gnu: goffice: Update to 0.10.36.

* gnu/packages/gnome.scm (goffice): Update to 0.10.36.

gnu: libzip: Update to 1.3.2.

* gnu/packages/compression.scm (libzip): Update to 1.3.2.

gnu: libzip: Use new libzip.org home page.

* gnu/packages/compression.scm (libzip)[home-page]: Update.

gnu: vlc: Update to 2.2.8 [fixes CVE-2017-9300, CVE-2017-10699].

* gnu/packages/video.scm (vlc): Update to 2.2.8.

gnu: emacs-magit-popup: Update for the new source.

'magit-popup' is not a part of 'magit' anymore.

* gnu/packages/emacs.scm (emacs-magit-popup): Update to 2.12.0.
[source]: Update origin URL and file-name.
[home-page]: Update to the new home.
[native-inputs]: Add 'texinfo' to build the info manual.
[arguments]: Add 'make-info' phase.

gnu: emacs-hl-todo: Update to 1.8.0.

* gnu/packages/emacs.scm (emacs-hl-todo): Update to 1.8.0.

doc: Split the "Substitutes" section into subsections.

* doc/guix.texi (Substitutes): Move information into sections, and create one
  new subsection regarding substitution failure.
  (Top): In the detailed listing, add entries for the new subsections.
  (Official Substitute Server): Move info about hydra here.  Add information
  that explains when substitutes are enabled by default.
  (Substitute Server Authorization): Move information about how to enable or
  disable substitutes here.
  (Substitute Authentication): Move information about how Guix authenticates
  substitutes here.
  (Proxy Settings): Move information about how to download substitutes via
  proxy here.
  (Substitution Failure): New section.  Add information about how Guix handles
  substitution failure.  Be extra clear about behavior concerning --fallback.
  (On Trusting Binaries): Move information about trusting binaries here.
  (Invoking guix-daemon): Remove an incorrect statement about when substitutes
  are enabled by default.
  (Common Build Options): Add cross-references for the --fallback option.

Co-authored-by: George Clemmer <myglc2@gmail.com>

gnu: procmail: Fix CVE-2017-16844.

* gnu/packages/patches/procmail-CVE-2017-16844.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/mail.scm (procmail)[source]: Use it.

gnu: linux-libre: Update to 4.14.1.

* gnu/packages/linux.scm (%linux-libre-version): Update to 4.14.1.
(%linux-libre-hash): Update hash.

gnu: linux-libre@4.9: Update to 4.9.64.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.64.

gnu: linux-libre@4.4: Update to 4.4.100.

* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.100.

gnu: lmms: Fix build.

* gnu/packages/music.scm (lmms)[arguments]: Add phases "remove-Werror" and
"make-manpages-writable".

Revert "Add (guix self) and use it when pulling."

This reverts commit 5f93d97005897c2d859f0be1bdff34c88467ec61.

'guix pull' would fail because (guix self) needs 'scheme-files'
from (guix discovery), which was not exported until now.

gnu: idr: Update to 2.0.3.

* gnu/packages/bioinformatics.scm (idr): Update to 2.0.3.
[source]: Add snippet to remove generated code.

gnu: idr: Correct license.

* gnu/packages/bioinformatics.scm (idr)[license]: Change to GPLv2+.

hydra: Add jobs for the modular Guix.

* build-aux/hydra/guix-modular.scm: New file.
* Makefile.am (EXTRA_DIST): Add it.

hydra: 'evaluate' passes an alist to the entry point.

* build-aux/hydra/evaluate.scm (%top-srcdir): New variable.
<top level>: Pass it to 'hydra-jobs'.

Add (guix self) and use it when pulling.

This mitigates <https://bugs.gnu.org/27284>.

* guix/self.scm: New file.
* Makefile.am (MODULES): Add it.
* build-aux/build-self.scm (libgcrypt, zlib, gzip, bzip2, xz)
(false-if-wrong-guile, package-for-current-guile, guile-json)
(guile-ssh, guile-git, guile-bytestructures): Remove.
(build): Rewrite to simply delegate to 'compiled-guix'.
* gnu/packages.scm (%distro-root-directory): Rewrite to try different
directories.
* guix/discovery.scm (guix): Export 'scheme-files'.
* guix/scripts/pull.scm (build-and-install): Split into...
(install-latest): ... this.  New procedure.  And...
(build-and-install): ... this, which now takes a monadic value argument.
(indirect-root-added): Remove.
(guix-pull): Call 'add-indirect-root'.  Call 'build-from-source' and
pass the result to 'build-and-install'.

git: Do not add '.git' to the store.

This makes 'latest-repository-commit' significantly more efficient and
reduces disk usage in the store.

* guix/git.scm (copy-to-store)[dot-git?]: New procedure.
Pass it as the #:select? argument to 'add-to-store'.

pull: Trim import list.

* guix/scripts/pull.scm: Remove useless imports.