backports/php8-pecl-inotify: new aport

user/gitaly: fix bundler config issues
user/gitlab-foss: upgrade to 15.9.3
2023-06-02 17:03:01 -04:00 · 2023-03-14 16:19:42 -04:00 · 2023-03-14 15:35:51 -04:00 · 2023-03-08 13:06:53 -05:00 · 2023-03-03 01:40:15 -05:00 · 2023-03-03 01:40:01 -05:00
131 changed files with 18815 additions and 2988 deletions
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@ -1,5 +1,7 @@
 stages:
  - verify
+  - build
+  - deploy

 variables:
  GIT_STRATEGY: clone
@ -7,112 +9,52 @@ variables:

 lint:
  stage: verify
-  image: alpinelinux/apkbuild-lint-tools:latest
  interruptible: true
  script:
-    - lint
+    - |
+      sudo apk add shellcheck atools doas abuild
+      export PATH="$PATH:$CI_PROJECT_DIR/.gitlab/bin"
+      lint
  allow_failure: true
  only:
    - merge_requests
  tags:
-    - docker-alpine
-    - x86_64
+    - apk-$CI_MERGE_REQUEST_TARGET_BRANCH_NAME

-.build:
-  stage: verify
-  image: alpinelinux/alpine-gitlab-ci:latest
+build:
+  stage: build
  interruptible: true
  script:
-    - build.sh
+    - |
+      sudo apk add alpine-sdk lua-aports doas
+      doas addgroup $USER abuild
+      export PATH="$PATH:$CI_PROJECT_DIR/.gitlab/bin"
+      sudo -Eu $USER build.sh
  artifacts:
    paths:
      - packages/
      - keys/
      - logs/
-    expire_in: 1 day
+    expire_in: 7 days
    when: always
  only:
    - merge_requests
-
-build-x86_64:
-  extends: .build
-  artifacts:
-    name: MR${CI_MERGE_REQUEST_ID}_x86_64
  tags:
-    - docker-alpine
-    - ci-build
-    - x86_64
+    - apk-$CI_MERGE_REQUEST_TARGET_BRANCH_NAME

-build-x86:
-  extends: .build
-  image:
-    name: alpinelinux/alpine-gitlab-ci:latest-x86
-    entrypoint: ["linux32", "sh", "-c"]
-  artifacts:
-    name: MR${CI_MERGE_REQUEST_ID}_x86
-  tags:
-    - docker-alpine
-    - ci-build
-    - x86
-
-build-s390x:
-  extends: .build
-  artifacts:
-    name: MR${CI_MERGE_REQUEST_ID}_s390x
-  tags:
-    - docker-alpine
-    - ci-build
-    - s390x
-
-build-ppc64le:
-  extends: .build
-  artifacts:
-    name: MR${CI_MERGE_REQUEST_ID}_ppc64le
-  tags:
-    - docker-alpine
-    - ci-build
-    - ppc64le
-
-build-aarch64:
-  extends: .build
-  artifacts:
-    name: MR${CI_MERGE_REQUEST_ID}_aarch64
-  tags:
-    - docker-alpine
-    - ci-build
-    - aarch64
-
-build-armv7:
-  extends: .build
-  image:
-    name: alpinelinux/alpine-gitlab-ci:latest-armv7
-    entrypoint: ["linux32", "sh", "-c"]
-  artifacts:
-    name: MR${CI_MERGE_REQUEST_ID}_armv7
-  tags:
-    - docker-alpine
-    - ci-build
-    - armv7
-
-build-armhf:
-  extends: .build
-  image:
-    name: alpinelinux/alpine-gitlab-ci:latest-armhf
-    entrypoint: ["linux32", "sh", "-c"]
-  artifacts:
-    name: MR${CI_MERGE_REQUEST_ID}_armhf
-  tags:
-    - docker-alpine
-    - ci-build
-    - armhf
-
-build-riscv64-emulated:
-  extends: .build
+push:
+  interruptible: true
+  stage: deploy
+  needs:
+    - job: build
+      artifacts: true
+  script:
+    - |
+      sudo apk add abuild git-lfs
+      export PATH="$PATH:$CI_PROJECT_DIR/.gitlab/bin"
+      push.sh
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
      when: manual
-  artifacts:
-    name: MR${CI_MERGE_REQUEST_ID}_riscv64
  tags:
-    - docker-alpine
-    - ci-build
-    - riscv64
-
+    - apk-$CI_MERGE_REQUEST_TARGET_BRANCH_NAME
--- a/.gitlab/bin/APKBUILD_SHIM
+++ b/.gitlab/bin/APKBUILD_SHIM
@ -0,0 +1,111 @@
+#!/bin/sh
+
+set -e
+
+arch=
+builddir=
+checkdepends=
+depends=
+depends_dev=
+depends_doc=
+depends_libs=
+depends_openrc=
+depends_static=
+install=
+install_if=
+langdir=
+ldpath=
+license=
+makedepends=
+makedepends_build=
+makedepends_host=
+md5sums=
+options=
+patch_args=
+pkgbasedir=
+pkgdesc=
+pkgdir=
+pkgname=
+pkgrel=
+pkgver=
+pkggroups=
+pkgusers=
+provides=
+provider_priority=
+replaces=
+sha256sums=
+sha512sums=
+sonameprefix=
+source=
+srcdir=
+startdir=
+subpackages=
+subpkgdir=
+subpkgname=
+triggers=
+url=
+
+# abuild.conf
+
+CFLAGS=
+CXXFLAGS=
+CPPFLAGS=
+LDFLAGS=
+JOBS=
+MAKEFLAGS=
+CMAKE_CROSSOPTS=
+
+. ./APKBUILD
+
+: "$arch"
+: "$builddir"
+: "$checkdepends"
+: "$depends"
+: "$depends_dev"
+: "$depends_doc"
+: "$depends_libs"
+: "$depends_openrc"
+: "$depends_static"
+: "$install"
+: "$install_if"
+: "$langdir"
+: "$ldpath"
+: "$license"
+: "$makedepends"
+: "$makedepends_build"
+: "$makedepends_host"
+: "$md5sums"
+: "$options"
+: "$patch_args"
+: "$pkgbasedir"
+: "$pkgdesc"
+: "$pkgdir"
+: "$pkgname"
+: "$pkgrel"
+: "$pkgver"
+: "$pkggroups"
+: "$pkgusers"
+: "$provides"
+: "$provider_priority"
+: "$replaces"
+: "$sha256sums"
+: "$sha512sums"
+: "$sonameprefix"
+: "$source"
+: "$srcdir"
+: "$startdir"
+: "$subpackages"
+: "$subpkgdir"
+: "$subpkgname"
+: "$triggers"
+: "$url"
+
+# abuild.conf
+
+: "$CFLAGS"
+: "$CXXFLAGS"
+: "$CPPFLAGS"
+: "$LDFLAGS"
+: "$JOBS"
+: "$MAKEFLAGS"
+: "$CMAKE_CROSSOPTS"
--- a/.gitlab/bin/apkbuild-shellcheck
+++ b/.gitlab/bin/apkbuild-shellcheck
@ -0,0 +1,16 @@
+#!/bin/sh
+
+shellcheck -s ash \
+        -e SC3043 \
+        -e SC3057 \
+        -e SC3060 \
+        -e SC2016 \
+        -e SC2086 \
+        -e SC2169 \
+        -e SC2155 \
+        -e SC2100 \
+        -e SC2209 \
+        -e SC2030 \
+        -e SC2031 \
+        -e SC1090 \
+        -xa $CI_PROJECT_DIR/.gitlab/bin/APKBUILD_SHIM
--- a/.gitlab/bin/build.sh
+++ b/.gitlab/bin/build.sh
@ -0,0 +1,263 @@
+#!/bin/sh
+# shellcheck disable=SC3043
+
+. $CI_PROJECT_DIR/.gitlab/bin/functions.sh
+
+# shellcheck disable=SC3040
+set -eu -o pipefail
+
+readonly APORTSDIR=$CI_PROJECT_DIR
+readonly REPOS="backports user"
+readonly ALPINE_REPOS="main community testing"
+readonly ARCH=$(apk --print-arch)
+# gitlab variables
+readonly BASEBRANCH=$CI_MERGE_REQUEST_TARGET_BRANCH_NAME
+
+: "${REPODEST:=$HOME/packages}"
+: "${MIRROR:=https://lab.ilot.io/ayakael/repo-apk/-/raw}"
+: "${ALPINE_MIRROR:=http://dl-cdn.alpinelinux.org/alpine}"
+: "${MAX_ARTIFACT_SIZE:=300000000}" #300M
+: "${CI_DEBUG_BUILD:=}"
+
+: "${CI_ALPINE_BUILD_OFFSET:=0}"
+: "${CI_ALPINE_BUILD_LIMIT:=9999}"
+
+msg() {
+	local color=${2:-green}
+	case "$color" in
+		red) color="31";;
+		green) color="32";;
+		yellow) color="33";;
+		blue) color="34";;
+		*) color="32";;
+	esac
+	printf "\033[1;%sm>>>\033[1;0m %s\n" "$color" "$1" | xargs >&2
+}
+
+verbose() {
+	echo "> " "$@"
+	# shellcheck disable=SC2068
+	$@
+}
+
+debugging() {
+	[ -n "$CI_DEBUG_BUILD" ]
+}
+
+debug() {
+	if debugging; then
+		verbose "$@"
+	fi
+}
+
+die() {
+	msg "$1" red
+	exit 1
+}
+
+capture_stderr() {
+	"$@" 2>&1
+}
+
+report() {
+	report=$1
+
+	reportsdir=$APORTSDIR/logs/
+	mkdir -p "$reportsdir"
+
+	tee -a "$reportsdir/$report.log"
+}
+
+get_release() {
+	case $BASEBRANCH in
+		v*) echo "${BASEBRANCH%-*}";;
+		edge) echo edge;;
+		*) die "Branch \"$BASEBRANCH\" not supported!"
+	esac
+}
+
+build_aport() {
+	local repo="$1" aport="$2"
+	cd "$APORTSDIR/$repo/$aport"
+	if abuild -r 2>&1 | report "build-$aport"; then
+		checkapk | report "checkapk-$aport" || true
+		aport_ok="$aport_ok $repo/$aport"
+	else
+		aport_ng="$aport_ng $repo/$aport"
+	fi
+}
+
+check_aport() {
+	local repo="$1" aport="$2"
+	cd "$APORTSDIR/$repo/$aport"
+	if ! abuild check_arch 2>/dev/null; then
+		aport_na="$aport_na $repo/$aport"
+		return 1
+	fi
+}
+
+set_repositories_for() {
+	local target_repo="$1" repos='' repo=''
+	local release
+
+	release=$(get_release)
+	for repo in $REPOS; do
+		[ "$release" == "edge" ] && [ "$repo" == "backports" ] && continue
+		repos="$repos $MIRROR/$release/$repo $REPODEST/$repo"
+		[ "$repo" = "$target_repo" ] && break
+	done
+	doas sh -c "printf '%s\n' $repos >> /etc/apk/repositories"
+	doas apk update
+}
+
+apply_offset_limit() {
+	start=$1
+	limit=$2
+	end=$((start+limit))
+
+	sed -n "$((start+1)),${end}p"
+}
+
+setup_system() {
+	local repos='' repo=''
+	local release
+
+	release=$(get_release)
+	for repo in $ALPINE_REPOS; do
+		[ "$release" != "edge" ] && [ "$repo" == "testing" ] && continue
+		repos="$repos $ALPINE_MIRROR/$release/$repo"
+	done
+	doas sh -c "printf '%s\n' $repos > /etc/apk/repositories"
+	doas apk -U upgrade -a || doas apk fix || die "Failed to up/downgrade system"
+	gitlab_key_to_rsa $ABUILD_KEY rsa-private $HOME/.abuild/$ABUILD_KEY_NAME.rsa
+	gitlab_key_to_rsa $ABUILD_KEY_PUB rsa-public $HOME/.abuild/$ABUILD_KEY_NAME.rsa.pub
+	chmod 700 $HOME/.abuild/$ABUILD_KEY_NAME.rsa
+	echo "PACKAGER_PRIVKEY=$HOME/.abuild/$ABUILD_KEY_NAME.rsa" >> $HOME/.abuild/abuild.conf
+	doas cp $HOME/.abuild/$ABUILD_KEY_NAME.rsa.pub /etc/apk/keys/$ABUILD_KEY_NAME.rsa.pub
+
+	doas sed -i -E 's/export JOBS=[0-9]+$/export JOBS=$(nproc)/' /etc/abuild.conf
+	( . /etc/abuild.conf && echo "Building with $JOBS jobs" )
+	mkdir -p "$REPODEST"
+	git config --global init.defaultBranch master
+}
+
+sysinfo() {
+	printf ">>> Host system information (arch: %s, release: %s) <<<\n" "$ARCH" "$(get_release)"
+	printf "- Number of Cores: %s\n" "$(nproc)"
+	printf "- Memory: %s Gb\n" "$(awk '/^MemTotal/ {print ($2/1024/1024)}' /proc/meminfo)"
+	printf "- Free space: %s\n" "$(df -hP / | awk '/\/$/ {print $4}')"
+}
+
+copy_artifacts() {
+	cd "$APORTSDIR"
+
+	packages_size="$(du -sk "$REPODEST" | awk '{print $1 * 1024}')"
+	if [ -z "$packages_size" ]; then
+		return
+	fi
+
+	echo "Artifact size: $packages_size bytes"
+
+	mkdir -p keys/ packages/
+
+	if [ "$packages_size" -lt $MAX_ARTIFACT_SIZE ]; then
+		msg "Copying packages for artifact upload"
+		cp -ar "$REPODEST"/* packages/ 2>/dev/null
+		cp ~/.abuild/*.rsa.pub keys/
+	else
+		msg "Artifact size $packages_size larger than max ($MAX_ARTIFACT_SIZE), skipping uploading them" yellow
+	fi
+}
+
+section_start setup "Setting up the system" collapse
+
+if debugging; then
+	set -x
+fi
+
+aport_ok=
+aport_na=
+aport_ng=
+failed=
+
+sysinfo || true
+setup_system || die "Failed to setup system"
+
+# git no longer allows to execute in repositories owned by different users
+doas chown -R $USER: .
+
+fetch_flags="-qn"
+debugging && fetch_flags="-v"
+
+git fetch $fetch_flags "$CI_MERGE_REQUEST_PROJECT_URL" \
+	"+refs/heads/$BASEBRANCH:refs/heads/$BASEBRANCH"
+
+if debugging; then
+	merge_base=$(git merge-base "$BASEBRANCH" HEAD) || echo "Could not determine merge-base"
+	echo "Merge base: $merge_base"
+	git --version
+	git config -l
+	[ -n "$merge_base" ] && git tag -f merge-base "$merge_base"
+	git --no-pager log -200 --oneline --graph --decorate --all
+fi
+
+section_end setup
+
+build_start=$CI_ALPINE_BUILD_OFFSET
+build_limit=$CI_ALPINE_BUILD_LIMIT
+
+for repo in $(changed_repos); do
+	set_repositories_for "$repo"
+	built_aports=0
+	changed_aports_in_repo=$(changed_aports "$repo")
+	changed_aports_in_repo_count=$(echo "$changed_aports_in_repo" | wc -l)
+	changed_aports_to_build=$(echo "$changed_aports_in_repo" | apply_offset_limit "$build_start" "$build_limit")
+
+	msg "Changed aports in $repo:"
+	# shellcheck disable=SC2086 # Splitting is expected here
+	printf " - %s\n" $changed_aports_to_build
+	for pkgname in $changed_aports_to_build; do
+		section_start "build_$pkgname" "Building package $pkgname"
+		built_aports=$((built_aports+1))
+		if check_aport "$repo" "$pkgname"; then
+			build_aport "$repo" "$pkgname"
+		fi
+		section_end "build_$pkgname"
+	done
+
+	build_start=$((build_start-(changed_aports_in_repo_count-built_aports)))
+	build_limit=$((build_limit-built_aports))
+
+	if [ $build_limit -le 0 ]; then
+		msg "Limit reached, breaking"
+		break
+	fi
+done
+
+section_start artifacts "Handeling artifacts" collapse
+copy_artifacts || true
+section_end artifacts
+
+section_start summary "Build summary"
+
+echo "### Build summary ###"
+
+for ok in $aport_ok; do
+	msg "$ok: build succesfully"
+done
+
+for na in $aport_na; do
+	msg "$na: disabled for $ARCH" yellow
+done
+
+for ng in $aport_ng; do
+	msg "$ng: build failed" red
+	failed=true
+done
+section_end summary
+
+if [ "$failed" = true ]; then
+	exit 1
+elif [ -z "$aport_ok" ]; then
+	msg "No packages found to be built." yellow
+fi
--- a/.gitlab/bin/changed-aports
+++ b/.gitlab/bin/changed-aports
@ -0,0 +1,20 @@
+#!/bin/sh
+
+if [ $# -lt 1 ]; then
+    echo "Usage: $0 <basebranch>"
+    exit 1
+fi
+
+if ! git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+    echo "Fatal: not inside a git repository"
+    exit 2
+fi
+
+basebranch=$1
+
+if ! git rev-parse --verify --quiet $basebranch >/dev/null; then
+    # The base branch does not eixst, probably due to a shallow clone
+    git fetch -v $CI_MERGE_REQUEST_PROJECT_URL.git +refs/heads/$basebranch:refs/heads/$basebranch
+fi
+
+git --no-pager diff --diff-filter=ACMR --name-only $basebranch...HEAD -- "*/APKBUILD" | xargs -r -n1 dirname
--- a/.gitlab/bin/functions.sh
+++ b/.gitlab/bin/functions.sh
@ -0,0 +1,74 @@
+# shellcheck disable=SC3043
+
+:
+
+# shellcheck disable=SC3040
+set -eu -o pipefail
+
+changed_repos() {
+	: "${APORTSDIR?APORTSDIR missing}"
+	: "${BASEBRANCH?BASEBRANCH missing}"
+
+	cd "$APORTSDIR"
+	for repo in $REPOS; do
+		git diff --diff-filter=ACMR --exit-code "$BASEBRANCH"...HEAD -- "$repo" >/dev/null \
+			|| echo "$repo"
+	done
+}
+
+changed_aports() {
+	: "${APORTSDIR?APORTSDIR missing}"
+	: "${BASEBRANCH?BASEBRANCH missing}"
+
+	cd "$APORTSDIR"
+	local repo="$1"
+	local aports
+
+	aports=$(git diff --name-only --diff-filter=ACMR --relative="$repo" \
+		"$BASEBRANCH"...HEAD -- "*/APKBUILD" | xargs -rn1 dirname)
+
+	# shellcheck disable=2086
+	ap builddirs -d "$APORTSDIR/$repo" $aports 2>/dev/null | xargs -rn1 basename
+}
+
+section_start() {
+	name=${1?arg 1 name missing}
+	header=${2?arg 2 header missing}
+	collapsed=$2
+	timestamp=$(date +%s)
+
+	options=""
+	case $collapsed in
+		yes|on|collapsed|true) options="[collapsed=true]";;
+	esac
+
+	printf "\e[0Ksection_start:%d:%s%s\r\e[0K%s\n" "$timestamp" "$name" "$options" "$header"
+}
+
+section_end() {
+	name=$1
+	timestamp=$(date +%s)
+
+	printf "\e[0Ksection_end:%d:%s\r\e[0K" "$timestamp" "$name"
+}
+
+gitlab_key_to_rsa() {
+	KEY=$1
+	TYPE=$2
+	TGT=$3
+	TGT_DIR=${TGT%/*}
+	if [ "$TGT" == "$TGT_DIR" ]; then
+		TGT_DIR="./"
+	fi
+	if [ ! -d "$TGT_DIR" ]; then
+		mkdir -p "$TGT_DIR"
+	fi
+	case $TYPE in
+		rsa-public) local type="PUBLIC";;
+		rsa-private) local type="RSA PRIVATE";;
+	esac
+	echo "-----BEGIN $type KEY-----" > "$TGT"
+	echo $1 | sed 's/.\{64\}/&\
+/g' >> "$TGT"
+	echo "-----END $type KEY-----" >> "$TGT"
+}
--- a/.gitlab/bin/lint
+++ b/.gitlab/bin/lint
@ -0,0 +1,96 @@
+#!/bin/sh
+
+BLUE="\e[34m"
+MAGENTA="\e[35m"
+RESET="\e[0m"
+
+readonly BASEBRANCH=$CI_MERGE_REQUEST_TARGET_BRANCH_NAME
+
+verbose() {
+    echo "> " "$@"
+    # shellcheck disable=SC2068
+    $@
+}
+
+debugging() {
+    [ -n "$CI_DEBUG_BUILD" ]
+}
+
+debug() {
+    if debugging; then
+        verbose "$@"
+    fi
+}
+
+# git no longer allows to execute in repositories owned by different users
+doas chown -R gitlab-runner: .
