Log message:
Mass-change BUILD_DEPENDS to TOOL_DEPENDS outside mk/.

Almost all uses, if not all of them, are wrong, according to the
semantics of BUILD_DEPENDS (packages built for target available for
use _by_ tools at build-time) and TOOL_DEPEPNDS (packages built for
host available for use _as_ tools at build-time).

No change to BUILD_DEPENDS as used correctly inside buildlink3.

As proposed on tech-pkg:
https://mail-index.netbsd.org/tech-pkg/2023/06/03/msg027632.html

Log message:
modular-xorg-server: update to 21.1.8.

Clean lots of pkglint while here.

Benno Schulenberg (1):
     xkbUtils: use existing symbol names instead of deleted deprecated ones

Olivier Fourdan (2):
     composite: Fix use-after-free of the COW
     xserver 21.1.8

Log message:
modular-xorg-server: fix CVE-2023-1393

using upstream patch

Bump PKGREVISION.

Log message:
*: Recursive revbup from graphics/freetype2

Log message:
modular-xorg-server: bump xorgproto requirements

fixesproto 6 -> 2021.4
inputproto 2.4 -> 2021.5

Log message:
modular-xorg-server: update to 21.1.6.

This release fixes an invalid event type mask in XTestSwapFakeInput which
was inadvertently changed from octal 0177 to hexadecimal 0x177 in the fix
for CVE-2022-46340.

It also includes backports for a couple of fixes in XQuartz and fixes for
XKB (noticeably for CVE-2022-3550 and CVE-2022-3551).

Jeremy Huddleston Sequoia (1):
      xquartz: Fix some formatting

John D Pell (1):
      XQuartz: stub: Call LSOpenApplication instead of fork()/exec()

Olivier Fourdan (1):
      xserver 21.1.6

Peter Hutterer (3):
      xkb: proof GetCountedString against request length attacks
      xkb: fix some possible memleaks in XkbGetKbdByName
      Xext: fix invalid event type mask in XTestSwapFakeInput

Log message:
modular-xorg-server*: update to 21.1.5

This release fixes 6 recently reported security vulnerabilities in
various extensions. The CVE numbers are:
CVE-2022-46340, CVE-2022-46341, CVE-2022-46342, CVE-2022-46343,
CVE-2022-46344, and CVE-2022-4283

For details on the these issues please see the security advisory here:
https://lists.x.org/archives/xorg-announce/2022-December/003302.html

Jeremy Huddleston Sequoia (3):
      xquartz: Remove unused macro (X11LIBDIR)
      xquartz: Move default applications list outside of the main executable
      meson: Don't build COMPOSITE for XQuartz

Peter Hutterer (8):
      Xtest: disallow GenericEvents in XTestSwapFakeInput
      Xi: disallow passive grabs with a detail > 255
      Xext: free the XvRTVideoNotify when turning off from the same client
      Xext: free the screen saver resource when replacing it
      Xi: return an error from XI property changes if verification failed
      Xi: avoid integer truncation in length check of ProcXIChangeProperty
      xkb: reset the radio_groups pointer to NULL after freeing it
      xserver 21.1.5

Log message:
modular-xorg-server: add libxcvt to bl3 as required by xorg-server.pc

Log message:
g/c invalid CONFLICTS lines between modular-xorg-server and libxcvt

Log message:
modular-xorg-server: fix CHECK_PORTABILITY_SKIP