Merge branch 'gnome-updates'

gnu: cups-filters: Fix CVE-2016-{10132,10133} in statically linked mupdf.

The vulnerabilities are in the MuJS that is bundled with MuPDF.

* gnu/packages/cups.scm (cups-filters)[replacement]: New field.
(mupdf/fixed-instead-of-mupdf), (cups-filters/fixed): New variables.

gnu: mupdf: Fix CVE-2016-{10132,10133} in bundled mujs.

* gnu/packages/patches/mupdf-mujs-CVE-2016-10132.patch,
gnu/packages/patches/mupdf-mujs-CVE-2016-10133.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.
* gnu/packages/pdf.scm (mupdf)[replacement]: New field.
(mupdf/fixed): New variable.

Co-authored-by: Leo Famulari <leo@famulari.name>

guix build: Add '--repair'.

* guix/scripts/build.scm (show-help, %options): Add '--repair'.
* doc/guix.texi (Invoking guix gc): Mention 'guix build --repair'.
(Additional Build Options): Document it.

gnu: guix: Update development snapshot.

* gnu/packages/package-management.scm (guix-devel): Update to d9da3a7.

gnu: icecat: Add more fixes from upstream mozilla-esr45.

* gnu/packages/gnuzilla.scm (icecat)[source]: Add selected patches from
the upstream mozilla-esr45 repository.

gnu: fio: Update to 2.16.

* gnu/packages/benchmark.scm (fio): Update to 2.16.

gnu: lua-lpeg: Update to 1.0.1.

* gnu/packages/lua.scm (lua-lpeg): Update to 1.0.1.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>

gnu: Add obconf.

* gnu/packages/openbox.scm (obconf): New variable.

Signed-off-by: Marius Bakke <mbakke@fastmail.com>

gnu: epiphany: Update to 3.22.4.

* gnu/packages/gnome.scm (epiphany): Update to 3.22.4.

guix build: Do not force 'build-cores', 'max-build-jobs', and 'max-silent-time'.

This lets the daemon use its own default settings unless otherwise
specified.

* guix/scripts/build.scm (set-build-options-from-command-line): Do not
provide default values for #:build-cores and #:max-build-jobs.
(%default-options): Remove 'max-silent-time'.

daemon: Client settings no longer override daemon settings.

Fixes <http://bugs.gnu.org/20217>.

* nix/libstore/worker-protocol.hh (PROTOCOL_VERSION): Bump to 0x161.
* nix/nix-daemon/nix-daemon.cc (performOp): "build-max-jobs",
"build-max-silent-time", and "build-cores" are no longer read upfront;
instead, read them from the key/value list at the end.
* nix/nix-daemon/guix-daemon.cc (main): Explicitly set
'settings.maxBuildJobs'.
* guix/store.scm (%protocol-version): Bump to #x161.
(set-build-options): #:max-build-jobs, #:max-silent-time, and
 #:build-cores now default to #f.  Adjust handshake to new protocol.
* tests/store.scm ("build-cores"): New test.
* tests/guix-daemon.sh: Add test for default "build-cores" value.

gnu: weechat: Update to 1.7.

* gnu/packages/irc.scm (weechat): Update to 1.7.

gnu: wcslib: Update to 5.16.

* gnu/packages/astronomy.scm (wcslib): Update to 5.16.

gnu: Add openvpn service.

* gnu/services/vpn.scm: New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* doc/guix.texi (VPN Services): New section.

gnu: tipp10: Adjust phases.

* gnu/packages/education.scm (tipp10)[arguments]: Return #t for
"disable-new-version-check"; fix indentation.

gnu: tipp10: Fix description.

* gnu/packages/education.scm (tipp10)[description]: Do not mention
operating systems; remove hint about language settings.

gnu: xfce4-terminal: Update to 0.8.3.

* gnu/packages/xfce.scm (xfce4-terminal): Update to 0.8.3.

gnu: sbcl-stumpwm: Update to 1.0.0.

* gnu/packages/lisp.scm (sbcl-stumpwm): Update to 1.0.0.

gnu: vc-dwim: Update to 1.8.

* gnu/packages/version-control.scm (vc-dwim): Update to 1.8.
[home-page]: Use https.