+
+fetch_flags="-qn"
+debugging && fetch_flags="-v"
+
+git fetch $fetch_flags "$CI_MERGE_REQUEST_PROJECT_URL" \
+	"+refs/heads/$BASEBRANCH:refs/heads/$BASEBRANCH"
+
+if debugging; then
+    merge_base=$(git merge-base "$BASEBRANCH" HEAD)
+    echo "$merge_base"
+    git --version
+    git config -l
+    git tag merge-base "$merge_base" || { echo "Could not determine merge-base"; exit 50; }
+    git log --oneline --graph --decorate --all
+fi
+
+has_problems=0
+
+for PKG in $(changed-aports "$BASEBRANCH"); do
+    printf "$BLUE==>$RESET Linting $PKG\n"
+
+    (
+        cd "$PKG"
+
+        repo=$(basename $(dirname $PKG));
+
+        if [ "$repo" = "main" ]; then
+            export SKIP_AL1=1
+            export SKIP_AL13=1
+        fi
+
+        printf "\n\n"
+        printf "$BLUE"
+        printf '======================================================\n'
+        printf "                  parse APKBUILD:\n"
+        printf '======================================================'
+        printf "$RESET\n\n"
+        ( . ./APKBUILD ) || has_problems=1
+
+        printf "\n\n"
+        printf "$BLUE"
+        printf '======================================================\n'
+        printf "                abuild sanitycheck:\n"
+        printf '======================================================'
+        printf "$RESET\n\n"
+        abuild sanitycheck || has_problems=1
+
+        printf "\n\n"
+        printf "$BLUE"
+        printf '======================================================\n'
+        printf "                apkbuild-shellcheck:\n"
+        printf '======================================================'
+        printf "$RESET\n"
+        apkbuild-shellcheck || has_problems=1
+
+        printf "\n\n"
+        printf "$BLUE"
+        printf '======================================================\n'
+        printf "                  apkbuild-lint:\n"
+        printf '======================================================'
+        printf "$RESET\n\n"
+        apkbuild-lint APKBUILD || has_problems=1
+
+        return $has_problems
+    ) || has_problems=1
+
+    echo
+done
+
+exit $has_problems
--- a/.gitlab/bin/push.sh
+++ b/.gitlab/bin/push.sh
@ -0,0 +1,47 @@
+#!/bin/sh
+
+# shellcheck disable=SC3043
+
+. $CI_PROJECT_DIR/.gitlab/bin/functions.sh
+
+# shellcheck disable=SC3040
+set -eu -o pipefail
+
+readonly APORTSDIR=$CI_PROJECT_DIR
+readonly REPOS="backports user"
+readonly BASEBRANCH=$CI_MERGE_REQUEST_TARGET_BRANCH_NAME
+
+export GIT_SSH_COMMAND="ssh -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no"
+
+gitlab_key_to_rsa $ABUILD_KEY rsa-private $HOME/.abuild/$ABUILD_KEY_NAME.rsa
+gitlab_key_to_rsa $ABUILD_KEY_PUB rsa-public $HOME/.abuild/$ABUILD_KEY_NAME.rsa.pub
+gitlab_key_to_rsa $SSH_KEY rsa-private $HOME/.ssh/id_rsa
+chmod 700 "$HOME"/.ssh/id_rsa
+chmod 700 "$HOME"/.abuild/$ABUILD_KEY_NAME.rsa
+
+echo "PACKAGER_PRIVKEY=$HOME/.abuild/$ABUILD_KEY_NAME.rsa" >> $HOME/.abuild/abuild.conf
+echo "REPODEST=$CI_PROJECT_DIR/repo-apk" >> $HOME/.abuild/abuild.conf
+doas cp $HOME/.abuild/$ABUILD_KEY_NAME.rsa.pub /etc/apk/keys/.
+
+git clone git@lab.ilot.io:ayakael/repo-apk -b $BASEBRANCH
+for i in $(find packages -type f -name "*.apk"); do
+	cp $i ${i/packages/repo-apk}
+done
+
+fetch_flags="-qn"
+git fetch $fetch_flags "$CI_MERGE_REQUEST_PROJECT_URL" \
+	"+refs/heads/$BASEBRANCH:refs/heads/$BASEBRANCH"
+
+for repo in $(changed_repos); do
+	rm $CI_PROJECT_DIR/repo-apk/$repo/x86_64/APKINDEX.tar.gz
+	mkdir -p $repo/DUMMY
+	echo "pkgname=DUMMY" > $repo/DUMMY/APKBUILD
+	cd $repo/DUMMY
+	abuild index
+	cd "$CI_PROJECT_DIR"
+	rm -R $repo/DUMMY
+done
+
+git -C repo-apk add .
+git -C repo-apk commit -m "Update from $CI_MERGE_REQUEST_IID - $CI_MERGE_REQUEST_TITLE"
+git -C repo-apk push
--- a/backports/electron/APKBUILD
+++ b/backports/electron/APKBUILD
@ -1,462 +0,0 @@
-# Maintainer: psykose <alice@ayaya.dev>
-pkgname=electron
-pkgver=21.3.3
-pkgrel=3
-_chromium=106.0.5249.199
-_depot_tools=6fde0fbe9226ae3fc9f5c709adb93249924e5c49
-pkgdesc="Electron cross-platform desktop toolkit"
-url="https://github.com/electron/electron"
-arch="aarch64 x86_64" # same as chromium
-license="MIT"
-depends="gtk+3.0 so:libudev.so.1 xdg-utils"
-makedepends="
-	alsa-lib-dev
-	aom-dev
-	bash
-	brotli-dev
-	bsd-compat-headers
-	bzip2-dev
-	c-ares-dev
-	cairo-dev
-	clang-dev
-	clang-extra-tools
-	compiler-rt
-	cups-dev
-	curl-dev
-	dav1d-dev
-	dbus-glib-dev
-	eudev-dev
-	ffmpeg-dev
-	findutils
-	flac-dev
-	flex
-	freetype-dev
-	gperf
-	gtk+3.0-dev
-	gn
-	gzip
-	harfbuzz-dev
-	hunspell-dev
-	http-parser-dev
-	hwids-usb
-	java-jdk
-	jpeg-dev
-	jsoncpp-dev
-	krb5-dev
-	lcms2-dev
-	libarchive-tools
-	libavif-dev
-	libbsd-dev
-	libcap-dev
-	libevent-dev
-	libexif-dev
-	libgcrypt-dev
-	libjpeg-turbo-dev
-	libnotify-dev
-	libusb-dev
-	libva-dev
-	libwebp-dev
-	libxcomposite-dev
-	libxcursor-dev
-	libxinerama-dev
-	libxml2-dev
-	libxrandr-dev
-	libxscrnsaver-dev
-	libxslt-dev
-	linux-headers
-	lld
-	llvm
-	mesa-dev
-	minizip-dev
-	nghttp2-dev
-	nodejs
-	npm
-	nss-dev
-	opus-dev
-	pciutils-dev
-	perl
-	pipewire-dev
-	pulseaudio-dev
-	py3-httplib2
-	py3-parsing
-	py3-six
-	python3
-	re2-dev
-	samurai
-	snappy-dev
-	speex-dev
-	sqlite-dev
-	woff2-dev
-	xcb-proto
-	yarn
-	zlib-dev
-	"
-subpackages="$pkgname-lang $pkgname-dev"
-# the lower patches are specific to electron, the top ones are from the equivalent chromium version
-source="https://dev.alpinelinux.org/archive/electron/electron-$pkgver.tar.xz
-	angle-wayland-include.patch
-	canonicalize-file-name.patch
-	chromium-VirtualCursor-standard-layout.patch
-	chromium-revert-drop-of-system-java.patch
-	chromium-use-alpine-target.patch
-	credentials-sys-types-header.patch
-	default-pthread-stacksize.patch
-	dns-resolver.patch
-	fix-crashpad.patch
-	fix-missing-cstdint-include-musl.patch
-	fix-narrowing-cast.patch
-	gdbinit.patch
-	jsoncpp.patch
-	memory-tagging-arm64.patch
-	musl-sandbox.patch
-	musl-tid-caching.patch
-	musl-v8-monotonic-pthread-cont_timedwait.patch
-	no-execinfo.patch
-	no-glibc-version.patch
-	no-mallinfo.patch
-	no-res-ninit-nclose.patch
-	no-stat-redefine.patch
-	nullptr-t.patch
-	partition-atfork.patch
-	py3.11.patch
-	quiche-arena-size.patch
-	roll-src-third_party-ffmpeg-102.patch
-	roll-src-third_party-ffmpeg-106.patch
-	scoped-file-no-close.patch
-	temp-failure-retry.patch
-	wtf-stacksize.patch
-
-	icon.patch
-	python-jinja-3.10.patch
-	system-node.patch
-	vector-const.patch
-	webpack-hash.patch
-
-	default.conf
-	electron.desktop
-	electron-launcher.sh
-	"
-options="!check suid"
-
-# clang uses much less memory (and this doesn't support gcc)
-export CC=clang
-export CXX=clang++
-
-# required to find the tools
-export AR=llvm-ar
-export NM=llvm-nm
-export LD=clang++
-
-# less log spam, reproducible
-export CFLAGS="${CFLAGS/-g/} -O2 -Wno-unknown-warning-option -Wno-builtin-macro-redefined"
-export CXXFLAGS="${CXXFLAGS/-g/} -O2 -Wno-unknown-warning-option -Wno-builtin-macro-redefined"
-export CPPFLAGS="$CPPFLAGS -D__DATE__=  -D__TIME__=  -D__TIMESTAMP__="
-
-_gn_flags() {
-	echo "$@"
-}
-
-# creates a dist tarball that does not need to git clone everything at build time.
-snapshot() {
-	export CHROMIUM_BUILDTOOLS_PATH="$srcdir/src/buildtools"
-	mkdir -p "$srcdir"
-	cd "$srcdir"
-	git clone --branch=$_chromium --depth=1 \
-		https://chromium.googlesource.com/chromium/src.git
-
-	git clone https://github.com/electron/electron.git
-
-	(
-		git clone --depth 1 -b main https://chromium.googlesource.com/chromium/tools/depot_tools.git
-		cd depot_tools
-		git fetch --depth 1 origin $_depot_tools
-		git checkout $_depot_tools
-	)
-
-	export PATH="$PATH:$srcdir/depot_tools"
-
-	echo "solutions = [
-	{
-		\"name\": \"src/electron\",
-		\"url\": \"file://$srcdir/electron@v$pkgver\",
-		\"deps_file\": \"DEPS\",
-		\"managed\": False,
-		\"custom_deps\": {
-			\"src\": None,
-		},
-		\"custom_vars\": {},
-	},
-	]" > .gclient
-
-	python3 depot_tools/gclient.py sync \
-		--with_branch_heads \
-		--with_tags \
-		--nohooks
-
-	python3 src/build/landmines.py
-	python3 src/build/util/lastchange.py -o src/build/util/LASTCHANGE
-	python3 src/build/util/lastchange.py -s src/third_party/dawn \
-		--revision src/gpu/webgpu/DAWN_VERSION
-	python3 src/build/util/lastchange.py -m GPU_LISTS_VERSION \
-		--revision-id-only --header src/gpu/config/gpu_lists_version.h
-	python3 src/build/util/lastchange.py -m SKIA_COMMIT_HASH \
-		-s src/third_party/skia --header src/skia/ext/skia_commit_hash.h
-
-	# why?
-	cp -r electron/patches/ffmpeg src/electron/patches/
-
-	python3 electron/script/apply_all_patches.py \
-		electron/patches/config.json
-	python3 src/tools/download_optimization_profile.py \
-		--newest_state=src/chrome/android/profiles/newest.txt \
-		--local_state=src/chrome/android/profiles/local.txt \
-		--output_name=src/chrome/android/profiles/afdo.prof \
-		--gs_url_base=chromeos-prebuilt/afdo-job/llvm
-
-	mv src $pkgname-$pkgver
-
-	# extra binaries are most likely things we don't want, so nuke them all
-	for elf in $(scanelf -RA -F "%F" $pkgname-$pkgver); do
-		rm -f "$elf"
-	done
-
-	msg "generating tarball.. (this takes a while)"
-	tar -cf $pkgname-$pkgver.tar \
-		--exclude="ChangeLog*" \
-		--exclude="testdata/" \
-		--exclude="test_data/" \
-		--exclude="android_rust_toolchain/toolchain/" \
-		--exclude-backups \
-		--exclude-caches-all \
-		--exclude-vcs \
-		$pkgname-$pkgver
-
-	xz -T0 -e -9 -vv -k $pkgname-$pkgver.tar
-}
-
-prepare() {
-	default_prepare
-
-	git init .
-
-	# link to system tools
-	ln -sfv /usr/bin/clang-format buildtools/linux64/clang-format
-	mkdir -p third_party/node/linux/node-linux-x64/bin
-	ln -sfv /usr/bin/node third_party/node/linux/node-linux-x64/bin/node
-	ln -sfv /usr/bin/java third_party/jdk/current/bin/java
-
-	(
-		cd electron
-		git init .
-		git config user.email "example@example.com"
-		git config user.name "example"
-		git add LICENSE
-		git commit -m "init"
-		git tag "v$pkgver"
-		# jesus christ what the fuck is wrong with you?
