Log message:
libxslt py-libxslt: updated to 1.1.39

v1.1.39: Nov 16 2023

Bug fixes

- extensions: Don't search imports for extension prefixes

Improvements

- transform: Check maximum depth when processing default templates
- build: Add more missing includes
- python: Don't set deprecated global
- build: Add missing includes
- imports: Limit nesting depth
- extensions: Report top-level elements in xsltDebugDumpExtensions
- Add extern "C" { } block to xsltlocale.h (David Kilzer)

Portability

- python: Make it compatible with python3.12 (Daniel Garcia Moreno)
- date: Fix check for localtime_s
- date: Fix check for gmtime_s

Build systems

- pkg-config files include cflags for static builds (Mike Dalessio)
- Handle NOCONFIG case when setting locations from CMake target properties (Markus
 Rickert)
- autotools: Make xslt-config executable

Tests

- tests: Structured error handler now passes a const xmlError
- python: Fix tests on MinGW
- fuzz: Fix xmlFuzzEntityLoader after recent libxml2 changes

Log message:
*: recursive bump for icu 74.1

Log message:
*: recursive bump for Python 3.11 as new default

Log message:
libxslt: don't pass --version-script to Solaris linker.

Fixes "ld: fatal: option --version-script requires option -z
gnu-version-script-compat to be specified" on Solaris 11.4.

Tested to build as before on Tribblix, and therefore hopefully SmartOS.
NFCI on non-"SunOS" platforms.

Log message:
textproc/libxslt: Make this cross-compile.

Log message:
Mass-change BUILD_DEPENDS to TOOL_DEPENDS outside mk/.

Almost all uses, if not all of them, are wrong, according to the
semantics of BUILD_DEPENDS (packages built for target available for
use _by_ tools at build-time) and TOOL_DEPEPNDS (packages built for
host available for use _as_ tools at build-time).

No change to BUILD_DEPENDS as used correctly inside buildlink3.

As proposed on tech-pkg:
https://mail-index.netbsd.org/tech-pkg/2023/06/03/msg027632.html

Log message:
libxslt & py-libxslt: update to 1.1.38

### Major changes

About 40 memory errors in code paths handling malloc failures have been fixed.
While these issues shouldn't impact security, this improves robustness under
memory pressure.

The result of generate-id() is now deterministic across multiple
transformations fixing many issues with reproducible builds.

Most of the test suite has been ported to C.

### Bug fixes

- Fix memory errors in code handling malloc failures
- imports: Fix import/include cycle check
- xsltlocale: Fix xsltNewLocale on macOS
- Make xsl:sort thread-safe
- Make generate-id() deterministic

### Improvements

- Stop using xmlStringCurrentChar
- attributes.h needs to include xsltInternals.h (David Kilzer)
- transform: Avoid null deref on documents without root node
- numbers: Fix floating point overflows
- date: Fix integer overflow in exsltDateFormatDuration
- numbers: Fix harmless integer sign change
- date: Add more overflow checks to formatting code (David Kilzer)
- date: Fix rounding to make Windows tests pass
- date: Rewrite duration and seconds formatting
- xsltlocale: Make API platform-independent
- Also accept application/xslt+xml media type in stylesheet PIs
- warnings: Fix strict prototypes warning
- xsltEvalUserParams() and xsltQuoteUserParams() are susceptible to integer
  overflow when iterating through const char** array (David Kilzer)
- xslt: Return NULL stylesheet on attribute set errors
- xsltproc: Fix unused variable warning
- xslt: Remove declaration for old libxml2
- Fix various compiler warnings
- Fix compiler warnings in xsltGenerateIdFunction
- Disable Python bindings for debugger
- Don't declare disabled functions
- Migrate from PyEval_ to PyObject_

### Build system

- cmake: Use version script
- autotools: Link with --undefined-version
- win32: Remove broken libxslt.def.src
- Stop updating version script
- add support for Windows time functions (Rosen Penev)
- cmake: link against libm on UNIX systems (Alex Richardson)
- build: Add a distutils-based build system for the Python bits (Chun-wei Fan)
- CMake: Relax check for Python 3.x support on Windows (Chun-wei Fan)
- python/types.c: Fix building against older libxml2 (Chun-wei Fan)
- python/libxslt.c: Replace ssize_t with Py_ssize_t (Chun-wei Fan)
- cmake: Fix build with libxslt and libxml2 as subprojects
- cmake: Set SOVERSION
- cmake: Extract version from configure.ac
- Fix classic Windows configuration for libexslt (Christoph M. Becker)
- autotools: Fix Python tests in VPATH builds
- autotools: Disable parallel Python build
- autotools: Use AM_CFLAGS consistently
- autotools: Link with -no-undefined
- cmake: Fix Python installation
- cmake: Don't check for Python 2
- python: Don't output missing generators during build
- python: Create .pyd on Windows
- python: Fix build on Windows
- python: Support Python 3 on Windows
- cmake: Enable GCC compiler warnings
- Update GCC compiler warnings

### Tests

- python: Remove temp file when running tests/basic.py
- fuzz: Improve fuzzers
- xsltlocale: Add test
- gitlab-ci: Reenable MSan and LeakSanitizer
- tests: Remove unused files
- tests: Enable runtest.exe under MSVC
- tests: Fix LIBXSLT_PLUGINS_PATH for multi-config CMake
- tests: Remove unused leak statistics
- tests: Skip some tests if iconv/ICU is disabled
- gitlab-ci: Run Autotools tests with out-of-tree (VPATH) builds
- tests: Port most of the test suite to C
- tests: Fix out-of-tree Python tests
- tests: Fix source directory for reports tests
- gitlab-ci: Consolidate CMake test scripts
- gitlab-ci: Only install cmake MinGW package if needed
- gitlab-ci: Install 7-Zip using the .msi
- gitlab-ci: Add CI job for MinGW/Autotools
- gitlab-ci: Disable MSan for now
- Run CI tests with -fsanitize=integer
- Fix EXSLT functions tests when libxml2 is built --without-debug
- Make CI tests exit on failure
- Run Python 3 CI job with minimal configuration
- Set library path when running Python tests

### Documentation

- doc: Remove unused cross-reference data
- doc: Update apibuild.py

Log message:
revbump after textproc/icu update