gnu: libvpx: Graft to fix CVE-2023-5217.

* gnu/packages/video.scm (libvpx)[replacement]: New field, set to…
(libvpx/fixed): …this new variable.
* gnu/packages/patches/libvpx-CVE-2023-5217.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.

gnu: qbittorrent-enhanced: Update to 4.5.5.10.

* gnu/packages/bittorrent.scm (qbittorrent-enhanced): Update to 4.5.5.10.

Signed-off-by: Tobias Geerinckx-Rice <me@tobias.gr>

gnu: qbittorrent-nox: Rename to qbittorrent-no-x.

* gnu/packages/bittorrent.scm (qbittorrent-no-x): New variable, renamed from…
(qbittorrent-nox): …this package, now redefined as a DEPRECATED-PACKAGE.

gnu: qbittorrent: Update to 4.5.5.

* gnu/packages/bittorrent.scm (qbittorrent): Update to 4.5.5.

Signed-off-by: Tobias Geerinckx-Rice <me@tobias.gr>

gnu: guix: Fix cross-compilation.

Fixes a regression introduced in
59587e2fda76c19b424fda9a987ff90d52ef217e where ./configure would fail
when cross-compiling with “Git is missing”.

Reported by gabber on #guix.

* gnu/packages/package-management.scm (guix)[arguments]: Add
‘ac_cv_path_GIT’ to #:configure-flags.

gnu: xen: Build reproducibly

* gnu/packages/virtualization.scm (xen)[source]: Add patches.
[arguments]: Add a new 'remove-cruft phase.
* gnu/packages/patches/xen-docs-use-predictable-ordering.patch,
* gnu/packages/patches/xen-remove-config.gz-timestamp.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them both.

gnu: xen: Build in parallel.

I was unable to trigger any additional irreproducibility.
If you can, please disable PARRALLEL-BUILD? instead.

* gnu/packages/virtualization.scm (xen)[arguments]: Remove hard-coded
‘-j 1’ from the #:make-flags.  Honour PARALLEL-BUILD? in the 'build
phase.

gnu: xen: Update package style.

* gnu/packages/virtualization.scm (xen)
[arguments]: Rewrite as G-expressions.  Use SEARCH-INPUT-FILE whenever
possible.  Put SUBSTITUTE* features to use.
[native-inputs, inputs]: Remove input labels.

gnu: xen: Update to 4.14.6.

* gnu/packages/virtualization.scm (xen): Update to 4.14.6.
[arguments]: Remove obsolete quoting work-around for old bug.
Don't explicitly return #t from phases.

gnu: xen: Version the mini-os checkout.

* gnu/packages/virtualization.scm (xen)[native-inputs]: Add the Xen name
and version to the ‘…-mini-os-git-checkout’ store file name.

gnu: qemu: Update to 8.1.1.

* gnu/packages/virtualization.scm (qemu): Update to 8.1.1.

gnu: imgp: Update to 2.9.

* gnu/packages/image.scm (imgp): Update to 2.9.
[arguments]: Don't explicitly return #t from phases.

gnu: erofs-utils: Update to 1.7.

* gnu/packages/linux.scm (erofs-utils): Update to 1.7.
[inputs]: Add zlib.

gnu: python-srsly: Update to 2.4.8.

* gnu/packages/python-xyz.scm (python-srsly): Update to 2.4.8.

gnu: remmina: Update to 1.4.32.

* gnu/packages/vnc.scm (remmina): Update to 1.4.32.
[source]: Add ‘.git’ suffix to silence needless HTTP redirection.

gnu: hplip: Update to 3.23.8.

* gnu/packages/cups.scm (hplip): Update to 3.23.8.

gnu: onedrive: Update to 2.4.25.

* gnu/packages/sync.scm (onedrive): Update to 2.4.25.

gnu: mlterm: Update to 3.9.3.

* gnu/packages/terminals.scm (mlterm): Update to 3.9.3.

gnu: kcov: Clean up build phase.

* gnu/packages/code.scm (kcov)[arguments]: Use SEARCH-INPUT-FILE and
remove a vestigial LET from the 'fix-/bin/bash-references phase.

gnu: kcov: Update to 42.

* gnu/packages/code.scm (kcov): Update to 42.