- The inlining done during application of functors can now be controlled
  more precisely, by the annotations (no inline) or (inline at level XX).
  With the latter annotation, only functor parameters whose levels
  are lower or equal than XX will be inlined.
  The level of a parameter can be fixed by "Parameter Inline(30) foo".
  When levels aren't given, the default value is 100. One can also use
  the flag "Set Inline Level ..." to set a level (DOC TODO).
- Print Assumptions should now handle correctly opaque modules (#2168).
- Print Module (Type) now tries to print more details, such as types and
  bodies of the module elements. Note that Print Module Type could be
  used on a module to display only its interface. The option
  "Set Short Module Printing" could be used to switch back to the earlier
  behavior were only field names were displayed.

Libraries

- Extension of the abstract part of Numbers, which now provide axiomatizations
  and results about many more integer functions, such as pow, gcd, lcm, sqrt,
  log2 and bitwise functions. These functions are implemented for nat, N, BigN,
  Z, BigZ. See in particular file NPeano for new functions about nat.

- The definition of types positive, N, Z is now in file BinNums.v

- Major reorganization of ZArith. The initial file ZArith/BinInt.v now contains
  an internal module Z implementing the Numbers interface for integers.
  This module Z regroups:

  * all functions over type Z : Z.add, Z.mul, ...
  * the minimal proofs of specifications for these functions : Z.add_0_l, ...
  * an instantiation of all derived properties proved generically in Numbers :
    Z.add_comm, Z.add_assoc, ...

  A large part of ZArith is now simply compatibility notations, for instance
  Zplus_comm is an alias for Z.add_comm. The direct use of module Z is now
  recommended instead of relying on these compatibility notations.

- Similar major reorganization of NArith, via a module N in NArith/BinNat.v

- Concerning the positive datatype, BinPos.v is now in a specific directory
  PArith, and contains an internal submodule Pos. We regroup there functions
  such as Pos.add Pos.mul etc as well as many results about them. These results
  are here proved directly (no Number interface for strictly positive numbers).

- Note that in spite of the compatibility layers, all these reorganizations
  may induce some marginal incompatibilies in scripts. In particular:

  * the "?=" notation for positive now refers to a binary function Pos.compare,
    instead of the infamous ternary Pcompare (now Pos.compare_cont).
  * some hypothesis names generated by the system may changed (typically for
    a "destruct Z_le_gt_dec") since naming is done after the short name of
    the head predicate (here now "le" in module Z instead of "Zle", etc).
  * the internals of Z.add has changed, now relying of Z.pos_sub.

- Also note these new notations:

  * "<?" "<=?" "=?" for boolean tests such as Z.ltb Z.leb Z.eqb.
  * "÷" for the alternative integer division Z.quot implementing the Truncate
    convention (former ZOdiv), while the notation for the Coq usual division
    Z.div implementing the Flooring convention remains "/". Their corresponding
    modulo functions are Z.rem (no notations) for Z.quot and Z.modulo (infix
    "mod" notation) for Z.div.

- Lemmas about conversions between these datatypes are also organized
  in modules, see for instance modules Z2Nat, N2Z, etc.

- When creating BigN, the macro-generated part NMake_gen is much smaller.
  The generic part NMake has been reworked and improved. Some changes
  may introduce incompatibilities. In particular, the order of the arguments
  for BigN.shiftl and BigN.shiftr is now reversed: the number to shift now
  comes first. By default, the power function now takes two BigN.

- Creation of Vector, an independent library for lists indexed by their length.
  Vectors' names override lists' one so you should not "Import" the library.
  All old names changed: function names follow the ocaml ones and, for example,
  Vcons becomes Vector.cons. You can get [..;..;..]-style notations by importing
  Vector.VectorNotations.

- Removal of TheoryList. Requiring List instead should work most of the time.

- New syntax "rew Heq in H" and "rew <- Heq in H" for eq_rect and
  eq_rect_r (available by importing module EqNotations).

- Wf.iter_nat is now Peano.nat_iter (with an implicit type argument).

Internal infrastructure

- Opaque proofs are now loaded lazily by default. This allows to be almost as
  fast as -dont-load-proofs, while being safer (no creation of axioms) and
  avoiding feature restrictions (Print and Print Assumptions work ok).
- Revised hash-consing code allowing more sharing of memory
- Experimental support added for camlp4 (the one provided alongside ocaml),
  simply pass option -usecamlp4 to ./configure. By default camlp5 is used.
- Revised build system: no more stages in Makefile thanks to some recursive
  aspect of recent gnu make, use of vo.itarget files containing .v to compile
  for both make and ocamlbuild, etc.
- Support of cross-compilation via mingw from unix toward Windows,
  contact P. Letouzey for more informations.
- New Makefile rules mli-doc to make html of mli in dev/doc/html and
  full-stdlib to get a (huge) pdf reflecting the whole standard library.

Extraction

- By default, opaque terms are now truly considered opaque by extraction:
  instead of accessing their body, they are now considered as axioms.
  The previous behavior can be reactivated via the option
  "Set Extraction AccessOpaque".
- The pretty-printer for Haskell now produces layout-independent code
- A new command "Separate Extraction cst1 cst2 ..." that mixes a
  minimal extracted environment a la "Recursive Extraction" and the
  production of several files (one per coq source) a la "Extraction Library"
  (DOC TODO).
- New option "Set/Unset Extraction KeepSingleton" for preventing the
  extraction to optimize singleton container types (DOC TODO).
- The extraction now identifies and properly rejects a particular case of
  universe polymorphism it cannot handle yet (the pair (I,I) being Prop).
- Support of anonymous fields in record (#2555).

CoqIDE

- CoqIDE now runs coqtop as separated process, making it more robust:
  coqtop subprocess can be interrupted, or even killed and relaunched
  (cf button "Restart Coq", ex-"Go to Start"). For allowing such
  interrupts, the Windows version of coqide now requires Windows >= XP
  SP1.
- The communication between CoqIDE and coqtop is now done via a dialect
  of XML (DOC TODO).
- The backtrack engine of CoqIDE has been reworked, it now uses the
  "Backtrack" command similarly to Proof General.
- The CoqIDE parsing of sentences has be reworked and now supports
  tactic delimitation via { }.
- CoqIDE now accepts the Abort command (wish #2357).
- CoqIDE can read coq_makefile files as "project file" and use it to
  set automatically options to send to coqtop.
- Preference files have moved to $XDG_CONFIG_HOME/coq and accelerators
  are not stored as a list anymore.

Tools

- Coq now searches directories specified in COQPATH, $XDG_DATA_HOME/coq,
  $XDG_DATA_DIRS/coq, and user-contribs before the standard library.

- Coq rc file has moved to $XDG_CONFIG_HOME/coq.

- Major changes to coq_makefile:

  * mli/mlpack/mllib taken into account, ml not preproccessed anymore, ml4 work;
  * mlihtml generates doc of mli, install-doc install the html doc in DOCDIR
    with the same policy as vo in COQLIB;
  * More variables are given by coqtop -config, others are defined only if the
    users doesn't have defined them elsewhere. Consequently, generated makefile
    should work directly on any architecture;
  * Packagers can take advantage of $(DSTROOT) introduction. Installation can
    be made in $XDG_DATA_HOME/coq;
  * -arg option allows to send option as argument to coqc.

Details of changes in 8.4beta2
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Commands

- Commands "Back" and "BackTo" are now handling the proof states. They may
  perform some extra steps of backtrack to avoid states where the proof
  state is unavailable (typically a closed proof).
- The commands "Suspend" and "Resume" have been removed.
- A basic Show Script has been reintroduced (no indentation).
- New command "Set Parsing Explicit" for deactivating parsing (and printing)
  of implicit arguments (useful for teaching).
- New command "Grab Existential Variables" to transform the unresolved evars
  at the end of a proof into goals.

Tactics

- Still no general "info" tactical, but new specific tactics info_auto,
  info_eauto, info_trivial which provides information on the proofs found
  by auto/eauto/trivial. Display of these details could also be activated by
  "Set Info Auto"/"Set Info Eauto"/"Set Info Trivial".
- Details on everything tried by auto/eauto/trivial during a proof search
  could be obtained by "debug auto", "debug eauto", "debug trivial" or by a
  global "Set Debug Auto"/"Set Debug Eauto"/"Set Debug Trivial".
- New command "r string" in Ltac debugger that interprets "idtac
  string" in Ltac code as a breakpoint and jumps to its next use.
- Tactics from the Dp plugin (simplify, ergo, yices, cvc3, z3, cvcl,
  harvey, zenon, gwhy) have been removed, since Why2 has not been
  maintained for the last few years. The Why3 plugin should be a suitable
  replacement in most cases.

Libraries

- MSetRBT: a new implementation of MSets via Red-Black trees (initial
  contribution by Andrew Appel).
- MSetAVL: for maximal sharing with the new MSetRBT, the argument order
  of Node has changed (this should be transparent to regular MSets users).

Module System

- The names of modules (and module types) are now in a fully separated
  namespace from ordinary definitions: "Definition E:=0. Module E. End E."
  is now accepted.

CoqIDE

- CoqIDE now supports the "Restart" command, and "Undo" (with a warning).
  Better support for "Abort".

