Log message:
Update to 1.4.65. From the changelog:

HIGHLIGHTS
* WebSockets over HTTP/2
  RFC 8441 Bootstrapping WebSockets with HTTP/2
* HTTP/2 PRIORITY_UPDATE
  RFC 9218 Extensible Prioritization Scheme for HTTP
* prefix/suffix conditions in lighttpd.conf
* mod_webdav safe partial-PUT
  webdav.opts += ("partial-put-copy-modify" => "enable")
* mod_accesslog option: accesslog.escaping = "json"
* mod_deflate libdeflate build option
* speed up request body uploads via HTTP/2

BEHAVIOR CHANGES:

* change default server.max-keep-alive-requests = 1000 to adjust
  to increasing HTTP/2 usage and to web2/web3 application usage
  (prior default was 100)
* mod_status HTML now includes HTTP/2 control stream id 0 in the output
  which contains aggregate counts for the HTTP/2 connection
  (These lines can be identified with URL '*', part of "PRI *" preface)
  alternative: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_status
* MIME type application/javascript is translated to text/javascript (RFC 9239)

Log message:
revbump for textproc/icu update

Log message:
Update to 1.4.64. From the changelog:

## Important changes

* remove deprecated modules, bugfixes, CVE-2022-22707 (rare configs)

## Behavior Changes

(previously announced and scheduled)

* graceful restart/shutdown timeout changed from 0 (disabled) to 8 seconds
  configure an alternative with:
  server.feature-flags += ("server.graceful-shutdown-timeout" => 8)

* build: lighttpd defaults to --with-pcre2 instead of --with-pcre
  pcre2 is current. pcre is no longer maintained.
  Explicitly specify --with-pcre in build to use pcre instead of pcre2.

* deprecated modules (previously announced) have been removed
  * mod_authn_mysql
  * mod_mysql_vhost
  * mod_cml
  * mod_flv_streaming
  * mod_geoip
  * mod_trigger_b4_dl