-		touch .git/packed-refs
-		yarn install --frozen-lockfile
-	)
-
-	(
-		cd third_party/node
-		npm ci
-	)
-
-	local use_system="
-		brotli
-		dav1d
-		ffmpeg
-		flac
-		fontconfig
-		freetype
-		harfbuzz-ng
-		icu
-		jsoncpp
-		libaom
-		libavif
-		libdrm
-		libevent
-		libjpeg
-		libwebp
-		libxml
-		libxslt
-		opus
-		re2
-		snappy
-		woff2
-		zlib
-		"
-
-	for _lib in $use_system libjpeg_turbo; do
-		msg "Removing buildscripts for system provided $_lib"
-		find . -type f -path "*third_party/$_lib/*" \
-			\! -path "*third_party/$_lib/chromium/*" \
-			\! -path "*third_party/$_lib/google/*" \
-			\! -path './base/third_party/icu/*' \
-			\! -path './third_party/libxml/*' \
-			\! -path './third_party/pdfium/third_party/freetype/include/pstables.h' \
-			\! -path './third_party/harfbuzz-ng/utils/hb_scoped.h' \
-			\! -path './third_party/crashpad/crashpad/third_party/zlib/zlib_crashpad.h' \
-			\! -regex '.*\.\(gn\|gni\|isolate\|py\)' \
-			-delete
-	done
-
-	# https://groups.google.com/a/chromium.org/d/topic/chromium-packagers/9JX1N2nf4PU/discussion
-	touch chrome/test/data/webui/i18n_process_css_test.html
-	# Use the file at run time instead of effectively compiling it in
-	sed 's|//third_party/usb_ids/usb.ids|/usr/share/hwdata/usb.ids|g' \
-		-i services/device/public/cpp/usb/BUILD.gn
-
-	python3 build/linux/unbundle/replace_gn_files.py --system-libraries \
-		$use_system
-	python3 third_party/libaddressinput/chromium/tools/update-strings.py
-
-	# prevent annoying errors when regenerating gni
-	sed -i 's,^update_readme$,#update_readme,' \
-		third_party/libvpx/generate_gni.sh
-
-	# allow system dependencies in "official builds"
-	sed -i 's/OFFICIAL_BUILD/GOOGLE_CHROME_BUILD/' \
-		tools/generate_shim_headers/generate_shim_headers.py
-
-	# https://crbug.com/893950
-	sed -i -e 's/\<xmlMalloc\>/malloc/' -e 's/\<xmlFree\>/free/' \
-		third_party/blink/renderer/core/xml/*.cc \
-		third_party/blink/renderer/core/xml/parser/xml_document_parser.cc \
-		third_party/libxml/chromium/*.cc \
-		third_party/maldoca/src/maldoca/ole/oss_utils.h
-
-	msg "Configuring build"
-
-	local gn_config="
-		import(\"//electron/build/args/release.gn\")
-		blink_enable_generated_code_formatting=false
-		chrome_pgo_phase=0
-		clang_use_chrome_plugins=false
-		custom_toolchain=\"//build/toolchain/linux/unbundle:default\"
-		disable_fieldtrial_testing_config=true
-		enable_hangout_services_extension=true
-		enable_nacl=false
-		enable_stripping=false
-		enable_vr=false
-		fatal_linker_warnings=false
-		ffmpeg_branding=\"Chrome\"
-		host_toolchain=\"//build/toolchain/linux/unbundle:default\"
-		icu_use_data_file=true
-		is_cfi=false
-		is_component_ffmpeg=true
-		is_debug=false
-		is_official_build=true
-		link_pulseaudio=true
-		proprietary_codecs=true
-		rtc_link_pipewire=true
-		rtc_use_pipewire=true
-		symbol_level=0
-		treat_warnings_as_errors=false
-		use_custom_libcxx=false
-		use_gnome_keyring=false
-		use_pulseaudio=true
-		use_sysroot=false
-		use_system_freetype=true
-		use_system_harfbuzz=true
-		use_system_lcms2=true
-		use_system_libdrm=true
-		use_system_libjpeg=true
-		use_system_wayland_scanner=true
-		use_system_zlib=true
-		use_vaapi=true
-	"
-
-	gn gen out/Release \
-		--args="$(echo $gn_config)" \
-		--export-compile-commands
-}
-
-build() {
-	ninja -C out/Release \
-		electron_dist_zip \
-		node_gypi_headers \
-		node_version_header \
-		tar_headers
-}
-
-package() {
-	mkdir -p "$pkgdir"/usr/lib/electron "$pkgdir"/usr/bin
-
-	bsdtar -xf out/Release/dist.zip -C "$pkgdir"/usr/lib/electron
-
-	chmod u+s "$pkgdir"/usr/lib/electron/chrome-sandbox
-
-	install -Dm755 "$srcdir"/electron-launcher.sh "$pkgdir"/usr/bin/electron
-	install -Dm755 "$srcdir"/default.conf "$pkgdir"/etc/electron/default.conf
-
-	mkdir -p "$pkgdir"/usr/include/electron
-
-	mv -v "$builddir"/out/Release/gen/node_headers "$pkgdir"/usr/include/electron
-	ln -sv /usr/include/electron/node_headers/include/node "$pkgdir"/usr/include/electron/node
-
-	mkdir -p "$pkgdir"/usr/include/electron/node_headers/include/nan
-	cp -v "$builddir"/third_party/nan/*.h "$pkgdir"/usr/include/electron/node_headers/include/nan
-	ln -sv /usr/include/electron/node_headers/include/nan "$pkgdir"/usr/include/electron/nan
-
-	install -Dm644 electron/default_app/icon.png \
-		"$pkgdir"/usr/share/icons/hicolor/1024x1024/apps/electron.png
-	install -Dm644 "$srcdir"/electron.desktop \
-		-t "$pkgdir"/usr/share/applications/
-}
-
-lang() {
-	pkgdesc="$pkgdesc (translations)"
-	install_if="$pkgname=$pkgver-r$pkgrel lang"
-
-	mkdir -p "$subpkgdir"/usr/lib/electron/locales
-
-	mv "$pkgdir"/usr/lib/electron/locales/*.pak \
-		"$subpkgdir"/usr/lib/electron/locales
-	mv "$subpkgdir"/usr/lib/electron/locales/en-US.pak \
-		"$pkgdir"/usr/lib/electron/locales
-}
-
-sha512sums="
-1d21e74875ade836625c28d8d9351b41d2776def248193e9c82d4cd50375e9e9b2f7c40026673fe2a191a936f05c3fe639b0423964356ad678f41545aceede3c  electron-21.3.3.tar.xz
-f19ba0c0f542115e6f53019659df256471e811a23d2f37569c9d4dfa265c0c1ace3e62c74d7507f82e6b7b4152c704e651810a00616f8f531592b14bb2af01d9  angle-wayland-include.patch
-252b37a2ecc5e7a25385943045f426dc2e30991b28d206ceaff1be7fd8ffeeb024310a8fca6b3e69a4b1c57db535d51c570935351053525f393682d5ecd0f9a9  canonicalize-file-name.patch
-ac0a80174f95d733f33ddc06fc88cdcf7db0973378c28d8544dc9c19e2dabeac47f91c99b3e7384f650b3405554a9e222543f0860b6acc407c078a8c9180d727  chromium-VirtualCursor-standard-layout.patch
-c4654d5b23c6f5d9502507e534fe1951d6749c62251e49b6adfe10d1569431e7f7a5a6fa5ff09ec30984415ced27a5e20985df8c91295de34af3c84557fa5b91  chromium-revert-drop-of-system-java.patch
-d2b5b0396173367fcf1804aaee8e7fbefce9c63ac2a91c3a1ede759cb85e567317a57e4d4f82d3ca021682fb7856e15c074276a03eda946d9b28e1cb706b07ad  chromium-use-alpine-target.patch
-ec04bf43278a19d4bb090eddd636ad7093c7e757cb2ffa1875971e0709761174790e109b9be03a8e299d4077a87fbd8dabd301b8754bb6fe53c055396e8af556  credentials-sys-types-header.patch
-4ab8261bf95547b10df44e4d528c06a64c33602c10a1e09d531190dc8947ba6ef9e69145405b801cd364707570f791fee6d93e3bf5d57831f5a85212ddf01729  default-pthread-stacksize.patch
-f011f66e5aae5a6f0d440492ee9400878b47b66214c1bc8dc1477fdd07ad0a508cdbb74415e55e27085c4e61e112e7c2ae2edfa217f2fb387e13097b24cb17b1  dns-resolver.patch
-9d1edb1e0624ee61825e3af23fbb8c5dbc09d2b92d7769d19f8ca618edae8de8a3e051fedf4ad92c230e1373dc8495922c46971aef93a580c04ad80bc33516c0  fix-crashpad.patch
-8bebf4a9d5225c6e47edc5b07c4b97be24a45cc221f49632836915ceeb4ecb69b7f79a31ea7f82171cde3443f45fec541f409892542cf1014e81aa6acd01566d  fix-missing-cstdint-include-musl.patch
-efe97b9dd2ec5965fa0cdf1b2a3c01253835c2df710da7ea105c4ce008c11f9caaf8b4321736a2b91f06d8d61972c08e225b16509dc05176a2c39337688ad5b9  fix-narrowing-cast.patch
-cf73cbe5bf19d6a22157fb7aafb43f326885e852fc6292728f4ed1cd145d07ba5af51b6ec808095136cd406478aaa427ee1b9611c855fbd87976e1a91e1609bd  gdbinit.patch
-fa2637f92f851614347e296fbab744af2c5d7edcbb444aeb4a5d3182a8ec2549593d75e717d7e78e9b2a7257e693b48fc88c149c1591052d7ae802f4fda0a775  jsoncpp.patch
-e0afb7066c2cb41aa461feb9e45e571517229deab9d06186490b527783a7ba826a4d67d3a14a33a164eea64fa561eb5b93a1d4dfd0acc2e7a9eb038e6ee273db  memory-tagging-arm64.patch
-fdf8ba7badbd5b61d415ad9d49c66b6ef0a6a40ec95a47e13af48711fe1bd3a5574e987929a3c486cdd02c239863b8517e7f834cecd30f156479e43a9441a18e  musl-sandbox.patch
-85c2842a251a3f8aa59c701ca5f2ce2f5d49b5c7e4773d5387dc597447fb47c9d876f5fb308576686c9a8abc7e35cfc172b6cdfb9f5f1dc1509329e3590b38d8  musl-tid-caching.patch
-d2825aa9525fcbb53791f0ef2502c0f444a9d668f09db6ae4987b94dc4d0e6f1cf58a6e9e772ab11c896a469ca32242feb3ad9c9dbb20df9316cd74151ab0ec9  musl-v8-monotonic-pthread-cont_timedwait.patch
-ebd5cf28277853dc5e984961c370ab4a6331488ae7cff45083fea0470262f56486664bc9bd7947fdd796c8635e479633c4d08cfd89270c0310f3ec21cc6642d2  no-execinfo.patch
-f0bf97a80e663041e33cb0468fd8c47c5f351d6de61059ce1f359a813c40db8e247eaef294c3f562c0a8204e4f1992a918f1d879b1da9891027500e21f482b79  no-glibc-version.patch
-10ae0f74a4c1db899b571508100af63e5af8d0f7c41a37fc9b7987cbf9f27f4c55894c02d6820957d7522a528929059f562f96c2f05fd6509f60c6c71d9d8256  no-mallinfo.patch
-a5aa82c30402773903db1d3876208132fdef175f56ebc0ce1ee4c104a98d498d709c5565c4381736c04c238203b3c8a9cd7a5b5e69876f6afb65d7fc48df23d0  no-res-ninit-nclose.patch
-2c0d7239728d98c0564ad7b81d6d243e58e56de58a21357fa30c39e333fc29c1aa98529c6e1b6fa7694169b513391ca27fa542f69b483bbde644cc2ed739bbdd  no-stat-redefine.patch
-5e9f6279698195467e3b506cea9be0d97ec2d970672b1b12d3d7880eec4f6f53b8f92942dc3fc6738b02889382534ce0f4310a1f94b33e21f8fbc70b85640b81  nullptr-t.patch
-ad563e29ac7d83c203f5af966c4ed3ebdeb5c997835a45fb28ecde08dde5231d0a775fb413f44867af28724504c42316b27d5a6aaa602057642dcbdf7ec20a7a  partition-atfork.patch
-65aa0c7c9909a803e59b88ecb6d79c4db491079f3324f7bd02ee485a7bb7a81674b8f0591dab766c97070a401116db7f629fee36af7416a0fefc38f4ae0ad13d  py3.11.patch
-083ed731e0a3788f2cb04a3035022fbb3e4db99eba01516ea233ea3229f7d898943d8115463a48655ac83eb3cc7a48aceb8bf17c68930a5a1d83b1af95dfade8  quiche-arena-size.patch
-128ec0fd14349e065c8bb0910d53cbea7423182a06e06f7b7765f3cba1e5ba5e7a8bccbcdab079335b5235abb7bf0d46dee21ecc8c221be7e1c5c6d9795f958e  roll-src-third_party-ffmpeg-102.patch
-1063e68f477645914ddf5641eabdd3eaf744e569635d645ea860c3546f67a7ef91eded99331378ee75071b67ecfe9bd4be307bd3da7c7ad93509e2bd634d1ec3  roll-src-third_party-ffmpeg-106.patch
-3cf36b269e9fcfa74975d267bbf31bef68b533a51672e5ed81ae511a70f28a45206168af370961a3dab5695ddaff41cb8839c8c2fa53f22a9f3c88d207cb2996  scoped-file-no-close.patch
-f2f7673f9e793dfbf4456ff8c2be785ea551c36bd512572245d04bf44da08b0133e98d85a1ffd51158009754c83121cad48d755cbc153735df2d2e73233856c0  temp-failure-retry.patch
-1d4e8c6e65205e6b72af47b9a2fa6f96aaada9b7d5a74f4e11a345a885df3078b523d02aaf8e9dac3aa30d72bbbd07cd6dc7edcf44fb9ae57a7f81251c398f65  wtf-stacksize.patch
-905565c10f5e5600e7d4db965c892cc45009a258e9995da958974d838ace469e1db1019195307e8807860d5b55ba6bfeea478b1f39a9b99e82c619b2816a1a22  icon.patch
-e05180199ee1d559e4e577cedd3e589844ecf40d98a86321bf1bea5607b02eeb5feb486deddae40e1005b644550331f6b8500177aa7e79bcb3750d3c1ceb76c3  python-jinja-3.10.patch
-26a8e4040e69f335a7104f42d012b9d933a40985b33a7be02add27a801c097c5a2be4c6e69faf9175ce8945210ae4c5592ecad2123ccff2beee5473194a765e3  system-node.patch
-71571b15cf8bd6259b7fd22bea0e46b64890f3db776365de33fe539f26ce9ef99459e05c3dde9434c3657225bc67160abc915acd93033cb487c770c6a2a5975f  vector-const.patch
-2aa340854316f1284217c0ca17cbf44953684ad6c7da90815117df30928612eb9fb9ffb734b948dfc309cd25d1a67cd57f77aac2d052a3dd9aca07a3a58cbb30  webpack-hash.patch
-08460b15037511a4e5469ceac6ae5dd4db4c8cb87c129aaaf40ba58b16c60b8a307ffdd85805efead235758abed09ec31db1ef4cf9159f7b9acdcee3031bc96c  default.conf
-191559fc7aa1ea0353c6fb0cc321ee1d5803a0e44848c8be941cfab96277b0de6a59962d373e2a2a1686c8f9be2bcf2d2f33706759a339a959e297d3f7fda463  electron.desktop
-03750694e5e0b66f084c6e43135e60be15abb059e23486346ee4352dcc236984f2f35467b47f2b2ad46c98c22091cc2b978de8e73680febadba169d960f13f9f  electron-launcher.sh
-"
--- a/backports/electron/angle-wayland-include.patch
+++ b/backports/electron/angle-wayland-include.patch
@ -1,39 +0,0 @@
-Patch-Source: https://github.com/archlinux/svntogit-packages/blob/a353833a5a731abfaa465b658f61894a516aa49b/trunk/angle-wayland-include-protocol.patch
-diff -upr third_party/angle.orig/BUILD.gn third_party/angle/BUILD.gn
--- a/third_party/angle.orig/BUILD.gn	2022-08-17 19:38:11.000000000 +0000
-+++ b/third_party/angle/BUILD.gn	2022-08-18 11:04:09.061751111 +0000
-@@ -489,6 +489,12 @@ config("angle_vulkan_wayland_config") {
-   if (angle_enable_vulkan && angle_use_wayland &&
-       defined(vulkan_wayland_include_dirs)) {
-     include_dirs = vulkan_wayland_include_dirs
-+  } else if (angle_enable_vulkan && angle_use_wayland) {
-+    include_dirs = [
-+      "$wayland_gn_dir/src/src",
-+      "$wayland_gn_dir/include/src",
-+      "$wayland_gn_dir/include/protocol",
-+    ]
-   }
- }
- 
-@@ -1073,6 +1079,7 @@ if (angle_use_wayland) {
-     include_dirs = [
-       "$wayland_dir/egl",
-       "$wayland_dir/src",
-+      "$wayland_gn_dir/include/protocol",
-     ]
-   }
- 
-diff -upr third_party/angle.orig/src/third_party/volk/BUILD.gn third_party/angle/src/third_party/volk/BUILD.gn
--- a/third_party/angle.orig/src/third_party/volk/BUILD.gn	2022-08-17 19:38:12.000000000 +0000
-+++ b/third_party/angle/src/third_party/volk/BUILD.gn	2022-08-18 11:04:36.499828006 +0000
-@@ -21,6 +21,9 @@ source_set("volk") {
-   configs += [ "$angle_root:angle_no_cfi_icall" ]
-   public_deps = [ "$angle_vulkan_headers_dir:vulkan_headers" ]
-   if (angle_use_wayland) {
-    include_dirs = [ "$wayland_dir/src" ]
-+    include_dirs = [
-+      "$wayland_dir/src",
-+      "$wayland_gn_dir/include/protocol",
-+    ]
-   }
- }
--- a/backports/electron/canonicalize-file-name.patch
+++ b/backports/electron/canonicalize-file-name.patch
@ -1,13 +0,0 @@
-no canonicalize_file_name on musl. funnily, the file using this says this is
-not portable, but avoids the nonportability of realpath(path, NULL);
--- a/third_party/nasm/config/config-linux.h
-+++ b/third_party/nasm/config/config-linux.h
-@@ -139,7 +139,7 @@
- #define HAVE_ACCESS 1
- 
- /* Define to 1 if you have the `canonicalize_file_name' function. */
-#define HAVE_CANONICALIZE_FILE_NAME 1
-+/* #define HAVE_CANONICALIZE_FILE_NAME 1 */
- 
- /* Define to 1 if you have the `cpu_to_le16' intrinsic function. */
- /* #undef HAVE_CPU_TO_LE16 */
--- a/backports/electron/chromium-VirtualCursor-standard-layout.patch
+++ b/backports/electron/chromium-VirtualCursor-standard-layout.patch
@ -1,217 +0,0 @@
-needed for libstdc++11 + clang only
-diff --git a/sql/recover_module/btree.cc b/sql/recover_module/btree.cc
-index 9ecaafe..839318a 100644
--- a/sql/recover_module/btree.cc
-+++ b/sql/recover_module/btree.cc
-@@ -135,16 +135,25 @@
-               "Move the destructor to the .cc file if it's non-trival");
- #endif  // !DCHECK_IS_ON()
- 
-LeafPageDecoder::LeafPageDecoder(DatabasePageReader* db_reader) noexcept
-    : page_id_(db_reader->page_id()),
-      db_reader_(db_reader),
-      cell_count_(ComputeCellCount(db_reader)),
-      next_read_index_(0),
-      last_record_size_(0) {
-+void LeafPageDecoder::Initialize(DatabasePageReader* db_reader) {
-+  DCHECK(db_reader);
-   DCHECK(IsOnValidPage(db_reader));
-+  page_id_ = db_reader->page_id();
-+  db_reader_ = db_reader;
-+  cell_count_ = ComputeCellCount(db_reader);
-+  next_read_index_ = 0;
-+  last_record_size_ = 0;
-   DCHECK(DatabasePageReader::IsValidPageId(page_id_));
- }
- 
-+void LeafPageDecoder::Reset() {
-+  db_reader_ = nullptr;
-+  page_id_ = 0;
-+  cell_count_ = 0;
-+  next_read_index_ = 0;
-+  last_record_size_ = 0;
-+}
-+
- bool LeafPageDecoder::TryAdvance() {
-   DCHECK_CALLED_ON_VALID_SEQUENCE(sequence_checker_);
-   DCHECK(CanAdvance());
-diff --git a/sql/recover_module/btree.h b/sql/recover_module/btree.h
-index d76d076..33114b0 100644
--- a/sql/recover_module/btree.h
-+++ b/sql/recover_module/btree.h
-@@ -102,7 +102,7 @@
-   //
-   // |db_reader| must have been used to read an inner page of a table B-tree.