Details of changes in 8.4
~~~~~~~~~~~~~~~~~~~~~~~~~

Commands

- The "Reset" command is now supported again in files given to coqc or Load.
- "Show Script" now indents again the displayed scripts. It can also work
  correctly across Load'ed files if the option "Unset Atomic Load" is used.
- "Open Scope" can now be given the delimiter (e.g. Z) instead of the full
  scope name (e.g. Z_scope).

Notations

- Most compatibility notations of the standard library are now tagged as
  (compat xyz), where xyz is a former Coq version, for instance "8.3".
  These notations behave as (only parsing) notations, except that they may
  triggers warnings (or errors) when used while Coq is not in a corresponding
  -compat mode.
- To activate these compatibility warnings, use "Set Verbose Compat Notations"
  or the command-line flag -verbose-compat-notations.
- For a strict mode without these compatibility notations, use
  "Unset Compat Notations" or the command-line flag -no-compat-notations.

Tactics

- An annotation "eqn:H" or "eqn:?" can be added to a "destruct"
  or "induction" to make it generate equations in the spirit of "case_eq".
  The former syntax "_eqn" is discontinued.
- The name of the hypothesis introduced by tactic "remember" can be
  set via the new syntax "remember t as x eqn:H" (wish #2489).

Libraries

- Reals: changed definition of PI, no more axiom about sin(PI/2).
- SetoidPermutation: a notion of permutation for lists modulo a setoid equality.
- BigN: fixed the ocaml code doing the parsing/printing of big numbers.
- List: a couple of lemmas added especially about no-duplication, partitions.
- Init: Removal of the coercions between variants of sigma-types and
  subset types (possible source of incompatibility).

Version 8.3
-----------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.3 is before all a transition version with refinements or
extensions of the existing features and libraries and a new tactic nsatz
based on Hilbert’s Nullstellensatz for deciding systems of equations
over rings.

With respect to libraries, the main evolutions are due to Pierre
Letouzey with a rewriting of the library of finite sets FSets and a new
round of evolutions in the modular development of arithmetic (library
Numbers). The reason for making FSets evolve is that the computational
and logical contents were quite intertwined in the original
implementation, leading in some cases to longer computations than
expected and this problem is solved in the new MSets implementation. As
for the modular arithmetic library, it was only dealing with the basic
arithmetic operators in the former version and its current extension
adds the standard theory of the division, min and max functions, all
made available for free to any implementation of :math:`\mathbb{N}`,
:math:`\mathbb{Z}` or :math:`\mathbb{Z}/n\mathbb{Z}`.

The main other evolutions of the library are due to Hugo Herbelin who
made a revision of the sorting library (including a certified
merge-sort) and to Guillaume Melquiond who slightly revised and cleaned
up the library of reals.

The module system evolved significantly. Besides the resolution of some
efficiency issues and a more flexible construction of module types, Élie
Soubiran brought a new model of name equivalence, the
:math:`\Delta`-equivalence, which respects as much as possible the names
given by the users. He also designed with Pierre Letouzey a new,
convenient operator ``<+`` for nesting functor application that
provides a light notation for inheriting the properties of cascading
modules.

The new tactic nsatz is due to Loïc Pottier. It works by computing
Gröbner bases. Regarding the existing tactics, various improvements have
been done by Matthieu Sozeau, Hugo Herbelin and Pierre Letouzey.

Matthieu Sozeau extended and refined the typeclasses and Program
features (the Russell language). Pierre Letouzey maintained and improved
the extraction mechanism. Bruno Barras and Élie Soubiran maintained the
Coq checker, Julien Forest maintained the Function mechanism for
reasoning over recursively defined functions. Matthieu Sozeau, Hugo
Herbelin and Jean-Marc Notin maintained coqdoc. Frédéric Besson
maintained the Micromega platform for deciding systems of inequalities.
Pierre Courtieu maintained the support for the Proof General Emacs
interface. Claude Marché maintained the plugin for calling external
provers (dp). Yves Bertot made some improvements to the libraries of
lists and integers. Matthias Puech improved the search functions.
Guillaume Melquiond usefully contributed here and there. Yann
Régis-Gianas grounded the support for Unicode on a more standard and
more robust basis.

Though invisible from outside, Arnaud Spiwack improved the general
process of management of existential variables. Pierre Letouzey and
Stéphane Glondu improved the compilation scheme of the Coq archive.
Vincent Gross provided support to CoqIDE. Jean-Marc Notin provided
support for benchmarking and archiving.

Many users helped by reporting problems, providing patches, suggesting
improvements or making useful comments, either on the bug tracker or on
the Coq-Club mailing list. This includes but not exhaustively Cédric
Auger, Arthur Charguéraud, François Garillot, Georges Gonthier, Robin
Green, Stéphane Lescuyer, Eelis van der Weegen, ...

Though not directly related to the implementation, special thanks are
going to Yves Bertot, Pierre Castéran, Adam Chlipala, and Benjamin
Pierce for the excellent teaching materials they provided.

| Paris, April 2010
| Hugo Herbelin
|

Details of changes
~~~~~~~~~~~~~~~~~~

Rewriting tactics

- Tactic "rewrite" now supports rewriting on ad hoc equalities such as eq_true.
- "Hint Rewrite" now checks that the lemma looks like an equation.
- New tactic "etransitivity".
- Support for heterogeneous equality (JMeq) in "injection" and "discriminate".
- Tactic "subst" now supports heterogeneous equality and equality
  proofs that are dependent (use "simple subst" for preserving compatibility).
- Added support for Leibniz-rewriting of dependent hypotheses.
- Renamed "Morphism" into "Proper" and "respect" into "proper_prf"
  (possible source of incompatibility). A partial fix is to define
  "Notation Morphism R f := (Proper (R%signature) f)."
- New tactic variants "rewrite* by" and "autorewrite*" that rewrite
  respectively the first and all matches whose side-conditions are
  solved.
- "Require Import Setoid" does not export all of "Morphisms" and
  "RelationClasses" anymore (possible source of incompatibility, fixed
  by importing "Morphisms" too).
- Support added for using Chung-Kil Hur's Heq library for rewriting over
  heterogeneous equality (courtesy of the library's author).
- Tactic "replace" supports matching terms with holes.

Automation tactics

- Tactic ``intuition`` now preserves inner ``iff`` and ``not`` (exceptional
  source of incompatibilities solvable by redefining ``intuition`` as
  ``unfold iff, not in *; intuition``, or, for iff only, by using
  ``Set Intuition Iff Unfolding``.)
- Tactic ``tauto`` now proves classical tautologies as soon as classical logic
  (i.e. library ``Classical_Prop`` or ``Classical``) is loaded.
- Tactic ``gappa`` has been removed from the Dp plugin.
- Tactic ``firstorder`` now supports the combination of its ``using`` and
  ``with`` options.
- New ``Hint Resolve ->`` (or ``<-``) for declaring iff's as oriented
  hints (wish #2104).
- An inductive type as argument of the ``using`` option of ``auto`` / ``eauto`` / ``firstorder``
  is interpreted as using the collection of its constructors.
- New decision tactic "nsatz" to prove polynomial equations
  by computation of Groebner bases.

Other tactics

- Tactic "discriminate" now performs intros before trying to discriminate an
  hypothesis of the goal (previously it applied intro only if the goal
  had the form t1<>t2) (exceptional source of incompatibilities - former
  behavior can be obtained by "Unset Discriminate Introduction").
- Tactic "quote" now supports quotation of arbitrary terms (not just the
  goal).
- Tactic "idtac" now displays its "list" arguments.
- New introduction patterns "*" for introducing the next block of dependent
  variables and "**" for introducing all quantified variables and hypotheses.
- Pattern Unification for existential variables activated in tactics and
  new option "Unset Tactic Evars Pattern Unification" to deactivate it.
- Resolution of canonical structure is now part of the tactic's unification
  algorithm.
- New tactic "decide lemma with hyp" for rewriting decidability lemmas
  when one knows which side is true.
- Improved support of dependent goals over objects in dependent types for
  "destruct" (rare source of incompatibility that can be avoided by unsetting
  option "Dependent Propositions Elimination").
- Tactic "exists", "eexists", "destruct" and "edestruct" supports iteration
  using comma-separated arguments.
- Tactic names "case" and "elim" now support clauses "as" and "in" and become
  then synonymous of "destruct" and "induction" respectively.
- A new tactic name "exfalso" for the use of 'ex-falso quodlibet' principle.
  This tactic is simply a shortcut for "elimtype False".
- Made quantified hypotheses get the name they would have if introduced in
  the context (possible but rare source of incompatibilities).
- When applying a component of a conjunctive lemma, "apply in" (and
  sequences of "apply in") now leave the side conditions of the lemmas
  uniformly after the main goal (possible source of rare incompatibilities).
- In "simpl c" and "change c with d", c can be a pattern.
- Tactic "revert" now preserves let-in's making it the exact inverse of
  "intro".
- New tactics "clear dependent H" and "revert dependent H" that
  clears (resp. reverts) H and all the hypotheses that depend on H.
- Ltac's pattern-matching now supports matching metavariables that
  depend on variables bound upwards in the pattern.

Tactic definitions

- Ltac definitions support Local option for non-export outside modules.
- Support for parsing non-empty lists with separators in tactic notations.
- New command "Locate Ltac" to get the full name of an Ltac definition.

Notations

- Record syntax ``{|x=...; y=...|}`` now works inside patterns too.
- Abbreviations from non-imported module now invisible at printing time.
- Abbreviations now use implicit arguments and arguments scopes for printing.
- Abbreviations to pure names now strictly behave like the name they refer to
  (make redirections of qualified names easier).
- Abbreviations for applied constant now propagate the implicit arguments
  and arguments scope of the underlying reference (possible source of
  incompatibilities generally solvable by changing such abbreviations from
  e.g. ``Notation foo' := (foo x)`` to ``Notation foo' y := (foo x (y:=y))``).
- The "where" clause now supports multiple notations per defined object.
- Recursive notations automatically expand one step on the left for better
  factorization; recursion notations inner separators now ensured being tokens.
- Added "Reserved Infix" as a specific shortcut of the corresponding
  "Reserved Notation".
- Open/Close Scope command supports Global option in sections.

Specification language

- New support for local binders in the syntax of Record/Structure fields.
- Fixpoint/CoFixpoint now support building part or all of bodies using tactics.
- Binders given before ":" in lemmas and in definitions built by tactics are
  now automatically introduced (possible source of incompatibility that can
  be resolved by invoking "Unset Automatic Introduction").
- New support for multiple implicit arguments signatures per reference.

Module system

- Include Type is now deprecated since Include now accepts both modules and
  module types.
- Declare ML Module supports Local option.
- The sharing between non-logical object and the management of the
  name-space has been improved by the new "Delta-equivalence" on
  qualified name.
- The include operator has been extended to high-order structures
- Sequences of Include can be abbreviated via new syntax "<+".
- A module (or module type) can be given several "<:" signatures.
- Interactive proofs are now permitted in module type. Functors can hence
  be declared as Module Type and be used later to type themselves.
- A functor application can be prefixed by a "!" to make it ignore any
  "Inline" annotation in the type of its argument(s) (for examples of
  use of the new features, see libraries Structures and Numbers).
- Coercions are now active only when modules are imported (use "Set Automatic
  Coercions Import" to get the behavior of the previous versions of Coq).

Extraction

- When using (Recursive) Extraction Library, the filenames are directly the
  Coq ones with new appropriate extensions : we do not force anymore
  uncapital first letters for Ocaml and capital ones for Haskell.
- The extraction now tries harder to avoid code transformations that can be
  dangerous for the complexity. In particular many eta-expansions at the top
  of functions body are now avoided, clever partial applications will likely
  be preserved, let-ins are almost always kept, etc.
- In the same spirit, auto-inlining is now disabled by default, except for
  induction principles, since this feature was producing more frequently
  weird code than clear gain. The previous behavior can be restored via
  "Set Extraction AutoInline".
- Unicode characters in identifiers are now transformed into ascii strings
  that are legal in Ocaml and other languages.
- Harsh support of module extraction to Haskell and Scheme: module hierarchy
  is flattened, module abbreviations and functor applications are expanded,
  module types and unapplied functors are discarded.
- Less unsupported situations when extracting modules to Ocaml. In particular
  module parameters might be alpha-renamed if a name clash is detected.
- Extract Inductive is now possible toward non-inductive types (e.g. nat => int)
- Extraction Implicit: this new experimental command allows to mark
  some arguments of a function or constructor for removed during
  extraction, even if these arguments don't fit the usual elimination
  principles of extraction, for instance the length n of a vector.
- Files ExtrOcaml*.v in plugins/extraction try to provide a library of common
  extraction commands: mapping of basics types toward Ocaml's counterparts,
  conversions from/to int and big_int, or even complete mapping of nat,Z,N
  to int or big_int, or mapping of ascii to char and string to char list
  (in this case recognition of ascii constants is hard-wired in the extraction).

