gnu: curl: Absorb replacement.

* gnu/packages/patches/curl-7.76-use-ssl-cert-env.patch: Delete file.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/curl.scm (curl): Update to 7.77.0.
[replacement]: Remove.
(source)[patches]: Adjust for new patch.

gnu: expat: Remove replacement.

* gnu/packages/xml.scm (expat): Update to 2.4.1.
[replacement]: Remove.
(expat-2.4.1): Remove variable.

gnu: libx11: Update to 1.7.1.

* gnu/packages/xorg.scm (libx11): Update to 1.7.1.
[replacement]: Remove.
(libx11/fixed): Remove variable.

gnu: postgresql: Remove replacement.

* gnu/packages/databases.scm (postgresql-13): Update to 13.3.
[replacement]: Remove.
(postgresql-13.3): Remove variable.

gnu: OpenSSL: Remove replacement.

* gnu/packages/tls.scm (openssl): Update to 1.1.1k.
[replacement]: Remove.
(openssl-1.1.1k): Remove variable.

gnu: pcsc-lite: Update to 1.9.1.

* gnu/packages/security-token.scm (pcsc-lite): Update to 1.9.1.

gnu: coreutils: Disable inotify-dir-recreate test

This test fails on filesystems where tail detects that it cannot use
inotify safely. See https://issues.guix.gnu.org/47935 for more details.

* gnu/packages/base.scm (coreutils)[phases]: Disable
  inotify-dir-recreate tests, quote Hurd substitute* call to reduce
  rebuilds.

gnu: python: Move idle to a separate output.

idle is a programming environment that is not useful for building
packages, but it is still useful for end users. This saves 5MB in the
default output.

* gnu/packages/python.scm (python-2.7)[outputs]: Add `idle'.
[arguments]: Move idle files in the new output.
(wrap-python): Do not wrap idle since it is in a different output.

gnu: python: Do not install static libraries.

This is something Fedora already does since 2010, so it should be safe,
and saves a lot of space.

* gnu/packages/patches/python-2.7-no-static-lib.patch: New file.
* gnu/packages/patches/python-3-no-static-lib.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/python.scm (python-2.7, python-3): Use them.

gnu: python: Enable optimizations.

As a result, python execution time of scripts is decreased by 6 to 40%.

gnu/packages/python (python-2.7)[arguments]: Add configure and make flags to
optimize the resulting python.

gnu: python: Remove unnecessary files.

* gnu/packages/python.scm (python2)[arguments]: Remove files built
during the test phase.
(python3)[arguments]: Also remove windows binaries shipped with the
sources.

gnu: nettle: Update to 3.7.3.

* gnu/packages/nettle.scm (nettle): Update to 3.7.3.

Merge branch 'master' into core-updates

 Conflicts:
	gnu/local.mk
	gnu/packages/algebra.scm
	gnu/packages/bioinformatics.scm
	gnu/packages/curl.scm
	gnu/packages/docbook.scm
	gnu/packages/emacs-xyz.scm
	gnu/packages/maths.scm
	gnu/packages/plotutils.scm
	gnu/packages/python-web.scm
	gnu/packages/python-xyz.scm
	gnu/packages/radio.scm
	gnu/packages/readline.scm
	gnu/packages/tls.scm
	gnu/packages/xml.scm
	gnu/packages/xorg.scm

gnu: nss: Use (guix utils).

* gnu/packages/nss.scm (nss)[arguments]: Utilize CC-FOR-TARGET and
TARGET-64bit?.

gnu: nss: Update to 3.66.

* gnu/packages/nss.scm (nss): Update to 3.66.  Reindent.
[arguments]: Remove #:parallel-build?.
* gnu/packages/patches/nss-getcwd-nonnull.patch: Adjust for directory change.
* gnu/packages/patches/nss-3.56-pkgconfig.patch,
gnu/packages/patches/nss-increase-test-timeout.patch: Revert to
6223566971.
* gnu/packages/certs.scm (nss-certs)[arguments]: Adjust for directory change.

gnu: nspr: Update to 4.31.

* gnu/packages/nss.scm (nspr): Update to 4.31.

gnu: nss: Prepare for GCC 10.

* gnu/packages/patches/nss-getcwd-nonnull.patch: New file.
* gnu/local.mk (dist_patch_DATA): Adjust accordingly.
* gnu/packages/nss.scm (nss)[source](patches): Add it.

gnu: nss: Fix test failure.

* gnu/packages/sqlite.scm (sqlite-uri): New variable.
(sqlite)[source](uri): Use it.
(sqlite-3.33): New public variable.

scripts: substitute: Cache connection when looking for narinfos.

The process-substitution procedure is opening two distinct connections. The
first one when looking for narinfo by calling lookup-narinfo and the other one
when fetching nar files.

Cache the connection when looking for narinfos so that process-substitution
only opens one connection.

* guix/scripts/substitute.scm (lookup-narinfo): Cache connection by using
open-connection-for-uri/cached.

lint: tests-true: Check if tests are enabled when cross-compiling.

* guix/lint.scm (check-tests-true): New linter.
(%local-checkers)[tests-true]: Add it.
* tests/lint.scm ("tests-true: #:tests? must not be set to #t")
("tests-true: absent #:tests? is acceptable")
("tests-true: #:tests? #f is acceptable")
("tests-true: #:tests? #t acceptable when compiling natively"): Test it.

Signed-off-by: Mathieu Othacehe <othacehe@gnu.org>