-   // |db_reader| must outlive this instance.
-  explicit LeafPageDecoder(DatabasePageReader* db_reader) noexcept;
-+  explicit LeafPageDecoder() noexcept = default;
-   ~LeafPageDecoder() noexcept = default;
- 
-   LeafPageDecoder(const LeafPageDecoder&) = delete;
-@@ -150,6 +150,15 @@
-   // read as long as CanAdvance() returns true.
-   bool TryAdvance();
- 
-+  // Initialize with DatabasePageReader
-+  void Initialize(DatabasePageReader* db_reader);
-+
-+  // Reset internal DatabasePageReader
-+  void Reset();
-+
-+  // True if DatabasePageReader is valid
-+  bool IsValid() { return (db_reader_ != nullptr); }
-+
-   // True if the given reader may point to an inner page in a table B-tree.
-   //
-   // The last ReadPage() call on |db_reader| must have succeeded.
-@@ -163,14 +172,14 @@
-   static int ComputeCellCount(DatabasePageReader* db_reader);
- 
-   // The number of the B-tree page this reader is reading.
-  const int64_t page_id_;
-+  int64_t page_id_;
-   // Used to read the tree page.
-   //
-   // Raw pointer usage is acceptable because this instance's owner is expected
-   // to ensure that the DatabasePageReader outlives this.
-  DatabasePageReader* const db_reader_;
-+  DatabasePageReader* db_reader_;
-   // Caches the ComputeCellCount() value for this reader's page.
-  const int cell_count_ = ComputeCellCount(db_reader_);
-+  int cell_count_;
- 
-   // The reader's cursor state.
-   //
-diff --git a/sql/recover_module/cursor.cc b/sql/recover_module/cursor.cc
-index 0029ff9..42548bc 100644
--- a/sql/recover_module/cursor.cc
-+++ b/sql/recover_module/cursor.cc
-@@ -26,7 +26,7 @@
- int VirtualCursor::First() {
-   DCHECK_CALLED_ON_VALID_SEQUENCE(sequence_checker_);
-   inner_decoders_.clear();
-  leaf_decoder_ = nullptr;
-+  leaf_decoder_.Reset();
- 
-   AppendPageDecoder(table_->root_page_id());
-   return Next();
-@@ -36,18 +36,18 @@
-   DCHECK_CALLED_ON_VALID_SEQUENCE(sequence_checker_);
-   record_reader_.Reset();
- 
-  while (!inner_decoders_.empty() || leaf_decoder_.get()) {
-    if (leaf_decoder_.get()) {
-      if (!leaf_decoder_->CanAdvance()) {
-+  while (!inner_decoders_.empty() || leaf_decoder_.IsValid()) {
-+    if (leaf_decoder_.IsValid()) {
-+      if (!leaf_decoder_.CanAdvance()) {
-         // The leaf has been exhausted. Remove it from the DFS stack.
-        leaf_decoder_ = nullptr;
-+        leaf_decoder_.Reset();
-         continue;
-       }
-      if (!leaf_decoder_->TryAdvance())
-+      if (!leaf_decoder_.TryAdvance())
-         continue;
- 
-      if (!payload_reader_.Initialize(leaf_decoder_->last_record_size(),
-                                      leaf_decoder_->last_record_offset())) {
-+      if (!payload_reader_.Initialize(leaf_decoder_.last_record_size(),
-+                                      leaf_decoder_.last_record_offset())) {
-         continue;
-       }
-       if (!record_reader_.Initialize())
-@@ -99,13 +99,13 @@
- int64_t VirtualCursor::RowId() {
-   DCHECK_CALLED_ON_VALID_SEQUENCE(sequence_checker_);
-   DCHECK(record_reader_.IsInitialized());
-  DCHECK(leaf_decoder_.get());
-  return leaf_decoder_->last_record_rowid();
-+  DCHECK(leaf_decoder_.IsValid());
-+  return leaf_decoder_.last_record_rowid();
- }
- 
- void VirtualCursor::AppendPageDecoder(int page_id) {
-   DCHECK_CALLED_ON_VALID_SEQUENCE(sequence_checker_);
-  DCHECK(leaf_decoder_.get() == nullptr)
-+  DCHECK(!leaf_decoder_.IsValid())
-       << __func__
-       << " must only be called when the current path has no leaf decoder";
- 
-@@ -113,7 +113,7 @@
-     return;
- 
-   if (LeafPageDecoder::IsOnValidPage(&db_reader_)) {
-    leaf_decoder_ = std::make_unique<LeafPageDecoder>(&db_reader_);
-+    leaf_decoder_.Initialize(&db_reader_);
-     return;
-   }
- 
-diff --git a/sql/recover_module/cursor.h b/sql/recover_module/cursor.h
-index afcd690..b15c31d 100644
--- a/sql/recover_module/cursor.h
-+++ b/sql/recover_module/cursor.h
-@@ -129,7 +129,7 @@
-   std::vector<std::unique_ptr<InnerPageDecoder>> inner_decoders_;
- 
-   // Decodes the leaf page containing records.
-  std::unique_ptr<LeafPageDecoder> leaf_decoder_;
-+  LeafPageDecoder leaf_decoder_;
- 
-   SEQUENCE_CHECKER(sequence_checker_);
- };
-diff --git a/sql/recover_module/pager.cc b/sql/recover_module/pager.cc
-index 58e75de..5fe9620 100644
--- a/sql/recover_module/pager.cc
-+++ b/sql/recover_module/pager.cc
-@@ -23,8 +23,7 @@
-               "ints are not appropriate for representing page IDs");
- 
- DatabasePageReader::DatabasePageReader(VirtualTable* table)
-    : page_data_(std::make_unique<uint8_t[]>(table->page_size())),
-      table_(table) {
-+    : page_data_(), table_(table) {
-   DCHECK(table != nullptr);
-   DCHECK(IsValidPageSize(table->page_size()));
- }
-@@ -57,8 +56,8 @@
-                     std::numeric_limits<int64_t>::max(),
-                 "The |read_offset| computation above may overflow");
- 
-  int sqlite_status =
-      RawRead(sqlite_file, read_size, read_offset, page_data_.get());
-+  int sqlite_status = RawRead(sqlite_file, read_size, read_offset,
-+                              const_cast<uint8_t*>(page_data_.data()));
- 
-   // |page_id_| needs to be set to kInvalidPageId if the read failed.
-   // Otherwise, future ReadPage() calls with the previous |page_id_| value
-diff --git a/sql/recover_module/pager.h b/sql/recover_module/pager.h
-index 0e388ddc..99314e3 100644
--- a/sql/recover_module/pager.h
-+++ b/sql/recover_module/pager.h
-@@ -5,6 +5,7 @@
- #ifndef SQL_RECOVER_MODULE_PAGER_H_
- #define SQL_RECOVER_MODULE_PAGER_H_
- 
-+#include <array>
- #include <cstdint>
- #include <memory>
- 
-@@ -70,7 +71,7 @@
-     DCHECK_CALLED_ON_VALID_SEQUENCE(sequence_checker_);
-     DCHECK_NE(page_id_, kInvalidPageId)
-         << "Successful ReadPage() required before accessing pager state";
-    return page_data_.get();
-+    return page_data_.data();
-   }
- 
-   // The number of bytes in the page read by the last ReadPage() call.
-@@ -137,7 +138,7 @@
-   int page_id_ = kInvalidPageId;
-   // Stores the bytes of the last page successfully read by ReadPage().
-   // The content is undefined if the last call to ReadPage() did not succeed.
-  const std::unique_ptr<uint8_t[]> page_data_;
-+  const std::array<uint8_t, kMaxPageSize> page_data_;
-   // Raw pointer usage is acceptable because this instance's owner is expected
-   // to ensure that the VirtualTable outlives this.
-   VirtualTable* const table_;
--- a/backports/electron/chromium-revert-drop-of-system-java.patch
+++ b/backports/electron/chromium-revert-drop-of-system-java.patch
@ -1,15 +0,0 @@
-This was dropped for some reason in 6951c37cecd05979b232a39e5c10e6346a0f74ef
--- a/third_party/closure_compiler/compiler.py	2021-05-20 04:17:53.000000000 +0200
-+++ b/third_party/closure_compiler/compiler.py	2021-05-20 04:17:53.000000000 +0200
-@@ -13,8 +13,9 @@
- 
- 
- _CURRENT_DIR = os.path.join(os.path.dirname(__file__))
-_JAVA_PATH = os.path.join(_CURRENT_DIR, "..", "jdk", "current", "bin", "java")
-assert os.path.isfile(_JAVA_PATH), "java only allowed in android builds"
-+_JAVA_BIN = "java"
-+_JDK_PATH = os.path.join(_CURRENT_DIR, "..", "jdk", "current", "bin", "java")
-+_JAVA_PATH = _JDK_PATH if os.path.isfile(_JDK_PATH) else _JAVA_BIN
- 
- class Compiler(object):
-   """Runs the Closure compiler on given source files to typecheck them
--- a/backports/electron/chromium-use-alpine-target.patch
+++ b/backports/electron/chromium-use-alpine-target.patch
@ -1,13 +0,0 @@
--- a/build/config/compiler/BUILD.gn
-+++ b/build/config/compiler/BUILD.gn
-@@ -917,8 +917,8 @@
-     } else if (current_cpu == "arm64") {
-       if (is_clang && !is_android && !is_nacl && !is_fuchsia &&
-           !(is_chromeos_lacros && is_chromeos_device)) {
-        cflags += [ "--target=aarch64-linux-gnu" ]
-        ldflags += [ "--target=aarch64-linux-gnu" ]
-+        cflags += [ "--target=aarch64-alpine-linux-musl" ]
-+        ldflags += [ "--target=aarch64-alpine-linux-musl" ]
-       }
-       if (is_android) {
-         # Outline atomics crash on Exynos 9810. http://crbug.com/1272795
--- a/backports/electron/credentials-sys-types-header.patch
+++ b/backports/electron/credentials-sys-types-header.patch
@ -1,11 +0,0 @@
--- a/sandbox/linux/services/credentials.h
-+++ b/sandbox/linux/services/credentials.h
-@@ -14,6 +14,8 @@
- #include <string>
- #include <vector>
- 
-+#include <sys/types.h>
-+
- #include "sandbox/linux/system_headers/capability.h"
- #include "sandbox/sandbox_export.h"
- 
--- a/backports/electron/default-pthread-stacksize.patch
+++ b/backports/electron/default-pthread-stacksize.patch
@ -1,45 +0,0 @@
--- a/base/threading/platform_thread_linux.cc
-+++ b/base/threading/platform_thread_linux.cc
-@@ -186,7 +186,8 @@
- 
- size_t GetDefaultThreadStackSize(const pthread_attr_t& attributes) {
- #if !defined(THREAD_SANITIZER)
-  return 0;
-+  // use 2mb to avoid running out of space. This is what android uses
-+  return 2 * (1 << 20);
- #else
-   // ThreadSanitizer bloats the stack heavily. Evidence has been that the
-   // default stack size isn't enough for some browser tests.
--- a/base/threading/platform_thread_unittest.cc
-+++ b/base/threading/platform_thread_unittest.cc
-@@ -420,7 +420,7 @@
-     ((BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)) &&                \
-      !defined(THREAD_SANITIZER)) ||                                    \
-     (BUILDFLAG(IS_ANDROID) && !defined(ADDRESS_SANITIZER))
-  EXPECT_EQ(0u, stack_size);
-+  EXPECT_EQ(2u << 20, stack_size);
- #else
-   EXPECT_GT(stack_size, 0u);
-   EXPECT_LT(stack_size, 20u * (1 << 20));
--- a/chrome/browser/shutdown_signal_handlers_posix.cc
-+++ b/chrome/browser/shutdown_signal_handlers_posix.cc
-@@ -187,11 +187,19 @@
-   g_shutdown_pipe_read_fd = pipefd[0];
-   g_shutdown_pipe_write_fd = pipefd[1];
- #if !defined(ADDRESS_SANITIZER)
-+# if defined(__GLIBC__)
-   const size_t kShutdownDetectorThreadStackSize = PTHREAD_STACK_MIN * 2;
-+# else
-+  const size_t kShutdownDetectorThreadStackSize = PTHREAD_STACK_MIN * 2 * 8; // match up musls 2k PTHREAD_STACK_MIN with glibcs 16k
-+# endif
- #else
-+# if defined(__GLIBC__)
-   // ASan instrumentation bloats the stack frames, so we need to increase the
-   // stack size to avoid hitting the guard page.
-   const size_t kShutdownDetectorThreadStackSize = PTHREAD_STACK_MIN * 4;
-+# else
-+  const size_t kShutdownDetectorThreadStackSize = PTHREAD_STACK_MIN * 4 * 8; // match up musls 2k PTHREAD_STACK_MIN with glibcs 16k
-+# endif
- #endif
-   ShutdownDetector* detector = new ShutdownDetector(
-       g_shutdown_pipe_read_fd, std::move(shutdown_callback), task_runner);
--- a/backports/electron/default.conf
+++ b/backports/electron/default.conf
@ -1,5 +0,0 @@
-# Default settings for electron. This file is sourced by /bin/sh from
-# the electron launcher.
-
-# Options to pass to electron.
-ELECTRON_FLAGS="--ozone-platform-hint=auto"
--- a/backports/electron/dns-resolver.patch
+++ b/backports/electron/dns-resolver.patch
@ -1,36 +0,0 @@
--- a/net/dns/host_resolver_manager.cc
-+++ b/net/dns/host_resolver_manager.cc
-@@ -3014,8 +3014,7 @@
-   NetworkChangeNotifier::AddConnectionTypeObserver(this);
-   if (system_dns_config_notifier_)
-     system_dns_config_notifier_->AddObserver(this);
-#if BUILDFLAG(IS_POSIX) && !BUILDFLAG(IS_APPLE) && !BUILDFLAG(IS_OPENBSD) && \
-    !BUILDFLAG(IS_ANDROID)
-+#if defined(__GLIBC__)
-   EnsureDnsReloaderInit();
- #endif
- 
--- a/net/dns/dns_reloader.cc
-+++ b/net/dns/dns_reloader.cc
-@@ -6,8 +6,7 @@
- 
- #include "build/build_config.h"
- 
-#if BUILDFLAG(IS_POSIX) && !BUILDFLAG(IS_APPLE) && !BUILDFLAG(IS_OPENBSD) && \
-    !BUILDFLAG(IS_ANDROID) && !BUILDFLAG(IS_FUCHSIA)
-+#if defined(__GLIBC__)
- 
- #include <resolv.h>
- 
--- a/net/dns/host_resolver_proc.cc
-+++ b/net/dns/host_resolver_proc.cc
-@@ -176,8 +176,7 @@
-   base::ScopedBlockingCall scoped_blocking_call(FROM_HERE,
-                                                 base::BlockingType::WILL_BLOCK);
- 
-#if BUILDFLAG(IS_POSIX) && \
-    !(BUILDFLAG(IS_APPLE) || BUILDFLAG(IS_OPENBSD) || BUILDFLAG(IS_ANDROID))
-+#if defined(__GLIBC__)
-   DnsReloaderMaybeReload();
- #endif
-   absl::optional<AddressInfo> ai;
--- a/backports/electron/electron-launcher.sh
+++ b/backports/electron/electron-launcher.sh
@ -1,14 +0,0 @@
-#!/bin/sh
-
-# Allow the user to override command-line flags
-# This is based on Debian's chromium-browser package, and is intended
-# to be consistent with Debian.
-for f in /etc/electron/*.conf; do
-    [ -f ${f} ] && . "${f}"
-done
-
-# Prefer user defined ELECTRON_USER_FLAGS (from env) over system
-# default ELECTRON_FLAGS (from /etc/electron/default.conf).