Program

- Streamlined definitions using well-founded recursion and measures so
  that they can work on any subset of the arguments directly (uses currying).
- Try to automatically clear structural fixpoint prototypes in
  obligations to avoid issues with opacity.
- Use return type clause inference in pattern-matching as in the standard
  typing algorithm.
- Support [Local Obligation Tactic] and [Next Obligation with tactic].
- Use [Show Obligation Tactic] to print the current default tactic.
- [fst] and [snd] have maximal implicit arguments in Program now (possible
  source of incompatibility).

Type classes

- Declaring axiomatic type class instances in Module Type should be now
  done via new command "Declare Instance", while the syntax "Instance"
  now always provides a concrete instance, both in and out of Module Type.
- Use [Existing Class foo] to declare a preexisting object [foo] as a class.
  [foo] can be an inductive type or a constant definition. No
  projections or instances are defined.
- Various bug fixes and improvements: support for defined fields,
  anonymous instances, declarations giving terms, better handling of
  sections and [Context].

Commands

- New command "Timeout <n> <command>." interprets a command and a timeout
  interrupts the execution after <n> seconds.
- New command "Compute <expr>." is a shortcut for "Eval vm_compute in <expr>".
- New command "Fail <command>." interprets a command and is successful iff
  the command fails on an error (but not an anomaly). Handy for tests and
  illustration of wrong commands.
- Most commands referring to constant (e.g. Print or About) now support
  referring to the constant by a notation string.
- New option "Boolean Equality Schemes" to make generation of boolean
  equality automatic for datatypes (together with option "Decidable
  Equality Schemes", this replaces deprecated option "Equality Scheme").
- Made support for automatic generation of case analysis schemes available
  to user (governed by option "Set Case Analysis Schemes").
- New command :n:`{? Global } Generalizable {| All | No } {| Variable | Variables } {* @ident}` to
  declare which identifiers are generalizable in `` `{} `` and `` `() `` binders.
- New command "Print Opaque Dependencies" to display opaque constants in
  addition to all variables, parameters or axioms a theorem or
  definition relies on.
- New command "Declare Reduction <id> := <conv_expr>", allowing to write
  later "Eval <id> in ...". This command accepts a Local variant.
- Syntax of Implicit Type now supports more than one block of variables of
  a given type.
- Command "Canonical Structure" now warns when it has no effects.
- Commands of the form "Set X" or "Unset X" now support "Local" and "Global"
  prefixes.

Library

- Use "standard" Coq names for the properties of eq and identity
  (e.g. refl_equal is now eq_refl). Support for compatibility is provided.

- The function Compare_dec.nat_compare is now defined directly,
  instead of relying on lt_eq_lt_dec. The earlier version is still
  available under the name nat_compare_alt.

- Lemmas in library Relations and Reals have been homogenized a bit.

- The implicit argument of Logic.eq is now maximally inserted, allowing
  to simply write "eq" instead of "@eq _" in morphism signatures.

- Wrongly named lemmas (Zlt_gt_succ and Zlt_succ_gt) fixed (potential source
  of incompatibilities)

- List library:

  + Definitions of list, length and app are now in Init/Datatypes.
    Support for compatibility is provided.
  + Definition of Permutation is now in Sorting/Permtation.v
  + Some other light revisions and extensions (possible source
    of incompatibilities solvable by qualifying names accordingly).

- In ListSet, set_map has been fixed (source of incompatibilities if used).

- Sorting library:

  + new mergesort of worst-case complexity O(n*ln(n)) made available in
    Mergesort.v;
  + former notion of permutation up to setoid from Permutation.v is
    deprecated and moved to PermutSetoid.v;
  + heapsort from Heap.v of worst-case complexity O(n*n) is deprecated;
  + new file Sorted.v for some definitions of being sorted.

- Structure library. This new library is meant to contain generic
  structures such as types with equalities or orders, either
  in Module version (for now) or Type Classes (still to do):

  + DecidableType.v and OrderedType.v: initial notions for FSets/FMaps,
    left for compatibility but considered as deprecated.
  + Equalities.v and Orders.v: evolutions of the previous files,
    with fine-grain Module architecture, many variants, use of
    Equivalence and other relevant Type Classes notions.
  + OrdersTac.v: a generic tactic for solving chains of (in)equalities
    over variables. See {Nat,N,Z,P}OrderedType.v for concrete instances.
  + GenericMinMax.v: any ordered type can be equipped with min and max.
    We derived here all the generic properties of these functions.

- MSets library: an important evolution of the FSets library.
  "MSets" stands for Modular (Finite) Sets, by contrast with a forthcoming
  library of Class (Finite) Sets contributed by S. Lescuyer which will be
  integrated with the next release of Coq. The main features of MSets are:

  + The use of Equivalence, Proper and other Type Classes features
    easing the handling of setoid equalities.
  + The interfaces are now stated in iff-style. Old specifications
    are now derived properties.
  + The compare functions are now pure, and return a "comparison" value.
    Thanks to the CompSpec inductive type, reasoning on them remains easy.
  + Sets structures requiring invariants (i.e. sorted lists) are
    built first as "Raw" sets (pure objects and separate proofs) and
    attached with their proofs thanks to a generic functor. "Raw" sets
    have now a proper interface and can be manipulated directly.

  Note: No Maps yet in MSets. The FSets library is still provided
  for compatibility, but will probably be considered as deprecated in the
  next release of Coq.

- Numbers library:

  + The abstract layer (NatInt, Natural/Abstract, Integer/Abstract) has
    been simplified and enhance thanks to new features of the module
    system such as Include (see above). It has been extended to Euclidean
    division (three flavors for integers: Trunc, Floor and Math).
  + The arbitrary-large efficient numbers (BigN, BigZ, BigQ) has also
    been reworked. They benefit from the abstract layer improvements
    (especially for div and mod). Note that some specifications have
    slightly changed (compare, div, mod, shift{r,l}). Ring/Field should
    work better (true recognition of constants).

Tools

- Option -R now supports binding Coq root read-only.
- New coqtop/coqc option -beautify to reformat .v files (usable
  e.g. to globally update notations).
- New tool beautify-archive to beautify a full archive of developments.
- New coqtop/coqc option -compat X.Y to simulate the general behavior
  of previous versions of Coq (provides e.g. support for 8.2 compatibility).

Coqdoc

- List have been revamped.  List depth and scope is now determined by
  an "offside" whitespace rule.
- Text may be italicized by placing it in _underscores_.
- The "--index <string>" flag changes the filename of the index.
- The "--toc-depth <int>" flag limits the depth of headers which are
  included in the table of contents.
- The "--lib-name <string>" flag prints "<string> Foo" instead of
  "Library Foo" where library titles are called for.  The
  "--no-lib-name" flag eliminates the extra title.
- New option "--parse-comments" to allow parsing of regular ``(* *)``
  comments.
- New option "--plain-comments" to disable interpretation inside comments.
- New option "--interpolate" to try and typeset identifiers in Coq escapings
  using the available globalization information.
- New option "--external url root" to refer to external libraries.
- Links to section variables and notations now supported.

Internal infrastructure

- To avoid confusion with the repository of user's contributions,
  the subdirectory "contrib" has been renamed into "plugins".
  On platforms supporting ocaml native dynlink, code located there
  is built as loadable plugins for coqtop.
- An experimental build mechanism via ocamlbuild is provided.
  From the top of the archive, run ./configure as usual, and
  then ./build. Feedback about this build mechanism is most welcome.
  Compiling Coq on platforms such as Windows might be simpler
  this way, but this remains to be tested.
- The Makefile system has been simplified and factorized with
  the ocamlbuild system. In particular "make" takes advantage
  of .mllib files for building .cma/.cmxa. The .vo files to
  compile are now listed in several vo.itarget files.

Version 8.2
-----------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.2 adds new features, new libraries and improves on many
various aspects.

Regarding the language of Coq, the main novelty is the introduction by
Matthieu Sozeau of a package of commands providing Haskell-style typeclasses.
Typeclasses, which come with a few convenient features such as
type-based resolution of implicit arguments, play a new landmark role
in the architecture of Coq with respect to automation. For
instance, thanks to typeclass support, Matthieu Sozeau could
implement a new resolution-based version of the tactics dedicated to
rewriting on arbitrary transitive relations.

Another major improvement of Coq 8.2 is the evolution of the arithmetic
libraries and of the tools associated with them. Benjamin Grégoire and
Laurent Théry contributed a modular library for building arbitrarily
large integers from bounded integers while Evgeny Makarov contributed a
modular library of abstract natural and integer arithmetic together
with a few convenient tactics. On his side, Pierre Letouzey made
numerous extensions to the arithmetic libraries on :math:`\mathbb{Z}`
and :math:`\mathbb{Q}`, including extra support for automation in
presence of various number-theory concepts.

Frédéric Besson contributed a reflective tactic based on Krivine-Stengle
Positivstellensatz (the easy way) for validating provability of systems
of inequalities. The platform is flexible enough to support the
validation of any algorithm able to produce a “certificate” for the
Positivstellensatz and this covers the case of Fourier-Motzkin (for
linear systems in :math:`\mathbb{Q}` and :math:`\mathbb{R}`),
Fourier-Motzkin with cutting planes (for linear systems in
:math:`\mathbb{Z}`) and sum-of-squares (for non-linear systems). Evgeny
Makarov made the platform generic over arbitrary ordered rings.

Arnaud Spiwack developed a library of 31-bits machine integers and,
relying on Benjamin Grégoire and Laurent Théry’s library, delivered a
library of unbounded integers in base :math:`2^{31}`. As importantly, he
developed a notion of “retro-knowledge” so as to safely extend the
kernel-located bytecode-based efficient evaluation algorithm of Coq
version 8.1 to use 31-bits machine arithmetic for efficiently computing
with the library of integers he developed.

Beside the libraries, various improvements were contributed to provide a more
comfortable end-user language and more expressive tactic language. Hugo
Herbelin and Matthieu Sozeau improved the pattern matching compilation
algorithm (detection of impossible clauses in pattern matching,
automatic inference of the return type). Hugo Herbelin, Pierre Letouzey
and Matthieu Sozeau contributed various new convenient syntactic
constructs and new tactics or tactic features: more inference of
redundant information, better unification, better support for proof or
definition by fixpoint, more expressive rewriting tactics, better
support for meta-variables, more convenient notations...

Élie Soubiran improved the module system, adding new features (such as
an “include” command) and making it more flexible and more general. He
and Pierre Letouzey improved the support for modules in the extraction
mechanism.

Matthieu Sozeau extended the Russell language, ending in an convenient
way to write programs of given specifications, Pierre Corbineau extended
the Mathematical Proof Language and the automation tools that
accompany it, Pierre Letouzey supervised and extended various parts of the
standard library, Stéphane Glondu contributed a few tactics and
improvements, Jean-Marc Notin provided help in debugging, general
maintenance and coqdoc support, Vincent Siles contributed extensions of
the Scheme command and of injection.

