gnu: libyang: Update to 3.4.2. [security fixes]

This fixes CVE-2021-28902, CVE-2021-28903, CVE-2021-28904,
CVE-2021-28905 and CVE-2021-28906.

* gnu/packages/networking.scm (libyang): Update to 3.4.2.

gnu: maradns: Update to 3.5.0036. [security fixes]

This fixes CVE-2023-31137.

* gnu/packages/dns.scm (maradns): Update to 3.5.0036.
[properties]: Add release-monitoring-url property.

gnu: maradns: Improve style.

* gnu/packages/dns.scm (maradns)[arguments]: Use gexps.

gnu: python-django-4.2: Update to 4.2.16. [security fixes]

This fixes CVE-2024-24680, CVE-2024-41989, CVE-2024-41990,
CVE-2024-41991, CVE-2024-42005, CVE-2024-45230, CVE-2024-45231,
CVE-2023-43665 and CVE-2023-46695.

* gnu/packages/django.scm (python-django-4.2): Update to 4.2.16.
[properties]: Add lint-hidden-cve property.

gnu: libzapojit: Update to 0.0.3-1.99d49ba. [security fixes]

This fixes CVE-2021-39360.

* gnu/packages/gnome.scm (libzapojit): Update to 0.0.3-1.99d49ba.
[source]: Switch to git-fetch.
[native-inputs]: Add autoconf, autoconf-archive, automake, glib:bin and
libtool.

Change-Id: Ie0bd89d8a068dfad31565ad3c318c94ac1385c7b

gnu: kallisto: Update to 0.50.1

See discussion at <https://issues.guix.gnu.org/71146> for reasons to not
unbundle htslib and libbifrost.

* gnu/packages/bioinformatics.scm (kallisto): Update to 0.50.1.
[source]: Do not remove bundled libraries.
[arguments]: Remove phase 'do-not-use-bundled-htslib.
[inputs]: Remove htslib-1.9.

Change-Id: I6d3263fd49c7b07ce50185b722863b51816ff054
Signed-off-by: Ricardo Wurmus <rekado@elephly.net>

gnu: liblouis: Update to 3.31.0. [security fixes]

This fixes CVE-2022-26981.

* gnu/packages/language.scm (liblouis): Update to 3.31.0.
[arguments]: Improve style using gexps.
[native-inputs]: Remove labels. Replace python-wrapper by python-minimal.

Change-Id: Ibfa143ec97816539ba9c2904cd390c9d6d54c9d5

gnu: squashfs-tools: Update to 4.6.1. [security fixes]

This fixes CVE-2021-40153 and CVE-2021-41072.

* gnu/packages/compression.scm (squashfs-tools): Update to 4.6.1.
[arguments]: Improve style.
<#:make-flags>: Add INSTALL_MANPAGES_DIR value.
<#:phases>: Remove phase 'install-documentation. Add phase
'patch-generated-source-shebangs.
[native-inputs]: Add coreutils-minimal, help2man, which.
[inputs]: Remove labels.

Change-Id: I095427f071ad0f8d1d2609cfc4dd3ed719ece812

gnu: shapelib: Update to 1.6.1. [security fixes]

This fixes CVE-2022-0699.

* gnu/packages/geo.scm (shapelib): Update to 1.6.1.

gnu: snapcast: Update to 0.29.0. [security fixes]

This fixes CVE-2023-36177.

* gnu/packages/audio.scm (snapcast): Update to 0.29.0.

gnu: gifsicle: Use G-expressions.

* gnu/packages/image.scm (gifsicle)[arguments]: Use G-expressions.

Change-Id: I4bcf803e129e18c9d554d8544fc6c4896b61c9c3

gnu: gifsicle: Build from git source.

* gnu/packages/image.scm (gifsicle)[source]: Switch to git-fetch.
[native-inputs]: Add autoconf and automake.

Change-Id: I9b23e1d2f66aa328f56bad224b8db03b6261dd00

gnu: gifsicle: Update to 1.95. [security fixes]

This fixes CVE-2023-44821 and CVE-2023-46009.

* gnu/packages/image.scm (gifsicle): Update to 1.95.

gnu: libmobi: Update to 0.12. [security fixes]

This fixes CVE-2022-1533, CVE-2022-1534, CVE-2022-1907, CVE-2022-1908,
CVE-2022-1987, CVE-2022-2279, CVE-2022-29788, CVE-2021-3751,
CVE-2021-3881, CVE-2021-3888 and CVE-2021-3889.

* gnu/packages/ebook.scm (libmobi): Update to 0.12.

gnu: indent: Add patch for CVE-2024-0911. [security fixes]

* gnu/packages/patches/indent-CVE-2024-0911.patch: Add patch here...
* gnu/local.mk: ...here...
* gnu/packages/code.scm (indent)[source]<origin>: ...and here.

gnu: indent: Remove uneeded arguments.

* gnu/packages/code.scm (indent)
[arguments]: Remove field.
[native-inputs]: Remove automake.

gnu: xlsxio: Update to 0.2.35. [security fixes]

This fixes CVE-2023-34795.

* gnu/packages/xml.scm (xlsxio): Update to 0.2.35.

gnu: wireshark: Build from git source.

* gnu/packages/networking.scm (wireshark)[source]: Switch to git-fetch.
[arguments]<#:configure-flags>: Set -DVCSVERSION_OVERRIDE.

Change-Id: I82356c1faea9a6253108dc17334db2464ba38098

gnu: wireshark: Update to 4.4.1. [security fixes]

This fixes CVE-2024-9780.

* gnu/packages/networking.scm (wireshark): Update to 4.4.1.

gnu: darkhttpd: Enable tests.

* gnu/packages/web.scm (darkhttpd)[arguments]: Set #:test-target "test"
[native-inputs]: Add which and python-minimal.

Change-Id: I9d9246109bba975d49f1e48f4c6d6e32d28a466c