-ELECTRON_FLAGS=${ELECTRON_USER_FLAGS:-"$ELECTRON_FLAGS"}
-
-exec "/usr/lib/electron/electron" "$@" ${ELECTRON_FLAGS}
--- a/backports/electron/electron.desktop
+++ b/backports/electron/electron.desktop
@ -1,8 +0,0 @@
-[Desktop Entry]
-Type=Application
-Name=electron21
-Icon=electron
-Exec=electron %u
-Categories=Development;GTK;
-StartupNotify=true
-StartupWMClass=electron
--- a/backports/electron/fix-crashpad.patch
+++ b/backports/electron/fix-crashpad.patch
@ -1,31 +0,0 @@
--- a/third_party/crashpad/crashpad/client/BUILD.gn
-+++ b/third_party/crashpad/crashpad/client/BUILD.gn
-@@ -81,6 +81,7 @@
-   deps = [
-     ":common",
-     "$mini_chromium_source_parent:chromeos_buildflags",
-+    "../util",
-   ]
- 
-   if (crashpad_is_win) {
--- a/third_party/crashpad/crashpad/util/linux/ptracer.cc
-+++ b/third_party/crashpad/crashpad/util/linux/ptracer.cc
-@@ -26,6 +26,7 @@
- 
- #if defined(ARCH_CPU_X86_FAMILY)
- #include <asm/ldt.h>
-+#include <asm/ptrace-abi.h>
- #endif
- 
- namespace crashpad {
--- a/third_party/crashpad/crashpad/util/linux/thread_info.h
-+++ b/third_party/crashpad/crashpad/util/linux/thread_info.h
-@@ -273,7 +273,7 @@ union FloatContext {
-                 "Size mismatch");
- #elif defined(ARCH_CPU_ARMEL)
-   static_assert(sizeof(f32_t::fpregs) == sizeof(user_fpregs), "Size mismatch");
-#if !defined(__GLIBC__)
-+#if defined(OS_ANDROID)
-   static_assert(sizeof(f32_t::vfp) == sizeof(user_vfp), "Size mismatch");
- #endif
- #elif defined(ARCH_CPU_ARM64)
--- a/backports/electron/fix-missing-cstdint-include-musl.patch
+++ b/backports/electron/fix-missing-cstdint-include-musl.patch
@ -1,11 +0,0 @@
-Patch-Source: https://github.com/void-linux/void-packages/blob/378db3cf5087877588aebaaa8ca3c9d94dfb54e0/srcpkgs/chromium/patches/fix-missing-cstdint-include-musl.patch
--- a/net/third_party/quiche/src/quiche/http2/adapter/window_manager.h
-+++ b/net/third_party/quiche/src/quiche/http2/adapter/window_manager.h
-@@ -3,6 +3,7 @@
- 
- #include <stddef.h>
- 
-+#include <cstdint>
- #include <functional>
- 
- #include "common/platform/api/quiche_export.h"
--- a/backports/electron/fix-narrowing-cast.patch
+++ b/backports/electron/fix-narrowing-cast.patch
@ -1,44 +0,0 @@
--- a/base/files/file_util_linux.cc
-+++ b/base/files/file_util_linux.cc
-@@ -30,7 +30,7 @@
-     case EXT2_SUPER_MAGIC:  // Also ext3 and ext4
-     case MSDOS_SUPER_MAGIC:
-     case REISERFS_SUPER_MAGIC:
-    case static_cast<int>(BTRFS_SUPER_MAGIC):
-+    case BTRFS_SUPER_MAGIC:
-     case 0x5346544E:  // NTFS
-     case 0x58465342:  // XFS
-     case 0x3153464A:  // JFS
-@@ -40,14 +40,14 @@
-       *type = FILE_SYSTEM_NFS;
-       break;
-     case SMB_SUPER_MAGIC:
-    case static_cast<int>(0xFF534D42):  // CIFS
-+    case 0xFF534D42:  // CIFS
-       *type = FILE_SYSTEM_SMB;
-       break;
-     case CODA_SUPER_MAGIC:
-       *type = FILE_SYSTEM_CODA;
-       break;
-    case static_cast<int>(HUGETLBFS_MAGIC):
-    case static_cast<int>(RAMFS_MAGIC):
-+    case HUGETLBFS_MAGIC:
-+    case RAMFS_MAGIC:
-     case TMPFS_MAGIC:
-       *type = FILE_SYSTEM_MEMORY;
-       break;
--- a/base/system/sys_info_posix.cc
-+++ b/base/system/sys_info_posix.cc
-@@ -100,10 +100,10 @@
-   if (HANDLE_EINTR(statfs(path.value().c_str(), &stats)) != 0)
-     return false;
- 
-   switch (stats.f_type) {
-     case TMPFS_MAGIC:
-    case static_cast<int>(HUGETLBFS_MAGIC):
-    case static_cast<int>(RAMFS_MAGIC):
-+    case HUGETLBFS_MAGIC:
-+    case RAMFS_MAGIC:
-       return true;
-   }
-   return false;
--- a/backports/electron/gdbinit.patch
+++ b/backports/electron/gdbinit.patch
@ -1,21 +0,0 @@
--- a/tools/gdb/gdbinit
-+++ b/tools/gdb/gdbinit
-@@ -50,17 +50,7 @@
- 
- def set_src_dir(compile_dir):
-   global src_dir
-  git = subprocess.Popen(
-      ['git', '-C', compile_dir, 'rev-parse', '--show-toplevel'],
-      stdout=subprocess.PIPE,
-      stderr=subprocess.PIPE)
-  src_dir, _ = git.communicate()
-  if git.returncode:
-    return
-  if isinstance(src_dir, str):
-    src_dir = src_dir.rstrip()
-  else:
-    src_dir = src_dir.decode('utf-8').rstrip()
-+  src_dir = os.path.abspath(os.getcwd())
- 
-   load_libcxx_pretty_printers(src_dir)
- 
--- a/backports/electron/icon.patch
+++ b/backports/electron/icon.patch
@ -1,21 +0,0 @@
--- a/electron/default_app/default_app.ts
-+++ b/electron/default_app/default_app.ts
-@@ -60,7 +60,7 @@
-   };
- 
-   if (process.platform === 'linux') {
-    options.icon = path.join(__dirname, 'icon.png');
-+    options.icon = '/usr/share/icons/hicolor/1024x1024/apps/electron.png';
-   }
- 
-   mainWindow = new BrowserWindow(options);
--- a/electron/filenames.gni
-+++ b/electron/filenames.gni
-@@ -6,7 +6,6 @@
-   ]
- 
-   default_app_static_sources = [
-    "default_app/icon.png",
-     "default_app/index.html",
-     "default_app/package.json",
-     "default_app/styles.css",
--- a/backports/electron/jsoncpp.patch
+++ b/backports/electron/jsoncpp.patch
@ -1,39 +0,0 @@
-Patch-Source: https://github.com/archlinux/svntogit-packages/blob/bf2401407df5bcc938382eb03748fbef41e41c89/trunk/unbundle-jsoncpp-avoid-CFI-faults-with-is_cfi-true.patch
-From ed8d931e35f81d8566835a579caf7d61368f85b7 Mon Sep 17 00:00:00 2001
-From: Evangelos Foutras <evangelos@foutrelis.com>
-Date: Tue, 27 Sep 2022 22:20:41 +0000
-Subject: [PATCH] unbundle/jsoncpp: avoid CFI faults with is_cfi=true
-
-Ensure jsoncpp symbols have public visibility and are thus excluded from
-CFI checks and whole-program optimization. This is achieved by defining
-JSON_DLL_BUILD which in turn causes json/config.h to define JSON_API as
-__attribute__((visibility("default"))). The latter macro is used to tag
-jsoncpp classes and namespace functions throughout jsoncpp's headers.
-
-BUG=1365218
-
-Change-Id: I56277737b7d9ecaeb5e17c8d21a2e55f3d5d5bc9
-Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/3919652
-Reviewed-by: Thomas Anderson <thomasanderson@chromium.org>
-Commit-Queue: Thomas Anderson <thomasanderson@chromium.org>
-Cr-Commit-Position: refs/heads/main@{#1052077}
---
- build/linux/unbundle/jsoncpp.gn | 5 +++++
- 1 file changed, 5 insertions(+)
-
-diff --git a/build/linux/unbundle/jsoncpp.gn b/build/linux/unbundle/jsoncpp.gn
-index 544f9d13c9..e84a0ef27a 100644
--- a/build/linux/unbundle/jsoncpp.gn
-+++ b/build/linux/unbundle/jsoncpp.gn
-@@ -3,6 +3,11 @@ import("//build/shim_headers.gni")
- 
- pkg_config("jsoncpp_config") {
-   packages = [ "jsoncpp" ]
-+
-+  # Defining JSON_DLL_BUILD applies public visibility to jsoncpp classes
-+  # thus deactivating CFI checks for them. This avoids CFI violations in
-+  # virtual calls to system jsoncpp library (https://crbug.com/1365218).
-+  defines = [ "JSON_DLL_BUILD" ]
- }
- 
- shim_headers("jsoncpp_shim") {
--- a/backports/electron/memory-tagging-arm64.patch
+++ b/backports/electron/memory-tagging-arm64.patch
@ -1,18 +0,0 @@
--- a/base/allocator/partition_allocator/tagging.cc
-+++ b/base/allocator/partition_allocator/tagging.cc
-@@ -19,15 +19,6 @@
- #define PR_GET_TAGGED_ADDR_CTRL 56
- #define PR_TAGGED_ADDR_ENABLE (1UL << 0)
- 
-#if BUILDFLAG(IS_LINUX)
-#include <linux/version.h>
-
-// Linux headers already provide these since v5.10.
-#if LINUX_VERSION_CODE >= KERNEL_VERSION(5, 10, 0)
-#define HAS_PR_MTE_MACROS
-#endif
-#endif
-
- #ifndef HAS_PR_MTE_MACROS
- #define PR_MTE_TCF_SHIFT 1
- #define PR_MTE_TCF_NONE (0UL << PR_MTE_TCF_SHIFT)
--- a/backports/electron/musl-sandbox.patch
+++ b/backports/electron/musl-sandbox.patch
@ -1,107 +0,0 @@
-diff --git a/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc ./sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc
-index ff5a1c0..da56b9b 100644
--- a/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc
-+++ b/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc
-@@ -139,21 +139,11 @@ namespace sandbox {
- // present (as in newer versions of posix_spawn).
- ResultExpr RestrictCloneToThreadsAndEPERMFork() {
-   const Arg<unsigned long> flags(0);
-
-  // TODO(mdempsky): Extend DSL to support (flags & ~mask1) == mask2.
-  const uint64_t kAndroidCloneMask = CLONE_VM | CLONE_FS | CLONE_FILES |
-                                     CLONE_SIGHAND | CLONE_THREAD |
-                                     CLONE_SYSVSEM;
-  const uint64_t kObsoleteAndroidCloneMask = kAndroidCloneMask | CLONE_DETACHED;
-
-  const uint64_t kGlibcPthreadFlags =
-      CLONE_VM | CLONE_FS | CLONE_FILES | CLONE_SIGHAND | CLONE_THREAD |
-      CLONE_SYSVSEM | CLONE_SETTLS | CLONE_PARENT_SETTID | CLONE_CHILD_CLEARTID;
-  const BoolExpr glibc_test = flags == kGlibcPthreadFlags;
-
-  const BoolExpr android_test =
-      AnyOf(flags == kAndroidCloneMask, flags == kObsoleteAndroidCloneMask,
-            flags == kGlibcPthreadFlags);
-+  const int required = CLONE_VM | CLONE_FS | CLONE_FILES | CLONE_SIGHAND |
-+                       CLONE_THREAD | CLONE_SYSVSEM;
-+  const int safe = CLONE_SETTLS | CLONE_PARENT_SETTID | CLONE_CHILD_CLEARTID |
-+                   CLONE_DETACHED;
-+  const BoolExpr thread_clone_ok = (flags&~safe)==required;
- 
-   // The following two flags are the two important flags in any vfork-emulating
-   // clone call. EPERM any clone call that contains both of them.
-@@ -163,7 +153,7 @@ ResultExpr RestrictCloneToThreadsAndEPERMFork() {
-       AnyOf((flags & (CLONE_VM | CLONE_THREAD)) == 0,
-             (flags & kImportantCloneVforkFlags) == kImportantCloneVforkFlags);
- 
-  return If(IsAndroid() ? android_test : glibc_test, Allow())
-+  return If(thread_clone_ok, Allow())
-       .ElseIf(is_fork_or_clone_vfork, Error(EPERM))
-       .Else(CrashSIGSYSClone());
- }
-diff --git a/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc ./sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
-index d9d1882..0567557 100644
--- a/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
-+++ b/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
-@@ -392,6 +392,7 @@ bool SyscallSets::IsAllowedProcessStartOrDeath(int sysno) {
- #if defined(__i386__)
-     case __NR_waitpid:
- #endif
-+    case __NR_set_tid_address:
-       return true;
-     case __NR_clone:  // Should be parameter-restricted.
-     case __NR_setns:  // Privileged.
-@@ -404,7 +405,6 @@ bool SyscallSets::IsAllowedProcessStartOrDeath(int sysno) {
- #if defined(__i386__) || defined(__x86_64__) || defined(__mips__)
-     case __NR_set_thread_area:
- #endif
-    case __NR_set_tid_address:
-     case __NR_unshare:
- #if !defined(__mips__) && !defined(__aarch64__)
-     case __NR_vfork:
-@@ -514,6 +514,8 @@ bool SyscallSets::IsAllowedAddressSpaceAccess(int sysno) {
-     case __NR_mlock:
-     case __NR_munlock:
-     case __NR_munmap:
-+    case __NR_mremap:
-+    case __NR_membarrier:
-       return true;
-     case __NR_madvise:
-     case __NR_mincore:
-@@ -531,7 +533,6 @@ bool SyscallSets::IsAllowedAddressSpaceAccess(int sysno) {
-     case __NR_modify_ldt:
- #endif
-     case __NR_mprotect:
-    case __NR_mremap:
-     case __NR_msync:
-     case __NR_munlockall:
-     case __NR_readahead:
-diff --git a/sandbox/linux/system_headers/linux_syscalls.h ./sandbox/linux/system_headers/linux_syscalls.h
-index 2b78a0c..b6fedb5 100644
--- a/sandbox/linux/system_headers/linux_syscalls.h
-+++ b/sandbox/linux/system_headers/linux_syscalls.h
-@@ -10,6 +10,7 @@
- #define SANDBOX_LINUX_SYSTEM_HEADERS_LINUX_SYSCALLS_H_
- 
- #include "build/build_config.h"
-+#include <sys/syscall.h>
- 
- #if defined(__x86_64__)
- #include "sandbox/linux/system_headers/x86_64_linux_syscalls.h"
-diff --git a/services/service_manager/sandbox/linux/bpf_renderer_policy_linux.cc ./services/service_manager/sandbox/linux/bpf_renderer_policy_linux.cc
-index a85c0ea..715aa1e 100644
--- a/sandbox/policy/linux/bpf_renderer_policy_linux.cc
-+++ b/sandbox/policy/linux/bpf_renderer_policy_linux.cc
-@@ -102,11 +102,11 @@
- #if defined(__arm__) || defined(__aarch64__)
-     case __NR_getcpu:
- #endif
-      return Allow();
-    case __NR_sched_getaffinity:
-     case __NR_sched_getparam:
-     case __NR_sched_getscheduler:
-     case __NR_sched_setscheduler:
-+      return Allow();
-+    case __NR_sched_getaffinity:
-       return RestrictSchedTarget(GetPolicyPid(), sysno);
-     case __NR_prlimit64:
-       // See crbug.com/662450 and setrlimit comment above.
--- a/backports/electron/musl-tid-caching.patch
+++ b/backports/electron/musl-tid-caching.patch
@ -1,81 +0,0 @@
--- a/sandbox/linux/services/namespace_sandbox.cc
-+++ b/sandbox/linux/services/namespace_sandbox.cc
-@@ -209,6 +209,70 @@
-   return base::LaunchProcess(argv, launch_options_copy);
- }
- 
-+#if defined(__aarch64__)
-+#define TLS_ABOVE_TP
-+#endif
-+
-+struct musl_pthread
-+{
-+  /* Part 1 -- these fields may be external or
-+  * internal (accessed via asm) ABI. Do not change. */
-+  struct pthread *self;
-+#ifndef TLS_ABOVE_TP
-+  uintptr_t *dtv;
-+#endif
-+  struct pthread *prev, *next; /* non-ABI */
-+  uintptr_t sysinfo;
-+#ifndef TLS_ABOVE_TP
-+#ifdef CANARY_PAD
-+  uintptr_t canary_pad;
-+#endif
-+  uintptr_t canary;
-+#endif
-+
-+/* Part 2 -- implementation details, non-ABI. */
-+  int tid;
-+  int errno_val;
-+  volatile int detach_state;
-+  volatile int cancel;
-+  volatile unsigned char canceldisable, cancelasync;
-+  unsigned char tsd_used:1;
-+  unsigned char dlerror_flag:1;
-+  unsigned char *map_base;
-+  size_t map_size;
-+  void *stack;
-+  size_t stack_size;
-+  size_t guard_size;
-+  void *result;
-+  struct __ptcb *cancelbuf;
-+  void **tsd;
-+  struct {
-+    volatile void *volatile head;
-+    long off;
-+    volatile void *volatile pending;
-+  } robust_list;
-+  int h_errno_val;
-+  volatile int timer_id;
-+  locale_t locale;
-+  volatile int killlock[1];
-+  char *dlerror_buf;
-+  void *stdio_locks;
-+
-+  /* Part 3 -- the positions of these fields relative to
-+  * the end of the structure is external and internal ABI. */
-+#ifdef TLS_ABOVE_TP
-+  uintptr_t canary;
-+  uintptr_t *dtv;
-+#endif
-+};
-+
-+void MaybeUpdateMuslTidCache()
-+{
-+  pid_t real_tid = sys_gettid();
-+  pid_t* cached_tid_location = &reinterpret_cast<struct musl_pthread*>(pthread_self())->tid;
-+  *cached_tid_location = real_tid;
-+}
-+
- // static
- pid_t NamespaceSandbox::ForkInNewPidNamespace(bool drop_capabilities_in_child) {
-   const pid_t pid =
-@@ -226,6 +290,7 @@
- #if defined(LIBC_GLIBC)
-     MaybeUpdateGlibcTidCache();
- #endif
-+    MaybeUpdateMuslTidCache();
-     return 0;
-   }
- 
--- a/backports/electron/musl-v8-monotonic-pthread-cont_timedwait.patch
+++ b/backports/electron/musl-v8-monotonic-pthread-cont_timedwait.patch
@ -1,22 +0,0 @@
-Use monotonic clock for pthread_cond_timedwait with musl too.
-
--- a/v8/src/base/platform/condition-variable.cc
-+++ b/v8/src/base/platform/condition-variable.cc
-@@ -16,7 +16,7 @@
- 
- ConditionVariable::ConditionVariable() {
- #if (V8_OS_FREEBSD || V8_OS_NETBSD || V8_OS_OPENBSD || \
-     (V8_OS_LINUX && V8_LIBC_GLIBC))
-+     V8_OS_LINUX)
-   // On Free/Net/OpenBSD and Linux with glibc we can change the time
-   // source for pthread_cond_timedwait() to use the monotonic clock.