Bruno Barras implemented the ``coqchk`` tool: this is a stand-alone
type checker that can be used to certify .vo files. Especially, as this
verifier runs in a separate process, it is granted not to be “hijacked”
by virtually malicious extensions added to Coq.

Yves Bertot, Jean-Christophe Filliâtre, Pierre Courtieu and Julien
Forest acted as maintainers of features they implemented in previous
versions of Coq.

Julien Narboux contributed to CoqIDE. Nicolas Tabareau made the
adaptation of the interface of the old “setoid rewrite” tactic to the
new version. Lionel Mamane worked on the interaction between Coq and its
external interfaces. With Samuel Mimram, he also helped making Coq
compatible with recent software tools. Russell O’Connor, Cezary
Kaliszyk, Milad Niqui contributed to improve the libraries of integers,
rational, and real numbers. We also thank many users and partners for
suggestions and feedback, in particular Pierre Castéran and Arthur
Charguéraud, the INRIA Marelle team, Georges Gonthier and the
INRIA-Microsoft Mathematical Components team, the Foundations group at
Radboud university in Nijmegen, reporters of bugs and participants to
the Coq-Club mailing list.

| Palaiseau, June 2008
| Hugo Herbelin
|

Details of changes
~~~~~~~~~~~~~~~~~~

Language

- If a fixpoint is not written with an explicit { struct ... }, then
  all arguments are tried successively (from left to right) until one is
  found that satisfies the structural decreasing condition.
- New experimental typeclass system giving ad-hoc polymorphism and
  overloading based on dependent records and implicit arguments.
- New syntax "let 'pat := b in c" for let-binding using irrefutable patterns.
- New syntax "forall {A}, T" for specifying maximally inserted implicit
  arguments in terms.
- Sort of Record/Structure, Inductive and CoInductive defaults to Type
  if omitted.
- (Co)Inductive types can be defined as records
  (e.g. "CoInductive stream := { hd : nat; tl : stream }.")
- New syntax "Theorem id1:t1 ... with idn:tn" for proving mutually dependent
  statements.
- Support for sort-polymorphism on constants denoting inductive types.
- Several evolutions of the module system (handling of module aliases,
  functorial module types, an Include feature, etc).
- Prop now a subtype of Set (predicative and impredicative forms).
- Recursive inductive types in Prop with a single constructor of which
  all arguments are in Prop is now considered to be a singleton
  type. It consequently supports all eliminations to Prop, Set and Type.
  As a consequence, Acc_rect has now a more direct proof [possible source
  of easily fixed incompatibility in case of manual definition of a recursor
  in a recursive singleton inductive type].

Commands

- Added option Global to "Arguments Scope" for section surviving.
- Added option "Unset Elimination Schemes" to deactivate the automatic
  generation of elimination schemes.
- Modification of the Scheme command so you can ask for the name to be
  automatically computed (e.g. Scheme Induction for nat Sort Set).
- New command "Combined Scheme" to build combined mutual induction
  principles from existing mutual induction principles.
- New command "Scheme Equality" to build a decidable (boolean) equality
  for simple inductive datatypes and a decision property over this equality
  (e.g.  Scheme Equality for nat).
- Added option "Set Equality Scheme" to make automatic the declaration
  of the boolean equality when possible.
- Source of universe inconsistencies now printed when option
  "Set Printing Universes" is activated.
- New option "Set Printing Existential Instances" for making the display of
  existential variable instances explicit.
- Support for option "[id1 ... idn]", and "-[id1 ... idn]", for the
  "compute"/"cbv" reduction strategy, respectively meaning reduce only, or
  everything but, the constants id1 ... idn. "lazy" alone or followed by
  "[id1 ... idn]", and "-[id1 ... idn]" also supported, meaning apply
  all of beta-iota-zeta-delta, possibly restricting delta.
- New command "Strategy" to control the expansion of constants during
  conversion tests. It generalizes commands Opaque and Transparent by
  introducing a range of levels. Lower levels are assigned to constants
  that should be expanded first.
- New options Global and Local to Opaque and Transparent.
- New command "Print Assumptions" to display all variables, parameters
  or axioms a theorem or definition relies on.
- "Add Rec LoadPath" now provides references to libraries using partially
  qualified names (this holds also for coqtop/coqc option -R).
- SearchAbout supports negated search criteria, reference to logical objects
  by their notation, and more generally search of subterms.
- "Declare ML Module" now allows to import .cmxs files when Coq is
  compiled in native code with a version of OCaml that supports native
  Dynlink (>= 3.11).
- Specific sort constraints on Record now taken into account.
- "Print LoadPath" supports a path argument to filter the display.

Libraries

- Several parts of the libraries are now in Type, in particular FSets,
  SetoidList, ListSet, Sorting, Zmisc. This may induce a few
  incompatibilities. In case of trouble while fixing existing development,
  it may help to simply declare Set as an alias for Type (see file
  SetIsType).

- New arithmetical library in theories/Numbers. It contains:

  * an abstract modular development of natural and integer arithmetics
    in Numbers/Natural/Abstract and Numbers/Integer/Abstract
  * an implementation of efficient computational bounded and unbounded
    integers that can be mapped to processor native arithmetics.
    See Numbers/Cyclic/Int31 for 31-bit integers and Numbers/Natural/BigN
    for unbounded natural numbers and Numbers/Integer/BigZ for unbounded
    integers.
  * some proofs that both older libraries Arith, ZArith and NArith and
    newer BigN and BigZ implement the abstract modular development.
    This allows in particular BigN and BigZ to already come with a
    large database of basic lemmas and some generic tactics (ring),

  This library has still an experimental status, as well as the
  processor-acceleration mechanism, but both its abstract and its
  concrete parts are already quite usable and could challenge the use
  of nat, N and Z in actual developments. Moreover, an extension of
  this framework to rational numbers is ongoing, and an efficient
  Q structure is already provided (see Numbers/Rational/BigQ), but
  this part is currently incomplete (no abstract layer and generic
  lemmas).

- Many changes in FSets/FMaps. In practice, compatibility with earlier
  version should be fairly good, but some adaptations may be required.

  * Interfaces of unordered ("weak") and ordered sets have been factorized
    thanks to new features of Coq modules (in particular Include), see
    FSetInterface. Same for maps. Hints in these interfaces have been
    reworked (they are now placed in a "set" database).
  * To allow full subtyping between weak and ordered sets, a field
    "eq_dec" has been added to OrderedType. The old version of OrderedType
    is now called MiniOrderedType and functor MOT_to_OT allow to
    convert to the new version. The interfaces and implementations
    of sets now contain also such a "eq_dec" field.
  * FSetDecide, contributed by Aaron Bohannon, contains a decision
    procedure allowing to solve basic set-related goals (for instance,
    is a point in a particular set ?). See FSetProperties for examples.
  * Functors of properties have been improved, especially the ones about
    maps, that now propose some induction principles. Some properties
    of fold need less hypothesis.
  * More uniformity in implementations of sets and maps: they all use
    implicit arguments, and no longer export unnecessary scopes (see
    bug #1347)
  * Internal parts of the implementations based on AVL have evolved a
    lot. The main files FSetAVL and FMapAVL are now much more
    lightweight now. In particular, minor changes in some functions
    has allowed to fully separate the proofs of operational
    correctness from the proofs of well-balancing: well-balancing is
    critical for efficiency, but not anymore for proving that these
    trees implement our interfaces, hence we have moved these proofs
    into appendix files FSetFullAVL and FMapFullAVL. Moreover, a few
    functions like union and compare have been modified in order to be
    structural yet efficient. The appendix files also contains
    alternative versions of these few functions, much closer to the
    initial Ocaml code and written via the Function framework.

- Library IntMap, subsumed by FSets/FMaps, has been removed from
  Coq Standard Library and moved into a user contribution Cachan/IntMap

- Better computational behavior of some constants (eq_nat_dec and
  le_lt_dec more efficient, Z_lt_le_dec and Positive_as_OT.compare
  transparent, ...) (exceptional source of incompatibilities).

- Boolean operators moved from module Bool to module Datatypes (may need
  to rename qualified references in script and force notations || and &&
  to be at levels 50 and 40 respectively).

- The constructors xI and xO of type positive now have postfix notations
  "~1" and "~0", allowing to write numbers in binary form easily, for instance
  6 is 1~1~0 and 4*p is p~0~0 (see BinPos.v).

- Improvements to NArith (Nminus, Nmin, Nmax), and to QArith (in particular
  a better power function).

- Changes in ZArith: several additional lemmas (used in theories/Numbers),
  especially in Zdiv, Znumtheory, Zpower. Moreover, many results in
  Zdiv have been generalized: the divisor may simply be non-null
  instead of strictly positive (see lemmas with name ending by
  "_full"). An alternative file ZOdiv proposes a different behavior
  (the one of Ocaml) when dividing by negative numbers.

- Changes in Arith: EqNat and Wf_nat now exported from Arith, some
  constructions on nat that were outside Arith are now in (e.g. iter_nat).

- In SetoidList, eqlistA now expresses that two lists have similar elements
  at the same position, while the predicate previously called eqlistA
  is now equivlistA (this one only states that the lists contain the same
  elements, nothing more).

- Changes in Reals:

  * Most statement in "sigT" (including the
    completeness axiom) are now in "sig" (in case of incompatibility,
    use proj1_sig instead of projT1, sig instead of sigT, etc).
  * More uniform naming scheme (identifiers in French moved to English,
    consistent use of 0 -- zero -- instead of O -- letter O --, etc).
  * Lemma on prod_f_SO is now on prod_f_R0.
  * Useless hypothesis of ln_exists1 dropped.