## Changes from 1.4.63

* [core] fix trace issued for loading mod_auth (fixes #3121)
* [meson] need -lrt with glibc < 2.17 (fixes #3120)
* [core] adjust time jump detection (fixes #3123)
* [core] make setrlimit() warn, not fatal
* [core] add remote IP to some error msgs (fixes #3122)
* [mod_webdav] If-None-Match on non-existent entity
* [build] check getxattr before attr_get and -lattr
* [doc] SELinux: setsebool -P httpd_setrlimit on
* [build] create sha512sum file with release
* [build] CI builds now use make -j 2
* [core] http_response_send_file() takes const path
* [core] use ETag response header to check cachable
* [core] add more const to stat_cache_update_entry()
* [multiple] remove r->physical.etag
* [mod_magnet] interface to http_response_send_file
* [build] add headers for sendfile() detect on MacOS
* [core] http_response_write_prepare optimization
* [core] define static_assert for uClibc (fixes #3127)
* [build] -Wno-implicit-fallthrough for ls-hpack
* [core] ignore pcre2 "bad JIT option" warning
* [build] pcre2: use pkg-config before pcre2-config
* [core] http_response_has_error_handler()
* [core] consolidate request restart loop check
* [core] defer retrieving Last-Modified until needed
* [mod_dirlisting] fix logic inversion in cache
* [core] mark expect cond in http_response_send_file
* [core] connection_handle_read_state() tweak
* [core] connection_state_machine_loop() tweaks
* [core] connection_state_machine_h2() tweaks
* [core] quiet coverity noise
* [core] use lower limit for max-fds if !setrlimit
* [build] do not check for prctl; HAVE_PRCTL unused
* [core] server.core-files support on FreeBSD (fixes #3128)
* [mod_extforward] support longer PROXY v2 TLV vec
* [mod_webdav] detect truncated copy_file_range()
* [mod_webdav] copy_file_range() new in FreeBSD 13
* [mod_webdav] copy_file_range() new in FreeBSD 13
* [build] feature consistency between build types
* [build] cmake build now defaults to C11
* [core] CCRandomGenerateBytes() for rand on macOS (fixes #3129)
* [multiple] remove long-deprecated modules
* [build] default --with-pcre2 unless --with-pcre
* [core] "server.graceful-shutdown-timeout" => 8
* [build] adjust trace for regex-conditionals
* [build] update tests/SConscript
* [core] errno_t detection on Illumos
* [build] cmake build now defaults to C11
* [build] meson: find pcre2 w/o pkg-config
* [core] define _EXTENSIONS_ on Illumos
* [build] cmake,meson socket libs for win32, Illumos (fixes #3130)
* [core] hide bsd_accept_filter code on OpenBSD (fixes #3131)
* [core] errno_t and rsize_t detection on Illumos
* [mod_webdav] copy acceleration
* [mod_webdav] define HAVE_RENAMEAT2 earlier
* [build] meson misdetects mempcpy on some platforms
* [build] cmake: skip "-Wl,-export-dynamic" Illumos
* [build] adjust .gitignore for macOS
* [build] meson crypt and dl detection on *BSD (fixes #3133)
* [core] /dev/null is a symlink on Illumos (fixes #3132)
* [core] server.core-files support for solaris (fixes #3135)
* [build] feature consistency between build types
* [build] Haiku build fix (fixes #3136)
* [lemon] silence coverity warnings
* [cmake] raise minimum version to 3.7
* [cmake] add address/undefined sanitize compile options
* [asan tests] fix memory leaks
* [array] use speaking names for array "fn" vtables for better \ 
debugging experience
* [ci] add cmake-asan build type
* [core] buffer_copy_string() use "" if s is NULL
* [mod_authn_gssapi] code reuse: fdevent_mkostemp()
* [mod_authn_gssapi] reduce KRB5CCNAME mem alloc
* [build] adjust help strings for pcre2 default
* [core] (const char *) for srvconf.modules_dir
* [multiple] remove buffer_init_string()
* [multiple] remove buffer_init_buffer()
* [mod_extforward] fix out-of-bounds (OOB) write (fixes #3134)
* [build] use -fstack-protector-strong w/ extra warn
* [build] collect Sun-specific headers and funcs
* [build] collect Sun-specific headers and funcs
* [build] rm redundant check for -lnetwork on Haiku
* [build] check headers before some funcs
* [core] allow LISTEN_PID to be ppid if TRACEME (fixes #3137)
* [core] allow tests/tmp/bind.conf override (#3137)
* [mod_webdav] no sys/ioctl.h on _WIN32
* [tests] _WIN32 adjustments in LightyTest.pm
* [tests] revert _WIN32 adjustments in LightyTest.pm
* [mod_gnutls] lift size check out of DN loop
* [mod_mbedtls] lift size check out of DN loop
* [mbedtls] save (mbedtls_ssl_config *) in hctx
* [multiple] permit UTF-8 in SSL_CLIENT_S_DN_*
* [mod_openssl] do not esc UTF-8 in cert subject
* [mod_mbedtls] reconstruct SSL_CLIENT_S_DN
* [mod_mbedtls] changes to build with mbedtls 3.0.0
* [mod_mbedtls] remove use of out_left in mbedtls 3
* [mod_mbedtls] mbedtls_ssl_conf_groups for 3.1.0

pkgsrc changes:

- Remove options 'gdbm' and 'memcached', no longer used

Log message:
revbump for icu and libffi

Log message:
Reorder CONFIGURE_ARGS from previous. NFCI.

Log message:
Update to 1.4.63. From the changelog:

- [core] import xxHash v0.8.1
- [core] isolate use of sys/filio.h
- [core] fix reqpool mem corruption in 1.4.62 (fixes #3118)

pkgsrc changes:

- Link with pkgsrc xxhash instead of the vendored copy

Log message:
Update to 1.4.62. From the changelog:

- support pcre2; HTTP Digest auth userhash; bugfixes

pkgsrc changes:

- switch to pcre2

Log message:
Apply upstream 584a69c4 to fix use-after-free. Bump PKGREVISION.

Log message:
lighttpd: update to 1.4.61.

Add missing test dependency.