-   pthread_condattr_t attr;
-@@ -92,7 +92,7 @@
-       &native_handle_, &mutex->native_handle(), &ts);
- #else
- #if (V8_OS_FREEBSD || V8_OS_NETBSD || V8_OS_OPENBSD || \
-     (V8_OS_LINUX && V8_LIBC_GLIBC))
-+     V8_OS_LINUX)
-   // On Free/Net/OpenBSD and Linux with glibc we can change the time
-   // source for pthread_cond_timedwait() to use the monotonic clock.
-   result = clock_gettime(CLOCK_MONOTONIC, &ts);
--- a/backports/electron/no-execinfo.patch
+++ b/backports/electron/no-execinfo.patch
@ -1,107 +0,0 @@
--- a/base/debug/stack_trace_posix.cc
-+++ b/base/debug/stack_trace_posix.cc
-@@ -27,7 +27,7 @@
- #if !defined(USE_SYMBOLIZE)
- #include <cxxabi.h>
- #endif
-#if !defined(__UCLIBC__) && !defined(_AIX)
-+#if defined(__GLIBC__) && !defined(_AIX)
- #include <execinfo.h>
- #endif
- 
-@@ -89,7 +89,7 @@
-   // Note: code in this function is NOT async-signal safe (std::string uses
-   // malloc internally).
- 
-#if !defined(__UCLIBC__) && !defined(_AIX)
-+#if defined(__GLIBC__) && !defined(_AIX)
-   std::string::size_type search_from = 0;
-   while (search_from < text->size()) {
-     // Look for the start of a mangled symbol, from search_from.
-@@ -136,7 +136,7 @@
-   virtual ~BacktraceOutputHandler() = default;
- };
- 
-#if !defined(__UCLIBC__) && !defined(_AIX)
-+#if defined(__GLIBC__) && !defined(_AIX)
- void OutputPointer(void* pointer, BacktraceOutputHandler* handler) {
-   // This should be more than enough to store a 64-bit number in hex:
-   // 16 hex digits + 1 for null-terminator.
-@@ -839,7 +839,7 @@
-   // If we do not have unwind tables, then try tracing using frame pointers.
-   return base::debug::TraceStackFramePointers(const_cast<const void**>(trace),
-                                               count, 0);
-#elif !defined(__UCLIBC__) && !defined(_AIX)
-+#elif defined(__GLIBC__) && !defined(_AIX)
-   // Though the backtrace API man page does not list any possible negative
-   // return values, we take no chance.
-   return base::saturated_cast<size_t>(backtrace(trace, count));
-@@ -852,13 +852,13 @@
- // NOTE: This code MUST be async-signal safe (it's used by in-process
- // stack dumping signal handler). NO malloc or stdio is allowed here.
- 
-#if !defined(__UCLIBC__) && !defined(_AIX)
-+#if defined(__GLIBC__) && !defined(_AIX)
-   PrintBacktraceOutputHandler handler;
-   ProcessBacktrace(trace_, count_, prefix_string, &handler);
- #endif
- }
- 
-#if !defined(__UCLIBC__) && !defined(_AIX)
-+#if defined(__GLIBC__) && !defined(_AIX)
- void StackTrace::OutputToStreamWithPrefix(std::ostream* os,
-                                           const char* prefix_string) const {
-   StreamBacktraceOutputHandler handler(os);
--- a/v8/src/codegen/external-reference-table.cc
-+++ b/v8/src/codegen/external-reference-table.cc
-@@ -11,7 +11,9 @@
-
- #if defined(DEBUG) && defined(V8_OS_LINUX) && !defined(V8_OS_ANDROID)
- #define SYMBOLIZE_FUNCTION
-+#if defined(__GLIBC__)
- #include <execinfo.h>
-+#endif
-
- #include <vector>
-
-@@ -96,7 +98,7 @@
- }
-
- const char* ExternalReferenceTable::ResolveSymbol(void* address) {
-#ifdef SYMBOLIZE_FUNCTION
-+#if defined(SYMBOLIZE_FUNCTION) && defined(__GLIBC__)
-   char** names = backtrace_symbols(&address, 1);
-   const char* name = names[0];
-   // The array of names is malloc'ed. However, each name string is static
--- a/third_party/swiftshader/third_party/llvm-subzero/build/Linux/include/llvm/Config/config.h
-+++ b/third_party/swiftshader/third_party/llvm-subzero/build/Linux/include/llvm/Config/config.h
-@@ -58,7 +58,7 @@
- #define HAVE_ERRNO_H 1
- 
- /* Define to 1 if you have the <execinfo.h> header file. */
-#define HAVE_EXECINFO_H 1
-+/* #define HAVE_EXECINFO_H 1 */
- 
- /* Define to 1 if you have the <fcntl.h> header file. */
- #define HAVE_FCNTL_H 1
--- a/base/debug/stack_trace.cc
-+++ b/base/debug/stack_trace.cc
-@@ -251,7 +253,9 @@
- }
- 
- void StackTrace::OutputToStream(std::ostream* os) const {
-+#if defined(__GLIBC__) && !defined(_AIX)
-   OutputToStreamWithPrefix(os, nullptr);
-+#endif
- }
- 
- std::string StackTrace::ToString() const {
-@@ -281,7 +281,7 @@
- }
- std::string StackTrace::ToStringWithPrefix(const char* prefix_string) const {
-   std::stringstream stream;
-#if !defined(__UCLIBC__) && !defined(_AIX)
-+#if defined(__GLIBC__) && !defined(_AIX)
-   OutputToStreamWithPrefix(&stream, prefix_string);
- #endif
-   return stream.str();
--- a/backports/electron/no-glibc-version.patch
+++ b/backports/electron/no-glibc-version.patch
@ -1,19 +0,0 @@
--- a/chrome/browser/metrics/chrome_browser_main_extra_parts_metrics.cc
-+++ b/chrome/browser/metrics/chrome_browser_main_extra_parts_metrics.cc
-@@ -61,7 +61,6 @@
- // TODO(crbug.com/1052397): Revisit the macro expression once build flag switch
- // of lacros-chrome is complete.
- #if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS_LACROS)
-#include <gnu/libc-version.h>
- 
- #include "base/linux_util.h"
- #include "base/strings/string_split.h"
-@@ -324,7 +323,7 @@
- void RecordLinuxGlibcVersion() {
- // TODO(crbug.com/1052397): Revisit the macro expression once build flag switch
- // of lacros-chrome is complete.
-#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS_LACROS)
-+#if defined(__GLIBC__) || BUILDFLAG(IS_CHROMEOS_LACROS)
-   base::Version version(gnu_get_libc_version());
- 
-   UMALinuxGlibcVersion glibc_version_result = UMA_LINUX_GLIBC_NOT_PARSEABLE;
--- a/backports/electron/no-mallinfo.patch
+++ b/backports/electron/no-mallinfo.patch
@ -1,110 +0,0 @@
--- a/base/trace_event/malloc_dump_provider.cc
-+++ b/base/trace_event/malloc_dump_provider.cc
-@@ -185,7 +185,6 @@
- #define MALLINFO2_FOUND_IN_LIBC
-   struct mallinfo2 info = mallinfo2();
- #endif
-#endif  // defined(__GLIBC__) && defined(__GLIBC_PREREQ)
- #if !defined(MALLINFO2_FOUND_IN_LIBC)
-   struct mallinfo info = mallinfo();
- #endif
-@@ -205,6 +204,7 @@
-     sys_alloc_dump->AddScalar(MemoryAllocatorDump::kNameSize,
-                               MemoryAllocatorDump::kUnitsBytes, info.uordblks);
-   }
-+#endif  // defined(__GLIBC__) && defined(__GLIBC_PREREQ)
- }
- #endif
- 
-@@ -339,7 +340,7 @@
-                      &allocated_objects_count);
- #elif BUILDFLAG(IS_FUCHSIA)
- // TODO(fuchsia): Port, see https://crbug.com/706592.
-#else
-+#elif defined(__GLIBC__)
-   ReportMallinfoStats(/*pmd=*/nullptr, &total_virtual_size, &resident_size,
-                       &allocated_objects_size, &allocated_objects_count);
- #endif
--- a/base/process/process_metrics_posix.cc
-+++ b/base/process/process_metrics_posix.cc
-@@ -105,7 +105,7 @@
- 
- #endif  // !BUILDFLAG(IS_FUCHSIA)
- 
-#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
-+#if (BUILDFLAG(IS_LINUX) && defined(__GLIBC__)) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
- namespace {
- 
- size_t GetMallocUsageMallinfo() {
-@@ -123,7 +123,7 @@
- }
- 
- }  // namespace
-#endif  // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) ||
-+#endif  // (BUILDFLAG(IS_LINUX) && defined(__GLIBC__)) || BUILDFLAG(IS_CHROMEOS) ||
-         // BUILDFLAG(IS_ANDROID)
- 
- size_t ProcessMetrics::GetMallocUsage() {
-@@ -131,9 +131,9 @@
-   malloc_statistics_t stats = {0};
-   malloc_zone_statistics(nullptr, &stats);
-   return stats.size_in_use;
-#elif BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
-+#elif (BUILDFLAG(IS_LINUX) && defined(__GLIBC__)) || BUILDFLAG(IS_CHROMEOS) || BUILDFLAG(IS_ANDROID)
-   return GetMallocUsageMallinfo();
-#elif BUILDFLAG(IS_FUCHSIA)
-+#else
-   // TODO(fuchsia): Not currently exposed. https://crbug.com/735087.
-   return 0;
- #endif
--- a/third_party/tflite/src/tensorflow/lite/profiling/memory_info.cc
-+++ b/third_party/tflite/src/tensorflow/lite/profiling/memory_info.cc
-@@ -35,7 +35,7 @@
- 
- MemoryUsage GetMemoryUsage() {
-   MemoryUsage result;
-#ifdef __linux__
-+#if defined(__linux__) && defined(__GLIBC__)
-   rusage res;
-   if (getrusage(RUSAGE_SELF, &res) == 0) {
-     result.max_rss_kb = res.ru_maxrss;
--- a/third_party/swiftshader/third_party/llvm-subzero/lib/Support/Unix/Process.inc
-+++ b/third_party/swiftshader/third_party/llvm-subzero/lib/Support/Unix/Process.inc
-@@ -86,11 +86,11 @@
- }
-
- size_t Process::GetMallocUsage() {
-#if defined(HAVE_MALLINFO2)
-+#if defined(HAVE_MALLINFO2) && defined(__GLIBC__)
-   struct mallinfo2 mi;
-   mi = ::mallinfo2();
-   return mi.uordblks;
-#elif defined(HAVE_MALLINFO)
-+#elif defined(HAVE_MALLINFO) && defined(__GLIBC__)
-   struct mallinfo mi;
-   mi = ::mallinfo();
-   return mi.uordblks;
-
--- a/third_party/swiftshader/third_party/llvm-10.0/configs/linux/include/llvm/Config/config.h
-+++ b/third_party/swiftshader/third_party/llvm-10.0/configs/linux/include/llvm/Config/config.h
-@@ -122,7 +122,9 @@
- /* #undef HAVE_MALLCTL */
- 
- /* Define to 1 if you have the `mallinfo' function. */
-+#if defined(__GLIBC__)
- #define HAVE_MALLINFO 1
-+#endif
- 
- /* Define to 1 if you have the <malloc.h> header file. */
- #define HAVE_MALLOC_H 1
--- a/base/allocator/allocator_shim_default_dispatch_to_partition_alloc.cc
-+++ b/base/allocator/allocator_shim_default_dispatch_to_partition_alloc.cc
-@@ -717,7 +717,7 @@
- 
- #endif  // !BUILDFLAG(IS_APPLE) && !BUILDFLAG(IS_ANDROID)
- 
-#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
-+#if 0
- SHIM_ALWAYS_EXPORT struct mallinfo mallinfo(void) __THROW {
-   base::SimplePartitionStatsDumper allocator_dumper;
-   Allocator()->DumpStats("malloc", true, &allocator_dumper);
--- a/backports/electron/no-res-ninit-nclose.patch
+++ b/backports/electron/no-res-ninit-nclose.patch
@ -1,30 +0,0 @@
--- a/net/dns/public/scoped_res_state.cc
-+++ b/net/dns/public/scoped_res_state.cc
-@@ -13,7 +13,7 @@
- namespace net {
- 
- ScopedResState::ScopedResState() {
-#if BUILDFLAG(IS_OPENBSD) || BUILDFLAG(IS_FUCHSIA)
-+#if BUILDFLAG(IS_OPENBSD) || BUILDFLAG(IS_FUCHSIA) || defined(_GNU_SOURCE)
-   // Note: res_ninit in glibc always returns 0 and sets RES_INIT.
-   // res_init behaves the same way.
-   memset(&_res, 0, sizeof(_res));
-@@ -25,16 +25,8 @@
- }
- 
- ScopedResState::~ScopedResState() {
-#if !BUILDFLAG(IS_OPENBSD) && !BUILDFLAG(IS_FUCHSIA)
-
-  // Prefer res_ndestroy where available.
-#if BUILDFLAG(IS_APPLE) || BUILDFLAG(IS_FREEBSD)
-  res_ndestroy(&res_);
-#else
-  res_nclose(&res_);
-#endif  // BUILDFLAG(IS_APPLE) || BUILDFLAG(IS_FREEBSD)
-
-#endif  // !BUILDFLAG(IS_OPENBSD) && !BUILDFLAG(IS_FUCHSIA)
-+  // musl res_init() doesn't actually do anything
-+  // no destruction is necessary as no memory has been allocated
- }
- 
- bool ScopedResState::IsValid() const {
--- a/backports/electron/no-stat-redefine.patch
+++ b/backports/electron/no-stat-redefine.patch
@ -1,12 +0,0 @@
--- a/base/files/file.h
-+++ b/base/files/file.h
-@@ -19,7 +19,8 @@
- #include "build/build_config.h"
- 
- #if BUILDFLAG(IS_BSD) || BUILDFLAG(IS_APPLE) || BUILDFLAG(IS_NACL) || \
-    BUILDFLAG(IS_FUCHSIA) || (BUILDFLAG(IS_ANDROID) && __ANDROID_API__ < 21)
-+    BUILDFLAG(IS_FUCHSIA) || (BUILDFLAG(IS_ANDROID) && __ANDROID_API__ < 21) || \
-+    (defined(OS_LINUX) && !defined(__GLIBC__))
- struct stat;
- namespace base {
- typedef struct stat stat_wrapper_t;
--- a/backports/electron/nullptr-t.patch
+++ b/backports/electron/nullptr-t.patch
@ -1,11 +0,0 @@
--- a/chrome/browser/ui/autofill/autofill_popup_controller_impl.h
-+++ b/chrome/browser/ui/autofill/autofill_popup_controller_impl.h
-@@ -178,7 +178,7 @@
-   class AutofillPopupViewPtr {
-    public:
-     AutofillPopupViewPtr() = default;
-    AutofillPopupViewPtr(nullptr_t) : ptr_(nullptr) {}
-+    AutofillPopupViewPtr(std::nullptr_t) : ptr_(nullptr) {}
-     AutofillPopupViewPtr(AutofillPopupView* ptr) : ptr_(ptr) {}
- 
-     explicit operator bool() const { return ptr_; }
--- a/backports/electron/partition-atfork.patch
+++ b/backports/electron/partition-atfork.patch
@ -1,15 +0,0 @@
--- a/base/allocator/partition_allocator/partition_root.cc
-+++ b/base/allocator/partition_allocator/partition_root.cc
-@@ -248,9 +248,9 @@
-   // However, no perfect solution really exists to make threads + fork()
-   // cooperate, but deadlocks are real (and fork() is used in DEATH_TEST()s),
-   // and other malloc() implementations use the same techniques.
-  int err =
-      pthread_atfork(BeforeForkInParent, AfterForkInParent, AfterForkInChild);
-  PA_CHECK(err == 0);
-+  //int err =
-+  //    pthread_atfork(BeforeForkInParent, AfterForkInParent, AfterForkInChild);
-+  //PA_CHECK(err == 0);
- #endif  // BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_CHROMEOS)
- }
- 
--- a/backports/electron/py3.11.patch
+++ b/backports/electron/py3.11.patch
@ -1,11 +0,0 @@
--- a/tools/grit/grit/util.py
-+++ b/tools/grit/grit/util.py
-@@ -209,7 +209,7 @@
-     mode = 'rb'
-     encoding = None
-   else:
-    mode = 'rU'
-+    mode = 'r'
- 
-   with io.open(filename, mode, encoding=encoding) as f:
-     return f.read()
--- a/backports/electron/python-jinja-3.10.patch
+++ b/backports/electron/python-jinja-3.10.patch
@ -1,22 +0,0 @@
--- a/third_party/electron_node/tools/inspector_protocol/jinja2/runtime.py
-+++ b/third_party/electron_node/tools/inspector_protocol/jinja2/runtime.py
-@@ -315,7 +315,7 @@ class Context(with_metaclass(ContextMeta
- 
- # register the context as mapping if possible
- try:
-    from collections import Mapping
-+    from collections.abc import Mapping
-     Mapping.register(Context)
- except ImportError:
-     pass
--- a/third_party/electron_node/tools/inspector_protocol/jinja2/sandbox.py
-+++ b/third_party/electron_node/tools/inspector_protocol/jinja2/sandbox.py
-@@ -14,7 +14,7 @@
- """
- import types
- import operator
-from collections import Mapping
-+from collections.abc import Mapping
- from jinja2.environment import Environment
- from jinja2.exceptions import SecurityError
- from jinja2._compat import string_types, PY2
--- a/backports/electron/quiche-arena-size.patch
+++ b/backports/electron/quiche-arena-size.patch
@ -1,11 +0,0 @@
--- a/net/third_party/quiche/src/quiche/quic/core/quic_one_block_arena.h
-+++ b/net/third_party/quiche/src/quiche/quic/core/quic_one_block_arena.h
-@@ -69,7 +69,7 @@
- 
- // QuicConnections currently use around 1KB of polymorphic types which would
- // ordinarily be on the heap. Instead, store them inline in an arena.