  * New Rlogic.v states a few logical properties about R axioms.
  * RIneq.v extended and made cleaner.

- Slight restructuration of the Logic library regarding choice and classical
  logic. Addition of files providing intuitionistic axiomatizations of
  descriptions: Epsilon.v, Description.v and IndefiniteDescription.v.

- Definition of pred and minus made compatible with the structural
  decreasing criterion for use in fixpoints.

- Files Relations/Rstar.v and Relations/Newman.v moved out to the user
  contribution repository (contribution CoC_History). New lemmas about
  transitive closure added and some bound variables renamed (exceptional
  risk of incompatibilities).

- Syntax for binders in terms (e.g. for "exists") supports anonymous names.

Notations, coercions, implicit arguments and type inference

- More automation in the inference of the return clause of dependent
  pattern-matching problems.
- Experimental allowance for omission of the clauses easily detectable as
  impossible in pattern-matching problems.
- Improved inference of implicit arguments.
- New options "Set Maximal Implicit Insertion", "Set Reversible Pattern
  Implicit", "Set Strongly Strict Implicit" and "Set Printing Implicit
  Defensive" for controlling inference and use of implicit arguments.
- New modifier in "Implicit Arguments" to force an implicit argument to
  be maximally inserted.
- New modifier of "Implicit Arguments" to enrich the set of implicit arguments.
- New options Global and Local to "Implicit Arguments" for section
  surviving or non-export outside module.
- Level "constr" moved from 9 to 8.
- Structure/Record now printed as Record (unless option Printing All is set).
- Support for parametric notations defining constants.
- Insertion of coercions below product types refrains to unfold
  constants (possible source of incompatibility).
- New support for fix/cofix in notations.

Tactic Language

- Second-order pattern-matching now working in Ltac "match" clauses
  (syntax for second-order unification variable is "@?X").
- Support for matching on let bindings in match context using syntax
  "H := body" or "H := body : type".
- Ltac accepts integer arguments (syntax is "ltac:nnn" for nnn an integer).
- The general sequence tactical "expr_0 ; [ expr_1 | ... | expr_n ]"
  is extended so that at most one expr_i may have the form "expr .."
  or just "..". Also, n can be different from the number of subgoals
  generated by expr_0. In this case, the value of expr (or idtac in
  case of just "..") is applied to the intermediate subgoals to make
  the number of tactics equal to the number of subgoals.
- A name used as the name of the parameter of a lemma (like f in
  "apply f_equal with (f:=t)") is now interpreted as a ltac variable
  if such a variable exists (this is a possible source of
  incompatibility and it can be fixed by renaming the variables of a
  ltac function into names that do not clash with the lemmas
  parameter names used in the tactic).
- New syntax "Ltac tac ::= ..." to rebind a tactic to a new expression.
- "let rec ... in ... " now supported for expressions without explicit
  parameters; interpretation is lazy to the contrary of "let ... in ...";
  hence, the "rec" keyword can be used to turn the argument of a
  "let ... in ..." into a lazy one.
- Patterns for hypotheses types in "match goal" are now interpreted in
  type_scope.
- A bound variable whose name is not used elsewhere now serves as
  metavariable in "match" and it gets instantiated by an identifier
  (allow e.g. to extract the name of a statement like "exists x, P x").
- New printing of Ltac call trace for better debugging.

Tactics

- New tactics "apply -> term", "apply <- term", "apply -> term in
  ident", "apply <- term in ident" for applying equivalences (iff).

- Slight improvement of the hnf and simpl tactics when applied on
  expressions with explicit occurrences of match or fix.

- New tactics "eapply in", "erewrite", "erewrite in".

- New tactics "ediscriminate", "einjection", "esimplify_eq".

- Tactics "discriminate", "injection", "simplify_eq" now support any
  term as argument. Clause "with" is also supported.

- Unfoldable references can be given by notation's string rather than by name
  in unfold.

- The "with" arguments are now typed using informations from the current goal:
  allows support for coercions and more inference of implicit arguments.

- Application of "f_equal"-style lemmas works better.

- Tactics elim, case, destruct and induction now support variants eelim,
  ecase, edestruct and einduction.

- Tactics destruct and induction now support the "with" option and the
  "in" clause option. If the option "in" is used, an equality is added
  to remember the term to which the induction or case analysis applied
  (possible source of parsing incompatibilities when destruct or induction is
  part of a let-in expression in Ltac; extra parentheses are then required).

- New support for "as" clause in tactics "apply in" and "eapply in".

- Some new intro patterns:

  * intro pattern "?A" genererates a fresh name based on A.
    Caveat about a slight loss of compatibility:
    Some intro patterns don't need space between them. In particular
    intros ?a?b used to be legal and equivalent to intros ? a ? b. Now it
    is still legal but equivalent to intros ?a ?b.
  * intro pattern "(A & ... & Y & Z)" synonym to "(A,....,(Y,Z)))))"
    for right-associative constructs like /\ or exists.

- Several syntax extensions concerning "rewrite":

  * "rewrite A,B,C" can be used to rewrite A, then B, then C. These rewrites
    occur only on the first subgoal: in particular, side-conditions of the
    "rewrite A" are not concerned by the "rewrite B,C".
  * "rewrite A by tac" allows to apply tac on all side-conditions generated by
    the "rewrite A".
  * "rewrite A at n" allows to select occurrences to rewrite: rewrite only
    happen at the n-th exact occurrence of the first successful matching of
    A in the goal.
  * "rewrite 3 A" or "rewrite 3!A" is equivalent to "rewrite A,A,A".
  * "rewrite !A" means rewriting A as long as possible (and at least once).
  * "rewrite 3?A" means rewriting A at most three times.
  * "rewrite ?A" means rewriting A as long as possible (possibly never).
  * many of the above extensions can be combined with each other.

- Introduction patterns better respect the structure of context in presence of
  missing or extra names in nested disjunction-conjunction patterns [possible
  source of rare incompatibilities].

- New syntax "rename a into b, c into d" for "rename a into b; rename c into d"

- New tactics "dependent induction/destruction H [ generalizing id_1 .. id_n ]"
  to do induction-inversion on instantiated inductive families à la BasicElim.

- Tactics "apply" and "apply in" now able to reason modulo unfolding of
  constants (possible source of incompatibility in situations where apply
  may fail, e.g. as argument of a try or a repeat and in a ltac function);
  versions that do not unfold are renamed into "simple apply" and
  "simple apply in" (usable for compatibility or for automation).

- Tactics "apply" and "apply in" now able to traverse conjunctions and to
  select the first matching lemma among the components of the conjunction;
  tactic "apply" also able to apply lemmas of conclusion an empty type.

- Tactic "apply" now supports application of several lemmas in a row.

- Tactics "set" and "pose" can set functions using notation "(f x1..xn := c)".

- New tactic "instantiate" (without argument).

- Tactic firstorder "with" and "using" options have their meaning swapped for
  consistency with auto/eauto (source of incompatibility).

- Tactic "generalize" now supports "at" options to specify occurrences
  and "as" options to name the quantified hypotheses.

- New tactic "specialize H with a" or "specialize (H a)" allows to transform
  in-place a universally-quantified hypothesis (H : forall x, T x) into its
  instantiated form (H : T a). Nota: "specialize" was in fact there in earlier
  versions of Coq, but was undocumented, and had a slightly different behavior.

- New tactic "contradict H" can be used to solve any kind of goal as long as
  the user can provide afterwards a proof of the negation of the hypothesis H.
  If H is already a negation, say ~T, then a proof of T is asked.
  If the current goal is a negation, say ~U, then U is saved in H afterwards,
  hence this new tactic "contradict" extends earlier tactic "swap", which is
  now obsolete.

- Tactics f_equal is now done in ML instead of Ltac: it now works on any
  equality of functions, regardless of the arity of the function.

- New options "before id", "at top", "at bottom" for tactics "move"/"intro".

- Some more debug of reflexive omega (``romega``), and internal clarifications.
  Moreover, romega now has a variant ``romega with *`` that can be also used
  on non-Z goals (nat, N, positive) via a call to a translation tactic named
  zify (its purpose is to Z-ify your goal...). This zify may also be used
  independently of romega.

- Tactic "remember" now supports an "in" clause to remember only selected
  occurrences of a term.

- Tactic "pose proof" supports name overriding in case of specialization of an
  hypothesis.

- Semi-decision tactic "jp" for first-order intuitionistic logic moved to user
  contributions (subsumed by "firstorder").

Program

- Moved useful tactics in theories/Program and documented them.
- Add Program.Basics which contains standard definitions for functional
  programming (id, apply, flip...)
- More robust obligation handling, dependent pattern-matching and
  well-founded definitions.
- New syntax " dest term as pat in term " for destructing objects using
  an irrefutable pattern while keeping equalities (use this instead of
  "let" in Programs).
- Program CoFixpoint is accepted, Program Fixpoint uses the new way to infer
  which argument decreases structurally.
- Program Lemma, Axiom etc... now permit to have obligations in the statement
  iff they can be automatically solved by the default tactic.
- Renamed "Obligations Tactic" command to "Obligation Tactic".
- New command "Preterm [ of id ]" to see the actual term fed to Coq for
  debugging purposes.
- New option "Transparent Obligations" to control the declaration of
  obligations as transparent or opaque. All obligations are now transparent
  by default, otherwise the system declares them opaque if possible.
- Changed the notations "left" and "right" to "in_left" and "in_right" to hide
  the proofs in standard disjunctions, to avoid breaking existing scripts when
  importing Program. Also, put them in program_scope.

Type Classes