- 1.4.61 - 2021-10-28
  * [core] define __BEGIN_DECLS, __END_DECLS if needed
  * [core] Y2038: error log high-precision timestamps
  * [multiple] __attribute_nonnull__ now takes params
  * [core] bounds check while url-decoding
  * [mod_magnet] prefer lua_newuserdatauv() w/ lua 5.4
  * [core] earlier macOS need define for errno_t (fixes #3107)
  * [tests] force POSIX::WNOHANG() autovivification (fixes #3110)
  * [mod_dirlisting] sort "../" to top (fixes #3109)
  * [tests] force Fcntl::F_SETFD() autovivification (#3110)
  * [core] avoid repeated typedef for fdlog_st
  * [doc] update INSTALL
  * [mod_extforward] keep remote IP thru request reset
  * [core] fix HTTP/2 upload > 64k w/ max-request-size (fixes #3108)
  * [mod_auth] fix Basic auth passwd cache (fixes #3112)
  * [mod_ajp13,mod_fastcgi] comment: no response body
  * [mod_webdav] ignore PROPFIND Depth for files
  * [core] add comment to ck_memeq_const_time()
  * [core] accept up to 5 digit port num in host cond
  * [core] expose chunkqueue_remove_empty_chunks()
  * [core] short-circuit if response body recv w/ hdrs (fixes #3111)
  * [core] resched HTTP/2 streams w/ pending data (#3111)
  * [core] separate func for gw_authorizer_ok()
  * [core] make ck_memeq_const_time() more generic (#3112)
  * [mod_auth] revert adjustment to auth passwd cache (#3112)
  * [core] thwart h2c smuggling when Upgrade enabled
  * [core] separate funcs to check for valid chars
  * [core] thwart h2 request tunnelling
  * [core] clear shared log buffer after writes
  * [mod_nss] quiet trace for PR_END_OF_FILE_ERROR
  * [core] allow debug.log-state-handling in condition
  * [core] combine more dup header processing code
  * [mod_ajp13,mod_fastcgi] check resp w/ content len
  * [mod_proxy] Length Req if proxy forcing HTTP/1.0
  * [core] restart dead proc on connect error if local
  * [mod_ajp13,mod_fastcgi] recv_parse smaller funcs
  * [multiple] warn deprecated mods slated for removal
  * [core] remove redundant checks in same context
  * [core] tighten chunkqueue_steal* code; better asm
  * [build] check for preadv(), pwritev()
  * [core] pwritev w/ chunkqueue_steal_with_tempfiles
  * [core] tighten chunkqueue_mark_written; better asm
  * [doc] uncomment mod_auth load in conf.d/auth.conf
  * [core] tighten chunkqueue_small_resp_optim()
  * [core] chunkqueue_small_resp_optim if resp < 16k
  * [mod_auth] clear crypt() output if len >= 13
  * [multiple] add assert after malloc in two spots
  * [core] add HTTP/2 check resp finished w/ empty cq (#3111)
  * [core] chunkqueue_small_resp_optim() comment

Log message:
www: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Not committed (merge conflicts):
www/nghttp2/distinfo

Unfetchable distfiles (almost certainly fetched conditionally...):
./www/nginx-devel/distinfo array-var-nginx-module-0.05.tar.gz
./www/nginx-devel/distinfo echo-nginx-module-0.62.tar.gz
./www/nginx-devel/distinfo encrypted-session-nginx-module-0.08.tar.gz
./www/nginx-devel/distinfo form-input-nginx-module-0.12.tar.gz
./www/nginx-devel/distinfo headers-more-nginx-module-0.33.tar.gz
./www/nginx-devel/distinfo lua-nginx-module-0.10.19.tar.gz
./www/nginx-devel/distinfo naxsi-1.3.tar.gz
./www/nginx-devel/distinfo nginx-dav-ext-module-3.0.0.tar.gz
./www/nginx-devel/distinfo nginx-rtmp-module-1.2.2.tar.gz
./www/nginx-devel/distinfo nginx_http_push_module-1.2.10.tar.gz
./www/nginx-devel/distinfo ngx_cache_purge-2.5.1.tar.gz
./www/nginx-devel/distinfo ngx_devel_kit-0.3.1.tar.gz
./www/nginx-devel/distinfo ngx_http_geoip2_module-3.3.tar.gz
./www/nginx-devel/distinfo njs-0.5.0.tar.gz
./www/nginx-devel/distinfo set-misc-nginx-module-0.32.tar.gz
./www/nginx/distinfo array-var-nginx-module-0.05.tar.gz
./www/nginx/distinfo echo-nginx-module-0.62.tar.gz
./www/nginx/distinfo encrypted-session-nginx-module-0.08.tar.gz
./www/nginx/distinfo form-input-nginx-module-0.12.tar.gz
./www/nginx/distinfo headers-more-nginx-module-0.33.tar.gz
./www/nginx/distinfo lua-nginx-module-0.10.19.tar.gz
./www/nginx/distinfo naxsi-1.3.tar.gz
./www/nginx/distinfo nginx-dav-ext-module-3.0.0.tar.gz
./www/nginx/distinfo nginx-rtmp-module-1.2.2.tar.gz
./www/nginx/distinfo nginx_http_push_module-1.2.10.tar.gz
./www/nginx/distinfo ngx_cache_purge-2.5.1.tar.gz
./www/nginx/distinfo ngx_devel_kit-0.3.1.tar.gz
./www/nginx/distinfo ngx_http_geoip2_module-3.3.tar.gz
./www/nginx/distinfo njs-0.5.0.tar.gz
./www/nginx/distinfo set-misc-nginx-module-0.32.tar.gz