-using QuicConnectionArena = QuicOneBlockArena<1280>;
-+using QuicConnectionArena = QuicOneBlockArena<1504>;
- 
- }  // namespace quic
- 
--- a/backports/electron/roll-src-third_party-ffmpeg-102.patch
+++ b/backports/electron/roll-src-third_party-ffmpeg-102.patch
@ -1,287 +0,0 @@
--- a/media/cdm/library_cdm/clear_key_cdm/ffmpeg_cdm_audio_decoder.cc
-+++ b/media/cdm/library_cdm/clear_key_cdm/ffmpeg_cdm_audio_decoder.cc
-@@ -74,7 +74,7 @@
-       codec_context->sample_fmt = AV_SAMPLE_FMT_NONE;
-   }
- 
-  codec_context->ch_layout.nb_channels = config.channel_count;
-+  codec_context->channels = config.channel_count;
-   codec_context->sample_rate = config.samples_per_second;
- 
-   if (config.extra_data) {
-@@ -124,8 +124,8 @@
-     case cdm::kAudioFormatPlanarS16:
-     case cdm::kAudioFormatPlanarF32: {
-       const int decoded_size_per_channel =
-          decoded_audio_size / av_frame.ch_layout.nb_channels;
-      for (int i = 0; i < av_frame.ch_layout.nb_channels; ++i) {
-+          decoded_audio_size / av_frame.channels;
-+      for (int i = 0; i < av_frame.channels; ++i) {
-         memcpy(output_buffer, av_frame.extended_data[i],
-                decoded_size_per_channel);
-         output_buffer += decoded_size_per_channel;
-@@ -185,14 +185,13 @@
-   // Success!
-   decoding_loop_ = std::make_unique<FFmpegDecodingLoop>(codec_context_.get());
-   samples_per_second_ = config.samples_per_second;
-  bytes_per_frame_ =
-      codec_context_->ch_layout.nb_channels * config.bits_per_channel / 8;
-+  bytes_per_frame_ = codec_context_->channels * config.bits_per_channel / 8;
-   output_timestamp_helper_ =
-       std::make_unique<AudioTimestampHelper>(config.samples_per_second);
-   is_initialized_ = true;
- 
-   // Store initial values to guard against midstream configuration changes.
-  channels_ = codec_context_->ch_layout.nb_channels;
-+  channels_ = codec_context_->channels;
-   av_sample_format_ = codec_context_->sample_fmt;
- 
-   return true;
-@@ -292,19 +291,17 @@
-   for (auto& frame : audio_frames) {
-     int decoded_audio_size = 0;
-     if (frame->sample_rate != samples_per_second_ ||
-        frame->ch_layout.nb_channels != channels_ ||
-        frame->format != av_sample_format_) {
-+        frame->channels != channels_ || frame->format != av_sample_format_) {
-       DLOG(ERROR) << "Unsupported midstream configuration change!"
-                   << " Sample Rate: " << frame->sample_rate << " vs "
-                  << samples_per_second_
-                  << ", Channels: " << frame->ch_layout.nb_channels << " vs "
-                  << channels_ << ", Sample Format: " << frame->format << " vs "
-                  << av_sample_format_;
-+                  << samples_per_second_ << ", Channels: " << frame->channels
-+                  << " vs " << channels_ << ", Sample Format: " << frame->format
-+                  << " vs " << av_sample_format_;
-       return cdm::kDecodeError;
-     }
- 
-     decoded_audio_size = av_samples_get_buffer_size(
-        nullptr, codec_context_->ch_layout.nb_channels, frame->nb_samples,
-+        nullptr, codec_context_->channels, frame->nb_samples,
-         codec_context_->sample_fmt, 1);
-     if (!decoded_audio_size)
-       continue;
-@@ -323,9 +320,9 @@
-     size_t* total_size,
-     std::vector<std::unique_ptr<AVFrame, ScopedPtrAVFreeFrame>>* audio_frames,
-     AVFrame* frame) {
-  *total_size += av_samples_get_buffer_size(
-      nullptr, codec_context_->ch_layout.nb_channels, frame->nb_samples,
-      codec_context_->sample_fmt, 1);
-+  *total_size += av_samples_get_buffer_size(nullptr, codec_context_->channels,
-+                                            frame->nb_samples,
-+                                            codec_context_->sample_fmt, 1);
-   audio_frames->emplace_back(av_frame_clone(frame));
-   return true;
- }
--- a/media/ffmpeg/ffmpeg_common.cc
-+++ b/media/ffmpeg/ffmpeg_common.cc
-@@ -345,11 +345,10 @@
-       codec_context->sample_fmt, codec_context->codec_id);
- 
-   ChannelLayout channel_layout =
-      codec_context->ch_layout.nb_channels > 8
-+      codec_context->channels > 8
-           ? CHANNEL_LAYOUT_DISCRETE
-          : ChannelLayoutToChromeChannelLayout(
-                codec_context->ch_layout.u.mask,
-                codec_context->ch_layout.nb_channels);
-+          : ChannelLayoutToChromeChannelLayout(codec_context->channel_layout,
-+                                               codec_context->channels);
- 
-   int sample_rate = codec_context->sample_rate;
-   switch (codec) {
-@@ -402,7 +401,7 @@
-                      extra_data, encryption_scheme, seek_preroll,
-                      codec_context->delay);
-   if (channel_layout == CHANNEL_LAYOUT_DISCRETE)
-    config->SetChannelsForDiscrete(codec_context->ch_layout.nb_channels);
-+    config->SetChannelsForDiscrete(codec_context->channels);
- 
- #if BUILDFLAG(ENABLE_PLATFORM_AC3_EAC3_AUDIO)
-   // These are bitstream formats unknown to ffmpeg, so they don't have
-@@ -471,7 +470,7 @@
- 
-   // TODO(scherkus): should we set |channel_layout|? I'm not sure if FFmpeg uses
-   // said information to decode.
-  codec_context->ch_layout.nb_channels = config.channels();
-+  codec_context->channels = config.channels();
-   codec_context->sample_rate = config.samples_per_second();
- 
-   if (config.extra_data().empty()) {
--- a/media/filters/audio_file_reader.cc
-+++ b/media/filters/audio_file_reader.cc
-@@ -113,15 +113,14 @@
- 
-   // Verify the channel layout is supported by Chrome.  Acts as a sanity check
-   // against invalid files.  See http://crbug.com/171962
-  if (ChannelLayoutToChromeChannelLayout(
-          codec_context_->ch_layout.u.mask,
-          codec_context_->ch_layout.nb_channels) ==
-+  if (ChannelLayoutToChromeChannelLayout(codec_context_->channel_layout,
-+                                         codec_context_->channels) ==
-       CHANNEL_LAYOUT_UNSUPPORTED) {
-     return false;
-   }
- 
-   // Store initial values to guard against midstream configuration changes.
-  channels_ = codec_context_->ch_layout.nb_channels;
-+  channels_ = codec_context_->channels;
-   audio_codec_ = CodecIDToAudioCodec(codec_context_->codec_id);
-   sample_rate_ = codec_context_->sample_rate;
-   av_sample_format_ = codec_context_->sample_fmt;
-@@ -224,7 +223,7 @@
-   if (frames_read < 0)
-     return false;
- 
-  const int channels = frame->ch_layout.nb_channels;
-+  const int channels = frame->channels;
-   if (frame->sample_rate != sample_rate_ || channels != channels_ ||
-       frame->format != av_sample_format_) {
-     DLOG(ERROR) << "Unsupported midstream configuration change!"
--- a/media/filters/audio_file_reader_unittest.cc
-+++ b/media/filters/audio_file_reader_unittest.cc
-@@ -121,11 +121,11 @@
-     EXPECT_FALSE(reader_->Open());
-   }
- 
-  void RunTestFailingDecode(const char* fn, int expect_read = 0) {
-+  void RunTestFailingDecode(const char* fn) {
-     Initialize(fn);
-     EXPECT_TRUE(reader_->Open());
-     std::vector<std::unique_ptr<AudioBus>> decoded_audio_packets;
-    EXPECT_EQ(reader_->Read(&decoded_audio_packets), expect_read);
-+    EXPECT_EQ(reader_->Read(&decoded_audio_packets), 0);
-   }
- 
-   void RunTestPartialDecode(const char* fn) {
-@@ -219,7 +219,7 @@
- }
- 
- TEST_F(AudioFileReaderTest, MidStreamConfigChangesFail) {
-  RunTestFailingDecode("midstream_config_change.mp3", 42624);
-+  RunTestFailingDecode("midstream_config_change.mp3");
- }
- #endif
- 
--- a/media/filters/audio_video_metadata_extractor.cc
-+++ b/media/filters/audio_video_metadata_extractor.cc
-@@ -113,15 +113,6 @@
-     if (!stream)
-       continue;
- 
-    void* display_matrix =
-        av_stream_get_side_data(stream, AV_PKT_DATA_DISPLAYMATRIX, nullptr);
-    if (display_matrix) {
-      rotation_ = VideoTransformation::FromFFmpegDisplayMatrix(
-                      static_cast<int32_t*>(display_matrix))
-                      .rotation;
-      info.tags["rotate"] = base::NumberToString(rotation_);
-    }
-
-     // Extract dictionary from streams also. Needed for containers that attach
-     // metadata to contained streams instead the container itself, like OGG.
-     ExtractDictionary(stream->metadata, &info.tags);
-@@ -264,6 +255,8 @@
-     if (raw_tags->find(tag->key) == raw_tags->end())
-       (*raw_tags)[tag->key] = tag->value;
- 
-+    if (ExtractInt(tag, "rotate", &rotation_))
-+      continue;
-     if (ExtractString(tag, "album", &album_))
-       continue;
-     if (ExtractString(tag, "artist", &artist_))
--- a/media/filters/ffmpeg_aac_bitstream_converter.cc
-+++ b/media/filters/ffmpeg_aac_bitstream_converter.cc
-@@ -195,15 +195,14 @@
-   if (!header_generated_ || codec_ != stream_codec_parameters_->codec_id ||
-       audio_profile_ != stream_codec_parameters_->profile ||
-       sample_rate_index_ != sample_rate_index ||
-      channel_configuration_ !=
-          stream_codec_parameters_->ch_layout.nb_channels ||
-+      channel_configuration_ != stream_codec_parameters_->channels ||
-       frame_length_ != header_plus_packet_size) {
-     header_generated_ =
-         GenerateAdtsHeader(stream_codec_parameters_->codec_id,
-                            0,  // layer
-                            stream_codec_parameters_->profile, sample_rate_index,
-                            0,  // private stream
-                           stream_codec_parameters_->ch_layout.nb_channels,
-+                           stream_codec_parameters_->channels,
-                            0,  // originality
-                            0,  // home
-                            0,  // copyrighted_stream
-@@ -215,7 +214,7 @@
-     codec_ = stream_codec_parameters_->codec_id;
-     audio_profile_ = stream_codec_parameters_->profile;
-     sample_rate_index_ = sample_rate_index;
-    channel_configuration_ = stream_codec_parameters_->ch_layout.nb_channels;
-+    channel_configuration_ = stream_codec_parameters_->channels;
-     frame_length_ = header_plus_packet_size;
-   }
- 
--- a/media/filters/ffmpeg_aac_bitstream_converter_unittest.cc
-+++ b/media/filters/ffmpeg_aac_bitstream_converter_unittest.cc
-@@ -34,7 +34,7 @@
-     memset(&test_parameters_, 0, sizeof(AVCodecParameters));
-     test_parameters_.codec_id = AV_CODEC_ID_AAC;
-     test_parameters_.profile = FF_PROFILE_AAC_MAIN;
-    test_parameters_.ch_layout.nb_channels = 2;
-+    test_parameters_.channels = 2;
-     test_parameters_.extradata = extradata_header_;
-     test_parameters_.extradata_size = sizeof(extradata_header_);
-   }
--- a/media/filters/ffmpeg_audio_decoder.cc
-+++ b/media/filters/ffmpeg_audio_decoder.cc
-@@ -28,7 +28,7 @@
- 
- // Return the number of channels from the data in |frame|.
- static inline int DetermineChannels(AVFrame* frame) {
-  return frame->ch_layout.nb_channels;
-+  return frame->channels;
- }
- 
- // Called by FFmpeg's allocation routine to allocate a buffer. Uses
-@@ -231,7 +231,7 @@
-   // Translate unsupported into discrete layouts for discrete configurations;
-   // ffmpeg does not have a labeled discrete configuration internally.
-   ChannelLayout channel_layout = ChannelLayoutToChromeChannelLayout(
-      codec_context_->ch_layout.u.mask, codec_context_->ch_layout.nb_channels);
-+      codec_context_->channel_layout, codec_context_->channels);
-   if (channel_layout == CHANNEL_LAYOUT_UNSUPPORTED &&
-       config_.channel_layout() == CHANNEL_LAYOUT_DISCRETE) {
-     channel_layout = CHANNEL_LAYOUT_DISCRETE;
-@@ -348,11 +348,11 @@
-   // Success!
-   av_sample_format_ = codec_context_->sample_fmt;
- 
-  if (codec_context_->ch_layout.nb_channels != config.channels()) {
-+  if (codec_context_->channels != config.channels()) {
-     MEDIA_LOG(ERROR, media_log_)
-         << "Audio configuration specified " << config.channels()
-         << " channels, but FFmpeg thinks the file contains "
-        << codec_context_->ch_layout.nb_channels << " channels";
-+        << codec_context_->channels << " channels";
-     ReleaseFFmpegResources();
-     state_ = DecoderState::kUninitialized;
-     return false;
-@@ -403,7 +403,7 @@
-   if (frame->nb_samples <= 0)
-     return AVERROR(EINVAL);
- 
-  if (s->ch_layout.nb_channels != channels) {
-+  if (s->channels != channels) {
-     DLOG(ERROR) << "AVCodecContext and AVFrame disagree on channel count.";
-     return AVERROR(EINVAL);
-   }
-@@ -436,8 +436,7 @@
-   ChannelLayout channel_layout =
-       config_.channel_layout() == CHANNEL_LAYOUT_DISCRETE
-           ? CHANNEL_LAYOUT_DISCRETE
-          : ChannelLayoutToChromeChannelLayout(s->ch_layout.u.mask,
-                                               s->ch_layout.nb_channels);
-+          : ChannelLayoutToChromeChannelLayout(s->channel_layout, s->channels);
- 
-   if (channel_layout == CHANNEL_LAYOUT_UNSUPPORTED) {
-     DLOG(ERROR) << "Unsupported channel layout.";
--- a/backports/electron/roll-src-third_party-ffmpeg-106.patch
+++ b/backports/electron/roll-src-third_party-ffmpeg-106.patch
@ -1,15 +0,0 @@
--- a/media/filters/audio_file_reader.cc
-+++ b/media/filters/audio_file_reader.cc
-@@ -243,10 +243,10 @@
-   // silence from being output. In the case where we are also discarding some
-   // portion of the packet (as indicated by a negative pts), we further want to
-   // adjust the duration downward by however much exists before zero.
-  if (audio_codec_ == AudioCodec::kAAC && frame->duration) {
-+  if (audio_codec_ == AudioCodec::kAAC && frame->pkt_duration) {
-     const base::TimeDelta pkt_duration = ConvertFromTimeBase(
-         glue_->format_context()->streams[stream_index_]->time_base,
-        frame->duration + std::min(static_cast<int64_t>(0), frame->pts));
-+        frame->pkt_duration + std::min(static_cast<int64_t>(0), frame->pts));
-     const base::TimeDelta frame_duration =
-         base::Seconds(frames_read / static_cast<double>(sample_rate_));
- 
--- a/backports/electron/scoped-file-no-close.patch
+++ b/backports/electron/scoped-file-no-close.patch
@ -1,22 +0,0 @@
-for some reason this breaks and the fd returned after close() after a few
-cycles is still in the lock array
-
-so, just don't enforce or wrap anything.
--- a/base/files/scoped_file_linux.cc
-+++ b/base/files/scoped_file_linux.cc
-@@ -77,15 +77,3 @@
- }
- 
- }  // namespace base
-
-extern "C" {
-
-int __close(int);
-
-__attribute__((visibility("default"), noinline)) int close(int fd) {
-  if (base::IsFDOwned(fd) && g_is_ownership_enforced)
-    CrashOnFdOwnershipViolation();
-  return __close(fd);
-}
-
-}  // extern "C"
--- a/backports/electron/system-node.patch
+++ b/backports/electron/system-node.patch
@ -1,53 +0,0 @@
--- a/third_party/electron_node/BUILD.gn
-+++ b/third_party/electron_node/BUILD.gn
-@@ -42,6 +42,18 @@
-   node_module_version = ""
- }
- 
-+if (is_linux) {
-+  import("//build/config/linux/pkg_config.gni")
-+
-+  pkg_config("cares") {
-+    packages = [ "libcares" ]
-+  }
-+
-+  pkg_config("nghttp2") {
-+    packages = [ "libnghttp2" ]
-+  }
-+}
-+
- assert(!node_use_dtrace, "node_use_dtrace not supported in GN")
- assert(!node_use_etw, "node_use_etw not supported in GN")
- 
-@@ -182,11 +194,9 @@
- component("node_lib") {
-   deps = [
-     ":node_js2c",
-    "deps/cares",
-     "deps/histogram",
-     "deps/googletest:gtest",
-     "deps/llhttp",
-    "deps/nghttp2",
-     "deps/uvwasi",
-     "//third_party/zlib",
-     "//third_party/brotli:dec",
-@@ -202,6 +212,19 @@
-   public_configs = [ ":node_lib_config" ]
-   include_dirs = [ "src" ]
-   libs = []
-+  if (is_linux) {
-+    configs += [
-+      ":cares",
-+      ":nghttp2",
-+    ]
-+    libs += [ "http_parser" ]
-+  } else {
-+    deps += [
-+      "deps/cares",
-+      "deps/http_parser",
-+      "deps/nghttp2",
-+    ]
-+  }
-   frameworks = []
-   cflags_cc = [
-     "-Wno-deprecated-declarations",
--- a/backports/electron/temp-failure-retry.patch
+++ b/backports/electron/temp-failure-retry.patch
@ -1,18 +0,0 @@
-random glibc macro
--- a/sandbox/linux/suid/process_util.h
-+++ b/sandbox/linux/suid/process_util.h
-@@ -11,6 +11,14 @@
- #include <stdbool.h>
- #include <sys/types.h>
- 
-+// Some additional functions
-+# define TEMP_FAILURE_RETRY(expression) \
-+	(__extension__			\
-+	 ({ long int __result;		\
-+	  do __result = (long int) (expression); \
-+	  while (__result == -1L && errno == EINTR); \
-+	  __result; }))
-+
- // This adjusts /proc/process/oom_score_adj so the Linux OOM killer
- // will prefer certain process types over others. The range for the
- // adjustment is [-1000, 1000], with [0, 1000] being user accessible.