- New "Class", "Instance" and "Program Instance" commands to define
  classes and instances documented in the reference manual.
- New binding construct " [ Class_1 param_1 .. param_n, Class_2 ... ] "
  for binding type classes, usable everywhere.
- New command " Print Classes " and " Print Instances some_class " to
  print tables for typeclasses.
- New default eauto hint database "typeclass_instances" used by the default
  typeclass instance search tactic.
- New theories directory "theories/Classes" for standard typeclasses
  declarations. Module Classes.RelationClasses is a typeclass port of
  Relation_Definitions plus a generic development of algebra on
  n-ary heterogeneous predicates.

Setoid rewriting

- Complete (and still experimental) rewrite of the tactic
  based on typeclasses. The old interface and semantics are
  almost entirely respected, except:

  + Import Setoid is now mandatory to be able to call setoid_replace
    and declare morphisms.

  + "-->", "++>" and "==>" are now right associative notations
    declared at level 55 in scope signature_scope.
    Their introduction may break existing scripts that defined
    them as notations with different levels.

  + One needs to use [Typeclasses unfold [cst]] if [cst] is used
    as an abbreviation hiding products in types of morphisms,
    e.g. if ones redefines [relation] and declares morphisms
    whose type mentions [relation].

  + The [setoid_rewrite]'s semantics change when rewriting with
    a lemma: it can rewrite two different instantiations of the lemma
    at once. Use [setoid_rewrite H at 1] for (almost) the usual semantics.
    [setoid_rewrite] will also try to rewrite under binders now, and can
    succeed on different terms than before. In particular, it will unify under
    let-bound variables. When called through [rewrite], the semantics are
    unchanged though.

  + [Add Morphism term : id] has different semantics when used with
    parametric morphism: it will try to find a relation on the parameters
    too. The behavior has also changed with respect to default relations:
    the most recently declared Setoid/Relation will be used, the documentation
    explains how to customize this behavior.

  + Parametric Relation and Morphism are declared differently, using the
    new [Add Parametric] commands, documented in the manual.

  + Setoid_Theory is now an alias to Equivalence, scripts building objects
    of type Setoid_Theory need to unfold (or "red") the definitions
    of Reflexive, Symmetric and Transitive in order to get the same goals
    as before. Scripts which introduced variables explicitly will not break.

  + The order of subgoals when doing [setoid_rewrite] with side-conditions
    is always the same: first the new goal, then the conditions.

- New standard library modules ``Classes.Morphisms`` declares
  standard morphisms on ``refl`` / ``sym`` / ``trans`` relations.
  ``Classes.Morphisms_Prop`` declares morphisms on propositional
  connectives and ``Classes.Morphisms_Relations`` on generalized predicate
  connectives. ``Classes.Equivalence`` declares notations and tactics
  related to equivalences and ``Classes.SetoidTactics`` defines the
  setoid_replace tactics and some support for the ``Add *`` interface,
  notably the tactic applied automatically before each ``Add Morphism``
  proof.

- User-defined subrelations are supported, as well as higher-order morphisms
  and rewriting under binders. The tactic is also extensible entirely in Ltac.
  The documentation has been updated to cover these features.

- [setoid_rewrite] and [rewrite] now support the [at] modifier to select
  occurrences to rewrite, and both use the [setoid_rewrite] code, even when
  rewriting with leibniz equality if occurrences are specified.

Extraction

- Improved behavior of the Caml extraction of modules: name clashes should
  not happen anymore.

- The command Extract Inductive has now a syntax for infix notations. This
  allows in particular to map Coq lists and pairs onto OCaml ones:

  + Extract Inductive list => list [ "[]" "(::)" ].
  + Extract Inductive prod => "(*)" [ "(,)" ].

- In pattern matchings, a default pattern "| _ -> ..." is now used whenever
  possible if several branches are identical. For instance, functions
  corresponding to decidability of equalities are now linear instead of
  quadratic.

- A new instruction Extraction Blacklist id1 .. idn allows to prevent filename
  conflits with existing code, for instance when extracting module List
  to Ocaml.

CoqIDE

- CoqIDE font defaults to monospace so as indentation to be meaningful.
- CoqIDE supports nested goals and any other kind of declaration in the middle
  of a proof.
- Undoing non-tactic commands in CoqIDE works faster.
- New CoqIDE menu for activating display of various implicit informations.
- Added the possibility to choose the location of tabs in coqide:
  (in Edit->Preferences->Misc)
- New Open and Save As dialogs in CoqIDE which filter ``*.v`` files.

Tools

- New stand-alone .vo files verifier "coqchk".
- Extended -I coqtop/coqc option to specify a logical dir: "-I dir -as coqdir".
- New coqtop/coqc option -exclude-dir to exclude subdirs for option -R.
- The binary "parser" has been renamed to "coq-parser".
- Improved coqdoc and dump of globalization information to give more
  meta-information on identifiers. All categories of Coq definitions are
  supported, which makes typesetting trivial in the generated documentation.
  Support for hyperlinking and indexing developments in the tex output
  has been implemented as well.

Miscellaneous

- Coq installation provides enough files so that Ocaml's extensions need not
  the Coq sources to be compiled (this assumes O'Caml 3.10 and Camlp5).
- New commands "Set Whelp Server" and "Set Whelp Getter" to customize the
  Whelp search tool.
- Syntax of "Test Printing Let ref" and "Test Printing If ref" changed into
  "Test Printing Let for ref" and "Test Printing If for ref".
- An overhauled build system (new Makefiles); see dev/doc/build-system.txt.
- Add -browser option to configure script.
- Build a shared library for the C part of Coq, and use it by default on
  non-(Windows or MacOS) systems. Bytecode executables are now pure. The
  behavior is configurable with -coqrunbyteflags, -coqtoolsbyteflags and
  -custom configure options.
- Complexity tests can be skipped by setting the environment variable
  COQTEST_SKIPCOMPLEXITY.

Version 8.1
-----------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8.1 adds various new functionalities.

Benjamin Grégoire implemented an alternative algorithm to check the
convertibility of terms in the Coq type checker. This alternative
algorithm works by compilation to an efficient bytecode that is
interpreted in an abstract machine similar to Xavier Leroy’s ZINC
machine. Convertibility is performed by comparing the normal forms. This
alternative algorithm is specifically interesting for proofs by
reflection. More generally, it is convenient in case of intensive
computations.

Christine Paulin implemented an extension of inductive types allowing
recursively non-uniform parameters. Hugo Herbelin implemented
sort-polymorphism for inductive types (now called template polymorphism).

Claudio Sacerdoti Coen improved the tactics for rewriting on arbitrary
compatible equivalence relations. He also generalized rewriting to
arbitrary transition systems.

Claudio Sacerdoti Coen added new features to the module system.

Benjamin Grégoire, Assia Mahboubi and Bruno Barras developed a new, more
efficient and more general simplification algorithm for rings and
semirings.

Laurent Théry and Bruno Barras developed a new, significantly more
efficient simplification algorithm for fields.

Hugo Herbelin, Pierre Letouzey, Julien Forest, Julien Narboux and
Claudio Sacerdoti Coen added new tactic features.

Hugo Herbelin implemented matching on disjunctive patterns.

New mechanisms made easier the communication between Coq and external
provers. Nicolas Ayache and Jean-Christophe Filliâtre implemented
connections with the provers cvcl, Simplify and zenon. Hugo Herbelin
implemented an experimental protocol for calling external tools from the
tactic language.

Matthieu Sozeau developed Russell, an experimental language to specify
the behavior of programs with subtypes.

A mechanism to automatically use some specific tactic to solve
unresolved implicit has been implemented by Hugo Herbelin.

Laurent Théry’s contribution on strings and Pierre Letouzey and
Jean-Christophe Filliâtre’s contribution on finite maps have been
integrated to the Coq standard library. Pierre Letouzey developed a
library about finite sets “à la Objective Caml”. With Jean-Marc Notin,
he extended the library on lists. Pierre Letouzey’s contribution on
rational numbers has been integrated and extended.

Pierre Corbineau extended his tactic for solving first-order statements.
He wrote a reflection-based intuitionistic tautology solver.

Pierre Courtieu, Julien Forest and Yves Bertot added extra support to
reason on the inductive structure of recursively defined functions.

Jean-Marc Notin significantly contributed to the general maintenance of
the system. He also took care of ``coqdoc``.

Pierre Castéran contributed to the documentation of (co)inductive types
and suggested improvements to the libraries.

Pierre Corbineau implemented a declarative mathematical proof language,
usable in combination with the tactic-based style of proof.

Finally, many users suggested improvements of the system through the
Coq-Club mailing list and bug-tracker systems, especially user groups
from INRIA Rocquencourt, Radboud University, University of Pennsylvania
and Yale University.

| Palaiseau, July 2006
| Hugo Herbelin
|

Details of changes in 8.1beta
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logic

- Added sort-polymorphism on inductive families
- Allowance for recursively non-uniform parameters in inductive types

Syntax

- No more support for version 7 syntax and for translation to version 8 syntax.
- In fixpoints, the { struct ... } annotation is not mandatory any more when
  only one of the arguments has an inductive type
- Added disjunctive patterns in match-with patterns
- Support for primitive interpretation of string literals
- Extended support for Unicode ranges

Commands

- Added "Print Ltac qualid" to print a user defined tactic.
- Added "Print Rewrite HintDb" to print the content of a DB used by
  autorewrite.
- Added "Print Canonical Projections".
- Added "Example" as synonym of "Definition".
- Added "Proposition" and "Corollary" as extra synonyms of "Lemma".
- New command "Whelp" to send requests to the Helm database of proofs
  formalized in the Calculus of Inductive Constructions.
- Command "functional induction" has been re-implemented from the new
  "Function" command.

Ltac and tactic syntactic extensions

- New primitive "external" for communication with tool external to Coq
- New semantics for "match t with": if a clause returns a
  tactic, it is now applied to the current goal. If it fails, the next
  clause or next matching subterm is tried (i.e. it behaves as "match
  goal with" does). The keyword "lazymatch" can be used to delay the
  evaluation of tactics occurring in matching clauses.
- Hint base names can be parametric in auto and trivial.
- Occurrence values can be parametric in unfold, pattern, etc.
- Added entry constr_may_eval for tactic extensions.
- Low-priority term printer made available in ML-written tactic extensions.
- "Tactic Notation" extended to allow notations of tacticals.

Tactics

- New implementation and generalization of ``setoid_*`` (``setoid_rewrite``,
  ``setoid_symmetry``, ``setoid_transitivity``, ``setoid_reflexivity`` and ``autorewite``).
  New syntax for declaring relations and morphisms (old syntax still working
  with minor modifications, but deprecated).

- New implementation (still experimental) of the ring tactic with a built-in
  notion of coefficients and a better usage of setoids.

- New conversion tactic "vm_compute": evaluates the goal (or an hypothesis)
  with a call-by-value strategy, using the compiled version of terms.

- When rewriting H where H is not directly a Coq equality, search first H for
  a registered setoid equality before starting to reduce in H. This is unlikely
  to break any script. Should this happen nonetheless, one can insert manually
  some "unfold ... in H" before rewriting.

- Fixed various bugs about (setoid) rewrite ... in ... (in particular bug #5941)

- "rewrite ... in" now accepts a clause as place where to rewrite instead of
  just a simple hypothesis name. For instance:
  ``rewrite H in H1,H2 |- *`` means ``rewrite H in H1; rewrite H in H2; rewrite H``
  ``rewrite H in * |-``  will do try ``rewrite H in Hi`` for all hypothesis Hi <> H.

- Added "dependent rewrite term" and "dependent rewrite term in hyp".

- Added "autorewrite with ... in hyp [using ...]".

- Tactic "replace" now accepts a "by" tactic clause.

- Added "clear - id" to clear all hypotheses except the ones depending in id.

- The argument of Declare Left Step and Declare Right Step is now a term
  (it used to be a reference).

- Omega now handles arbitrary precision integers.

- Several bug fixes in Reflexive Omega (romega).

- Idtac can now be left implicit in a [...|...] construct: for instance,
  [ foo | | bar ] stands for [ foo | idtac | bar ].

- Fixed a "fold" bug (noncritical but possible source of incompatibilities).

- Added classical_left and classical_right which transforms ``|- A \/ B`` into
  ``~B |- A`` and ``~A |- B`` respectively.

- Added command "Declare Implicit Tactic" to set up a default tactic to be
  used to solve unresolved subterms of term arguments of tactics.

- Better support for coercions to Sortclass in tactics expecting type
  arguments.

- Tactic "assert" now accepts "as" intro patterns and "by" tactic clauses.

- New tactic "pose proof" that generalizes "assert (id:=p)" with intro patterns.

- New introduction pattern "?" for letting Coq choose a name.

- Introduction patterns now support side hypotheses (e.g. intros [|] on
  "(nat -> nat) -> nat" works).

- New introduction patterns "->" and "<-" for immediate rewriting of
  introduced hypotheses.

- Introduction patterns coming after nontrivial introduction patterns now
  force full introduction of the first pattern (e.g. ``intros [[|] p]`` on
  ``nat->nat->nat`` now behaves like ``intros [[|?] p]``)

- Added "eassumption".

- Added option 'using lemmas' to auto, trivial and eauto.

- Tactic "congruence" is now complete for its intended scope (ground
  equalities and inequalities with constructors). Furthermore, it
  tries to equates goal and hypotheses.

- New tactic "rtauto" solves pure propositional logic and gives a
  reflective version of the available proof.

- Numbering of "pattern", "unfold", "simpl", ... occurrences in "match
  with" made consistent with the printing of the return clause after
  the term to match in the "match-with" construct (use "Set Printing All"
  to see hidden occurrences).

- Generalization of induction "induction x1...xn using scheme" where
  scheme is an induction principle with complex predicates (like the
  ones generated by function induction).

- Some small Ltac tactics has been added to the standard library
  (file Tactics.v):

  * f_equal : instead of using the different f_equalX lemmas
  * case_eq : a "case" without loss of information. An equality
    stating the current situation is generated in every sub-cases.
  * swap : for a negated goal ~B and a negated hypothesis H:~A,
    swap H asks you to prove A from hypothesis B
  * revert : revert H is generalize H; clear H.

Extraction

- All type parts should now disappear instead of sometimes producing _
  (for instance in Map.empty).
- Haskell extraction: types of functions are now printed, better
  unsafeCoerce mechanism, both for hugs and ghc.
- Scheme extraction improved, see http://www.pps.jussieu.fr/~letouzey/scheme.
- Many bug fixes.

Modules

- Added "Locate Module qualid" to get the full path of a module.
- Module/Declare Module syntax made more uniform.
- Added syntactic sugar "Declare Module Export/Import" and
  "Module Export/Import".
- Added syntactic sugar "Module M(Export/Import X Y: T)" and
  "Module Type M(Export/Import X Y: T)"
  (only for interactive definitions)
- Construct "with" generalized to module paths:
  T with (Definition|Module) M1.M2....Mn.l := l'.

Notations

- Option "format" aware of recursive notations.
- Added insertion of spaces by default in recursive notations w/o separators.
- No more automatic printing box in case of user-provided printing "format".
- New notation "exists! x:A, P" for unique existence.
- Notations for specific numerals now compatible with generic notations of
  numerals (e.g. "1" can be used to denote the unit of a group without
  hiding 1%nat)

Libraries

- New library on String and Ascii characters (contributed by L. Thery).
- New library FSets+FMaps of finite sets and maps.
- New library QArith on rational numbers.
- Small extension of Zmin.V, new Zmax.v, new Zminmax.v.
- Reworking and extension of the files on classical logic and
  description principles (possible incompatibilities)
- Few other improvements in ZArith potentially exceptionally breaking the
  compatibility (useless hypothesys of Zgt_square_simpl and
  Zlt_square_simpl removed; fixed names mentioning letter O instead of
  digit 0; weaken premises in Z_lt_induction).
- Restructuration of Eqdep_dec.v and Eqdep.v: more lemmas in Type.
- Znumtheory now contains a gcd function that can compute within Coq.
- More lemmas stated on Type in Wf.v, removal of redundant Acc_iter and
  Acc_iter2.
- Change of the internal names of lemmas in OmegaLemmas.
- Acc in Wf.v and clos_refl_trans in Relation_Operators.v now rely on
  the allowance for recursively non-uniform parameters (possible
  source of incompatibilities: explicit pattern-matching on these
  types may require to remove the occurrence associated with their
  recursively non-uniform parameter).
- Coq.List.In_dec has been set transparent (this may exceptionally break
  proof scripts, set it locally opaque for compatibility).
- More on permutations of lists in List.v and Permutation.v.
- List.v has been much expanded.
- New file SetoidList.v now contains results about lists seen with
  respect to a setoid equality.
- Library NArith has been expanded, mostly with results coming from
  Intmap (for instance a bitwise xor), plus also a bridge between N and
  Bitvector.
- Intmap has been reorganized. In particular its address type "addr" is
  now N. User contributions known to use Intmap have been adapted
  accordingly. If you're using this library please contact us.
  A wrapper FMapIntMap now presents Intmap as a particular implementation
  of FMaps. New developments are strongly encouraged to use either this
  wrapper or any other implementations of FMap instead of using directly
  this obsolete Intmap.

Tools

- New semantics for coqtop options ("-batch" expects option "-top dir"
  for loading vernac file that contains definitions).
- Tool coq_makefile now removes custom targets that are file names in
  "make clean"
- New environment variable COQREMOTEBROWSER to set the command invoked
  to start the remote browser both in Coq and CoqIDE. Standard syntax:
  "%s" is the placeholder for the URL.

Details of changes in 8.1gamma
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Syntax

- changed parsing precedence of let/in and fun constructions of Ltac:
  let x := t in e1; e2 is now parsed as let x := t in (e1;e2).

Language and commands

- Added sort-polymorphism for definitions in Type (but finally abandoned).
- Support for implicit arguments in the types of parameters in
  (co)fixpoints and (co)inductive declarations.
- Improved type inference: use as much of possible general information.
  before applying irreversible unification heuristics (allow e.g. to
  infer the predicate in "(exist _ 0 (refl_equal 0) : {n:nat | n=0 })").
- Support for Miller-Pfenning's patterns unification in type synthesis
  (e.g. can infer P such that P x y = phi(x,y)).
- Support for "where" clause in cofixpoint definitions.
- New option "Set Printing Universes" for making Type levels explicit.

Tactics

- Improved implementation of the ring and field tactics. For compatibility
  reasons, the previous tactics are renamed as legacy ring and legacy field,
  but should be considered as deprecated.
- New declarative mathematical proof language.
- Support for argument lists of arbitrary length in Tactic Notation.
- ``rewrite ... in H`` now fails if ``H`` is used either in an hypothesis
  or in the goal.
- The semantics of ``rewrite ... in *`` has been slightly modified (see doc).
- Support for ``as`` clause in tactic injection.
- New forward-reasoning tactic "apply in".
- Ltac fresh operator now builds names from a concatenation of its arguments.
- New ltac tactic "remember" to abstract over a subterm and keep an equality
- Support for Miller-Pfenning's patterns unification in apply/rewrite/...
  (may lead to few incompatibilities - generally now useless tactic calls).

Bug fixes

- Fix for notations involving basic "match" expressions.
- Numerous other bugs solved (a few fixes may lead to incompatibilities).

Details of changes in 8.1
~~~~~~~~~~~~~~~~~~~~~~~~~

Bug fixes

- Many bugs have been fixed (cf coq-bugs web page)

Tactics

- New tactics ring, ring_simplify and new tactic field now able to manage
  power to a positive integer constant. Tactic ring on Z and R, and
  field on R manage power (may lead to incompatibilities with V8.1gamma).
- Tactic field_simplify now applicable in hypotheses.
- New field_simplify_eq for simplifying field equations into ring equations.
- Tactics ring, ring_simplify, field, field_simplify and field_simplify_eq
  all able to apply user-given equations to rewrite monoms on the fly
  (see documentation).

Libraries

- New file ConstructiveEpsilon.v defining an epsilon operator and
  proving the axiom of choice constructively for a countable domain
  and a decidable predicate.

Version 8.0
-----------

Summary of changes
~~~~~~~~~~~~~~~~~~

Coq version 8 is a major revision of the Coq proof assistant. First, the
underlying logic is slightly different. The so-called *impredicativity*
of the sort Set has been dropped. The main reason is that it is
inconsistent with the principle of description which is quite a useful
principle for formalizing mathematics within classical logic. Moreover,
even in an constructive setting, the impredicativity of Set does not add
so much in practice and is even subject of criticism from a large part
of the intuitionistic mathematician community. Nevertheless, the
impredicativity of Set remains optional for users interested in
investigating mathematical developments which rely on it.

Secondly, the concrete syntax of terms has been completely revised. The
main motivations were

-  a more uniform, purified style: all constructions are now lowercase,
   with a functional programming perfume (e.g. abstraction is now
   written fun), and more directly accessible to the novice (e.g.
   dependent product is now written forall and allows omission of
   types). Also, parentheses are no longer mandatory for function
   application.

-  extensibility: some standard notations (e.g. “<” and “>”) were
   incompatible with the previous syntax. Now all standard arithmetic
   notations (=, +, \*, /, <, <=, ... and more) are directly part of the
   syntax.

Together with the revision of the concrete syntax, a new mechanism of
*notation scopes* permits to reuse the same symbols (typically +,
-, \*, /, <, <=) in various mathematical theories without any
ambiguities for Coq, leading to a largely improved readability of Coq
scripts. New commands to easily add new symbols are also provided.

Coming with the new syntax of terms, a slight reform of the tactic
language and of the language of commands has been carried out. The
purpose here is a better uniformity making the tactics and commands
easier to use and to remember.

Thirdly, a restructuring and uniformization of the standard library of
Coq has been performed. There is now just one Leibniz equality usable
for all the different kinds of Coq objects. Also, the set of real
numbers now lies at the same level as the sets of natural and integer
numbers. Finally, the names of the standard properties of numbers now
follow a standard pattern and the symbolic notations for the standard
definitions as well.

The fourth point is the release of CoqIDE, a new graphical gtk2-based
interface fully integrated with Coq. Close in style to the Proof General
Emacs interface, it is faster and its integration with Coq makes
interactive developments more friendly. All mathematical Unicode symbols
are usable within CoqIDE.

Finally, the module system of Coq completes the picture of Coq version
8.0. Though released with an experimental status in the previous version
7.4, it should be considered as a salient feature of the new version.

Besides, Coq comes with its load of novelties and improvements: new or
improved tactics (including a new tactic for solving first-order
statements), new management commands, extended libraries.

Bruno Barras and Hugo Herbelin have been the main contributors of the
reflection and the implementation of the new syntax. The smart automatic
translator from old to new syntax released with Coq is also their work
with contributions by Olivier Desmettre.

Hugo Herbelin is the main designer and implementer of the notion of
notation scopes and of the commands for easily adding new
notations.

Hugo Herbelin is the main implementer of the restructured standard library.

Pierre Corbineau is the main designer and implementer of the new tactic
for solving first-order statements in presence of inductive types. He is
also the maintainer of the non-domain specific automation tactics.

Benjamin Monate is the developer of the CoqIDE graphical interface with
contributions by Jean-Christophe Filliâtre, Pierre Letouzey, Claude
Marché and Bruno Barras.

Claude Marché coordinated the edition of the Reference Manual for Coq
V8.0.

Pierre Letouzey and Jacek Chrząszcz respectively maintained the
extraction tool and module system of Coq.

Jean-Christophe Filliâtre, Pierre Letouzey, Hugo Herbelin and other
contributors from Sophia-Antipolis and Nijmegen participated in
extending the library.

Julien Narboux built a NSIS-based automatic Coq installation tool for
the Windows platform.

Hugo Herbelin and Christine Paulin coordinated the development which was
under the responsibility of Christine Paulin.

| Palaiseau & Orsay, Apr. 2004
| Hugo Herbelin & Christine Paulin
| (updated Apr. 2006)
|

Details of changes in 8.0beta old syntax
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logic

- Set now predicative by default
- New option -impredicative-set to set Set impredicative
- The standard library doesn't need impredicativity of Set and is
  compatible with the classical axioms which contradict Set impredicativity

Syntax for arithmetic

- Notation "=" and "<>" in Z and R are no longer implicitly in Z or R
  (with possible introduction of a coercion), use <Z>...=... or
  <Z>...<>... instead
- Locate applied to a simple string (e.g. "+") searches for all
  notations containing this string

Commands

- "Declare ML Module" now allows to import .cma files. This avoids to use a
  bunch of "Declare ML Module" statements when using several ML files.
- "Set Printing Width n" added, allows to change the size of width printing.
- "Implicit Variables Type x,y:t" (new syntax: "Implicit Types x y:t")
  assigns default types for binding variables.
- Declarations of Hints and Notation now accept a "Local" flag not to
  be exported outside the current file even if not in section
- "Print Scopes" prints all notations
- New command "About name" for light printing of type, implicit arguments, etc.
- New command "Admitted" to declare incompletely proven statement as axioms
- New keyword "Conjecture" to declare an axiom intended to be provable
- SearchAbout can now search for lemmas referring to more than one constant
  and on substrings of the name of the lemma
- "Print Implicit" displays the implicit arguments of a constant
- Locate now searches for all names having a given suffix
- New command "Functional Scheme" for building an induction principle
  from a function defined by case analysis and fix.

Commands

- new coqtop/coqc option -dont-load-proofs not to load opaque proofs in memory

Implicit arguments

- Inductive in sections declared with implicits now "discharged" with
  implicits (like constants and variables)
- Implicit Arguments flags are now synchronous with reset
- New switch "Unset/Set Printing Implicits" (new syntax: "Unset/Set Printing
  Implicit") to globally control printing of implicits

Grammar extensions

- Many newly supported UTF-8 encoded unicode blocks
  - Greek letters (0380-03FF), Hebrew letters (U05D0-05EF), letter-like
  symbols (2100-214F, that includes double N,Z,Q,R), prime
  signs (from 2080-2089) and characters from many written languages
  are valid in identifiers
  - mathematical operators (2200-22FF), supplemental mathematical
  operators (2A00-2AFF), miscellaneous technical (2300-23FF that
  includes sqrt symbol), miscellaneous symbols (2600-26FF), arrows
  (2190-21FF and 2900-297F), invisible mathematical operators (from
  2080-2089), ... are valid symbols

Library

- New file about the factorial function in Arith

- An additional elimination Acc_iter for Acc, simpler than Acc_rect.
  This new elimination principle is used for definition well_founded_induction.

- New library NArith on binary natural numbers

- R is now of type Set

- Restructuration in ZArith library

  + "true_sub" used in Zplus now a definition, not a local one (source
    of incompatibilities in proof referring to true_sub, may need extra Unfold)
  + Some lemmas about minus moved from fast_integer to Arith/Minus.v
    (le_minus, lt_mult_left) (theoretical source of incompatibilities)
  + Several lemmas moved from auxiliary.v and zarith_aux.v to
    fast_integer.v (theoretical source of incompatibilities)
  + Variables names of iff_trans changed (source of incompatibilities)
  + ZArith lemmas named ``OMEGA`` something or ``fast_`` something, and lemma ``new_var``
    are now out of ZArith (except ``OMEGA2``)
  + Redundant ZArith lemmas have been renamed: for the following pairs,
    use the second name (Zle_Zmult_right2, Zle_mult_simpl), (OMEGA2,
    Zle_0_plus), (Zplus_assoc_l, Zplus_assoc), (Zmult_one, Zmult_1_n),
    (Zmult_assoc_l, Zmult_assoc), (Zmult_minus_distr, Zmult_Zminus_distr_l)
    (add_un_double_moins_un_xO, is_double_moins_un),
    (Rlt_monotony_rev,Rlt_monotony_contra) (source of incompatibilities)

- Few minor changes (no more implicit arguments in
  Zmult_Zminus_distr_l and Zmult_Zminus_distr_r, lemmas moved from
  Zcomplements to other files) (rare source of incompatibilities)

- New lemmas provided by users added

Tactic language

- Fail tactic now accepts a failure message
- Idtac tactic now accepts a message
- New primitive tactic "FreshId" (new syntax: "fresh") to generate new names
- Debugger prints levels of calls

Tactics

- Replace can now replace proofs also
- Fail levels are now decremented at "Match Context" blocks only and
  if the right-hand-side of "Match term With" are tactics, these
  tactics are never evaluated immediately and do not induce
  backtracking (in contrast with "Match Context")
- Quantified names now avoid global names of the current module (like
  Intro names did) [source of rare incompatibilities: 2 changes in the set of
  user contribs]
- NewDestruct/NewInduction accepts intro patterns as introduction names
- NewDestruct/NewInduction now work for non-inductive type using option "using"
- A NewInduction naming bug for inductive types with functional
  arguments (e.g. the accessibility predicate) has been fixed (source
  of incompatibilities)
- Symmetry now applies to hypotheses too
- Inversion now accept option "as [ ... ]" to name the hypotheses
- Contradiction now looks also for contradictory hypotheses stating ~A and A
  (source of incompatibility)
- "Contradiction c" try to find an hypothesis in context which
  contradicts the type of c
- Ring applies to new library NArith (require file NArithRing)
- Field now works on types in Set
- Auto with reals now try to replace le by ge (Rge_le is no longer an
  immediate hint), resulting in shorter proofs
- Instantiate now works in hyps (syntax : Instantiate in ...)
- Some new tactics : EConstructor, ELeft, Eright, ESplit, EExists
- New tactic "functional induction" to perform case analysis and
  induction following the definition of a function.
- Clear now fails when trying to remove a local definition used by
  a constant appearing in the current goal

Extraction (See details in plugins/extraction/CHANGES)

- The old commands: 	(Recursive) Extraction Module M.
  are now:              (Recursive) Extraction Library M.
  To use these commands, M should come from a library M.v
- The other syntax Extraction & Recursive Extraction now accept
  module names as arguments.

Bugs

- see coq-bugs server for the complete list of fixed bugs

Miscellaneous

- Implicit parameters of inductive types definition now taken into
  account for inferring other implicit arguments

Incompatibilities

- Persistence of true_sub (4 incompatibilities in Coq user contributions)
- Variable names of some constants changed for a better uniformity (2 changes
  in Coq user contributions)
- Naming of quantified names in goal now avoid global names (2 occurrences)
- NewInduction naming for inductive types with functional arguments
  (no incompatibility in Coq user contributions)
- Contradiction now solve more goals (source of 2 incompatibilities)
- Merge of eq and eqT may exceptionally result in subgoals now
  solved automatically
- Redundant pairs of ZArith lemmas may have different names: it may
  cause "Apply/Rewrite with" to fail if using the first name of a pair
  of redundant lemmas (this is solved by renaming the variables bound by
  "with"; 3 incompatibilities in Coq user contribs)
- ML programs referring to constants from fast_integer.v must use
  "Coqlib.gen_constant_modules Coqlib.zarith_base_modules" instead

Details of changes in 8.0beta new syntax
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

New concrete syntax

- A completely new syntax for terms
- A more uniform syntax for tactics and the tactic language
- A few syntactic changes for commands
- A smart automatic translator translating V8.0 files in old syntax to
  files valid for V8.0

Syntax extensions

- "Grammar" for terms disappears
- "Grammar" for tactics becomes "Tactic Notation"
- "Syntax" disappears
- Introduction of a notion of notation scope allowing to use the
  same notations in various contexts without using specific delimiters
  (e.g the same expression "4<=3+x" is interpreted either in "nat",
  "positive", "N" (previously "entier"), "Z", "R", depending on which
  Notation scope is currently open) [see documentation for details]
- Notation now requires a precedence and associativity
  (default was to set precedence to 1 and associativity to none)

Revision of the standard library

- Many lemmas and definitions names have been made more uniform mostly
  in Arith, NArith, ZArith and Reals (e.g : "times" -> "Pmult",
  "times_sym" -> "Pmult_comm", "Zle_Zmult_pos_right" ->
  "Zmult_le_compat_r", "SUPERIEUR" -> "Gt", "ZERO" -> "Z0")
- Order and names of arguments of basic lemmas on nat, Z, positive and R
  have been made uniform.
- Notions of Coq initial state are declared with (strict) implicit arguments
- eq merged with eqT: old eq disappear, new eq (written =) is old eqT
  and new eqT is syntactic sugar for new eq (notation == is an alias
  for = and is written as it, exceptional source of incompatibilities)
- Similarly, ex, ex2, all, identity are merged with exT, exT2, allT, identityT
- Arithmetical notations for nat, positive, N, Z, R, without needing
  any backquote or double-backquotes delimiters.
- In Lists: new concrete notations; argument of nil is now implicit
- All changes in the library are taken in charge by the translator

Semantical changes during translation

- Recursive keyword set by default (and no longer needed) in Tactic Definition
- Set Implicit Arguments is strict by default in new syntax
- reductions in hypotheses of the form "... in H" now apply to the type
  also if H is a local definition
- etc

Gallina

- New syntax of the form "Inductive bool : Set := true, false : bool." for
  enumerated types
- Experimental syntax of the form p.(fst) for record projections
  (activable with option "Set Printing Projections" which is
  recognized by the translator)

Known problems of the automatic translation

- iso-latin-1 characters are no longer supported: move your files to
  7-bits ASCII or unicode before translation (switch to unicode is
  automatically done if a file is loaded and saved again by coqide)
- Renaming in ZArith: incompatibilities in Coq user contribs due to
  merging names INZ, from Reals, and inject_nat.
- Renaming and new lemmas in ZArith: may clash with names used by users
- Restructuration of ZArith: replace requirement of specific modules
  in ZArith by "Require Import ZArith_base" or "Require Import ZArith"
- Some implicit arguments must be made explicit before translation: typically
  for "length nil", the implicit argument of length must be made explicit
- Grammar rules, Infix notations and V7.4 Notations must be updated wrt the
  new scheme for syntactic extensions (see translator documentation)
- Unsafe for annotation Cases when constructors coercions are used or when
  annotations are eta-reduced predicates

Details of changes in 8.0
~~~~~~~~~~~~~~~~~~~~~~~~~

Commands

- New option "Set Printing All" to deactivate all high-level forms of
  printing (implicit arguments, coercions, destructing let,
  if-then-else, notations, projections)
- "Functional Scheme" and "Functional Induction" extended to polymorphic
  types and dependent types
- Notation now allows recursive patterns, hence recovering parts of the
  functionalities of pre-V8 Grammar/Syntax commands
- Command "Print." discontinued.
- Redundant syntax "Implicit Arguments On/Off" discontinued

New syntax

- Semantics change of the if-then-else construction in new syntax:
  "if c then t1 else t2" now stands for
  "match c with c1 _ ... _ => t1 | c2 _ ... _ => t2 end"
  with no dependency of t1 and t2 in the arguments of the constructors;
  this may cause incompatibilities for files translated using coq 8.0beta

Notation scopes

- Delimiting key %bool for bool_scope added
- Import no more needed to activate argument scopes from a module

Tactics and the tactic Language

- Semantics of "assert" is now consistent with the reference manual
- New tactics stepl and stepr for chaining transitivity steps
- Tactic "replace ... with ... in" added
- Intro patterns now supported in Ltac (parsed with prefix "ipattern:")

Executables and tools

- Added option -top to change the name of the toplevel module "Top"
- Coqdoc updated to new syntax and now part of Coq sources
- XML exportation tool now exports the structure of vernacular files
  (cf chapter 13 in the reference manual)

User contributions

- User contributions have been updated to the new syntax

Bug fixes

- Many bugs have been fixed (cf coq-bugs web page)