--- a/backports/electron/vector-const.patch
+++ b/backports/electron/vector-const.patch
@ -1,113 +0,0 @@
--- a/chrome/browser/process_singleton_posix.cc
-+++ b/chrome/browser/process_singleton_posix.cc
-@@ -607,7 +607,7 @@
-   // |reader| is for sending back ACK message.
-   void HandleMessage(const std::string& current_dir,
-                      const std::vector<std::string>& argv,
-                     const std::vector<const uint8_t> additional_data,
-+                     const std::vector<uint8_t> additional_data,
-                      SocketReader* reader);
- 
-  private:
-@@ -664,7 +664,7 @@
- void ProcessSingleton::LinuxWatcher::HandleMessage(
-     const std::string& current_dir,
-     const std::vector<std::string>& argv,
-    const std::vector<const uint8_t> additional_data,
-+    const std::vector<uint8_t> additional_data,
-     SocketReader* reader) {
-   DCHECK(ui_task_runner_->BelongsToCurrentThread());
-   DCHECK(reader);
-@@ -754,7 +754,7 @@
-   base::StringToSizeT(tokens[0], &num_args);
-   std::vector<std::string> command_line(tokens.begin() + 1, tokens.begin() + 1 + num_args);
- 
-  std::vector<const uint8_t> additional_data;
-+  std::vector<uint8_t> additional_data;
-   if (tokens.size() >= 3 + num_args) {
-     size_t additional_data_size;
-     base::StringToSizeT(tokens[1 + num_args], &additional_data_size);
-@@ -763,7 +763,7 @@
-         std::string(1, kTokenDelimiter));
-     const uint8_t* additional_data_bits =
-         reinterpret_cast<const uint8_t*>(remaining_args.c_str());
-    additional_data = std::vector<const uint8_t>(
-+    additional_data = std::vector<uint8_t>(
-         additional_data_bits, additional_data_bits + additional_data_size);
-   }
- 
--- a/chrome/browser/process_singleton.h
-+++ b/chrome/browser/process_singleton.h
-@@ -102,7 +102,7 @@
-   using NotificationCallback =
-        base::RepeatingCallback<bool(const base::CommandLine& command_line,
-                                    const base::FilePath& current_directory,
-                                   const std::vector<const uint8_t> additional_data)>;
-+                                   const std::vector<uint8_t> additional_data)>;
- 
- #if BUILDFLAG(IS_WIN)
-   ProcessSingleton(const std::string& program_name,
--- a/chrome/browser/process_singleton_win.cc
-+++ b/chrome/browser/process_singleton_win.cc
-@@ -81,7 +81,7 @@
- bool ParseCommandLine(const COPYDATASTRUCT* cds,
-                       base::CommandLine* parsed_command_line,
-                       base::FilePath* current_directory,
-                      std::vector<const uint8_t>* parsed_additional_data) {
-+                      std::vector<uint8_t>* parsed_additional_data) {
-   // We should have enough room for the shortest command (min_message_size)
-   // and also be a multiple of wchar_t bytes. The shortest command
-   // possible is L"START\0\0" (empty command line, current directory,
-@@ -163,7 +163,7 @@
-         msg.substr(fourth_null + 1, fifth_null - fourth_null);
-     const uint8_t* additional_data_bytes =
-         reinterpret_cast<const uint8_t*>(additional_data.c_str());
-    *parsed_additional_data = std::vector<const uint8_t>(additional_data_bytes,
-+    *parsed_additional_data = std::vector<uint8_t>(additional_data_bytes,
-         additional_data_bytes + additional_data_length);
- 
-     return true;
-@@ -187,7 +187,7 @@
- 
-   base::CommandLine parsed_command_line(base::CommandLine::NO_PROGRAM);
-   base::FilePath current_directory;
-  std::vector<const uint8_t> additional_data;
-+  std::vector<uint8_t> additional_data;
-   if (!ParseCommandLine(cds, &parsed_command_line, &current_directory, &additional_data)) {
-     *result = TRUE;
-     return true;
--- a/electron/shell/browser/api/electron_api_app.cc
-+++ b/electron/shell/browser/api/electron_api_app.cc
-@@ -519,10 +519,10 @@
-     const base::RepeatingCallback<
-         void(const base::CommandLine& command_line,
-              const base::FilePath& current_directory,
-             const std::vector<const uint8_t> additional_data)>& callback,
-+             const std::vector<uint8_t> additional_data)>& callback,
-     const base::CommandLine& cmd,
-     const base::FilePath& cwd,
-    const std::vector<const uint8_t> additional_data) {
-+    const std::vector<uint8_t> additional_data) {
-   // Make sure the callback is called after app gets ready.
-   if (Browser::Get()->is_ready()) {
-     callback.Run(cmd, cwd, std::move(additional_data));
-@@ -1082,7 +1082,7 @@
- 
- void App::OnSecondInstance(const base::CommandLine& cmd,
-                            const base::FilePath& cwd,
-                           const std::vector<const uint8_t> additional_data) {
-+                           const std::vector<uint8_t> additional_data) {
-   v8::Isolate* isolate = JavascriptEnvironment::GetIsolate();
-   v8::Locker locker(isolate);
-   v8::HandleScope handle_scope(isolate);
--- a/electron/shell/browser/api/electron_api_app.h
-+++ b/electron/shell/browser/api/electron_api_app.h
-@@ -195,7 +195,7 @@
-   std::string GetLocaleCountryCode();
-   void OnSecondInstance(const base::CommandLine& cmd,
-                         const base::FilePath& cwd,
-                        const std::vector<const uint8_t> additional_data);
-+                        const std::vector<uint8_t> additional_data);
-   bool HasSingleInstanceLock() const;
-   bool RequestSingleInstanceLock(gin::Arguments* args);
-   void ReleaseSingleInstanceLock();
--- a/backports/electron/webpack-hash.patch
+++ b/backports/electron/webpack-hash.patch
@ -1,12 +0,0 @@
--- a/electron/build/webpack/webpack.config.base.js
-+++ b/electron/build/webpack/webpack.config.base.js
-@@ -117,7 +117,8 @@
-       entry,
-       target: alwaysHasNode ? 'node' : 'web',
-       output: {
-        filename: outputFilename
-+        filename: outputFilename,
-+        hashFunction: 'sha256'
-       },
-       resolve: {
-         alias: {
--- a/backports/electron/wtf-stacksize.patch
+++ b/backports/electron/wtf-stacksize.patch
@ -1,20 +0,0 @@
--- a/third_party/blink/renderer/platform/wtf/stack_util.cc
-+++ b/third_party/blink/renderer/platform/wtf/stack_util.cc
-@@ -29,7 +29,7 @@
- // FIXME: On Mac OSX and Linux, this method cannot estimate stack size
- // correctly for the main thread.
- 
-#elif defined(__GLIBC__) || BUILDFLAG(IS_ANDROID) || BUILDFLAG(IS_FREEBSD) || \
-+#elif BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_ANDROID) || BUILDFLAG(IS_FREEBSD) || \
-     BUILDFLAG(IS_FUCHSIA)
-   // pthread_getattr_np() can fail if the thread is not invoked by
-   // pthread_create() (e.g., the main thread of blink_unittests).
-@@ -97,7 +97,7 @@
- }
- 
- void* GetStackStart() {
-#if defined(__GLIBC__) || BUILDFLAG(IS_ANDROID) || BUILDFLAG(IS_FREEBSD) || \
-+#if BUILDFLAG(IS_LINUX) || BUILDFLAG(IS_ANDROID) || BUILDFLAG(IS_FREEBSD) || \
-     BUILDFLAG(IS_FUCHSIA)
-   pthread_attr_t attr;
-   int error;
--- a/backports/pandoc/APKBUILD
+++ b/backports/pandoc/APKBUILD
@ -0,0 +1,82 @@
+# Contributor: Jean-Louis Fuchs <jean-louis.fuchs@adfinis-sygroup.ch>
+# Maintainer: Jean-Louis Fuchs <jean-louis.fuchs@adfinis-sygroup.ch>
+pkgname=pandoc
+pkgver=2.19.2
+pkgrel=0
+pkgdesc="universal markup converter"
+url="https://pandoc.org/"
+# limited by ghc
+arch="aarch64 x86_64"
+license="GPL-2.0-or-later"
+makedepends="ghc cabal zlib-dev libffi-dev"
+subpackages="$pkgname-doc"
+source="https://hackage.haskell.org/package/pandoc-$pkgver/pandoc-$pkgver.tar.gz
+	texmath-0.12.5.4.patch
+	cabal.config
+	"
+options="net"
+
+# Cabal seems to be built without sandbox, moving the cabal-dir into src
+export CABAL_DIR="$srcdir/.cabal"
+
+cabal_update() {
+	msg "Freezing $pkgname dependencies"
+
+	# Resolve deps and generate fresh cabal.config with version constraints.
+	cabal update
+	(
+		cd "$builddir"
+		cabal v1-freeze --shadow-installed-packages
+
+		# Add version tag at the first line.
+		sed -i "1i--$pkgver" "cabal.config"
+
+		mv "cabal.config" "$startdir/"
+	)
+
+	if ! abuild checksum; then
+		die "Failed to update checksum, run 'abuild checksum' manually"
+	fi
+}
+
+prepare() {
+	default_prepare
+
+	if [ "$(head -n 1 "$srcdir/cabal.config")" != "--$pkgver" ]; then
+		die "Requirements file is outdated, run 'abuild cabal_update'"
+	fi
+
+	ln -sf "$srcdir/cabal.config" "$builddir/cabal.project.freeze"
+}
+
+build() {
+	export PATH="$PATH:/usr/lib/llvm14/bin"
+	cabal update
+	cabal install --only-dependencies
+	cabal configure \
+		--prefix='/usr' \
+		--enable-tests \
+		--enable-split-sections \
+		--ghc-option="-split-sections" \
+		--flags="+embed_data_files -trypandoc +static"
+	cabal build --jobs=${JOBS:-1}
+}
+
+check() {
+	cabal test --jobs=${JOBS:-1}
+}
+
+package() {
+	_bindir="$pkgdir/usr/bin"
+	mkdir -p "$_bindir"
+	cabal install \
+		--installdir="$_bindir" \
+		--install-method=copy
+	install -Dm644 man/pandoc.1 "$pkgdir"/usr/share/man/man1/pandoc.1
+}
+
+sha512sums="
+3628a9193d5138294bae562726bcd94567eec10fa0053d43739af04d4eba0a53bd49c2c000a5360afcac08153960a9bf2ee4be3c419cec7e5c13273e718edc80  pandoc-2.19.2.tar.gz
+172f8f57c18cc08c976b3c4853be54918fab57aaead2c272685be2183de2e8db9163c26e5f4477ed5059de08b1ed100b6508b0b1ea98c0a20cb6ef9ae6eb52cd  texmath-0.12.5.4.patch
+02013589a1acd53ffb9ef50bf76ad31b569823f8ef382a783372d0941f462aa53830e506e5b64a1755899eb25111cc912b69628c5ef1c889aec999d4d7883b5d  cabal.config
+"
--- a/backports/pandoc/cabal.config
+++ b/backports/pandoc/cabal.config
@ -0,0 +1,228 @@
+--2.19.2
+constraints: Cabal ==3.4.0.0,
+             Glob ==0.10.2,
+             HUnit ==1.6.2.0,
+             HsYAML ==0.2.1.1,
+             JuicyPixels ==3.3.8,
+             OneTuple ==0.3.1,
+             QuickCheck ==2.14.2,
+             SHA ==1.6.4.4,
+             StateVar ==1.2.2,
+             aeson ==2.1.1.0,
+             aeson-pretty ==0.8.9,
+             ansi-terminal ==0.11.4,
+             ansi-wl-pprint ==0.6.9,
+             appar ==0.1.8,
+             array ==0.5.4.0,
+             asn1-encoding ==0.9.6,
+             asn1-parse ==0.9.5,
+             asn1-types ==0.3.4,
+             assoc ==1.0.2,
+             async ==2.2.4,
+             attoparsec ==0.14.4,
+             attoparsec-iso8601 ==1.1.0.0,
+             auto-update ==0.1.6,
+             base ==4.15.0.0,
+             base-compat ==0.12.2,
+             base-compat-batteries ==0.12.2,
+             base-orphans ==0.8.7,
+             base16-bytestring ==1.0.2.0,
+             base64 ==0.4.2.4,
+             base64-bytestring ==1.2.1.0,
+             basement ==0.0.15,
+             bifunctors ==5.5.14,
+             binary ==0.8.8.0,
+             bitvec ==1.1.3.0,
+             blaze-builder ==0.4.2.2,
+             blaze-html ==0.9.1.2,
+             blaze-markup ==0.8.2.8,
+             boring ==0.2,
+             bsb-http-chunked ==0.0.0.4,
+             byteorder ==1.0.4,
+             bytestring ==0.10.12.1,
+             cabal-doctest ==1.0.9,
+             call-stack ==0.4.0,
+             case-insensitive ==1.2.1.0,
+             cereal ==0.5.8.3,
+             citeproc ==0.8.0.2,
+             cmdargs ==0.10.21,
+             colour ==2.3.6,
+             commonmark ==0.2.2,
+             commonmark-extensions ==0.2.3.3,
+             commonmark-pandoc ==0.2.1.2,
+             comonad ==5.0.8,
+             conduit ==1.3.4.3,
+             conduit-extra ==1.3.6,
+             connection ==0.3.1,
+             constraints ==0.13.4,
+             containers ==0.6.4.1,
+             contravariant ==1.5.5,
+             cookie ==0.4.6,
+             cryptonite ==0.30,
+             data-array-byte ==0.1.0.1,
+             data-default ==0.7.1.1,
+             data-default-class ==0.1.2.0,
+             data-default-instances-containers ==0.0.1,
+             data-default-instances-dlist ==0.0.1,
+             data-default-instances-old-locale ==0.0.1,
+             data-fix ==0.3.2,
+             dec ==0.0.5,
+             deepseq ==1.4.5.0,
+             digest ==0.0.1.4,
+             directory ==1.3.6.1,
+             distributive ==0.6.2.1,
+             dlist ==1.0,
+             doclayout ==0.4,
+             doctemplates ==0.10.0.2,
+             easy-file ==0.2.2,
+             emojis ==0.1.2,
+             exceptions ==0.10.4,
+             fast-logger ==3.1.1,
+             file-embed ==0.0.15.0,
+             filepath ==1.4.2.1,
+             generically ==0.1,
+             ghc-bignum ==1.0,
+             ghc-bignum-orphans ==0.1.1,
+             ghc-boot-th ==9.0.1,
+             ghc-prim ==0.7.0,
+             gridtables ==0.0.3.0,
+             haddock-library ==1.11.0,
+             happy ==1.20.0,
+             hashable ==1.4.2.0,
+             haskell-lexer ==1.1.1,
+             hourglass ==0.2.12,
+             hsc2hs ==0.68.8,
+             hslua ==2.2.1,
+             hslua-aeson ==2.2.1,
+             hslua-classes ==2.2.0,
+             hslua-core ==2.2.1,
+             hslua-marshalling ==2.2.1,
+             hslua-module-doclayout ==1.0.4,
+             hslua-module-path ==1.0.3,
+             hslua-module-system ==1.0.2,
+             hslua-module-text ==1.0.3.1,
+             hslua-module-version ==1.0.3,
+             hslua-objectorientation ==2.2.1,
+             hslua-packaging ==2.2.1,
+             http-api-data ==0.5,
+             http-client ==0.7.13.1,
+             http-client-tls ==0.3.6.1,
+             http-date ==0.0.11,
+             http-media ==0.8.0.0,
+             http-types ==0.12.3,
+             http2 ==3.0.3,
+             indexed-traversable ==0.1.2,
+             indexed-traversable-instances ==0.1.1.1,
+             integer-gmp ==1.1,
+             integer-logarithms ==1.0.3.1,
+             iproute ==1.7.12,
+             ipynb ==0.2,
+             jira-wiki-markup ==1.4.0,
+             libyaml ==0.1.2,
+             lpeg ==1.0.3,
+             lua ==2.2.1,
+             memory ==0.18.0,
+             mime-types ==0.1.1.0,
+             mmorph ==1.2.0,
+             monad-control ==1.0.3.1,
+             mono-traversable ==1.0.15.3,
+             mtl ==2.2.2,
+             network ==3.1.2.7,
+             network-byte-order ==0.1.6,
+             network-uri ==2.6.4.2,
+             old-locale ==1.0.0.7,
+             old-time ==1.1.0.3,
+             optparse-applicative ==0.17.0.0,
+             pandoc-lua-marshal ==0.1.7,
+             pandoc-types ==1.22.2.1,
+             parsec ==3.1.14.0,
+             pem ==0.2.4,
+             pretty ==1.1.3.6,
+             pretty-show ==1.10,
+             primitive ==0.7.4.0,
+             process ==1.6.11.0,
+             psqueues ==0.2.7.3,
+             random ==1.2.1.1,
+             recv ==0.0.0,
+             resourcet ==1.2.6,
+             rts ==1.0,
+             safe ==0.3.19,
+             safe-exceptions ==0.1.7.3,
+             scientific ==0.3.7.0,
+             semialign ==1.2.0.1,
+             semigroupoids ==5.3.7,
+             servant ==0.19.1,
+             servant-server ==0.19.2,
+             simple-sendfile ==0.2.30,
+             singleton-bool ==0.1.6,
+             skylighting ==0.13.2,
+             skylighting-core ==0.13.2,
+             skylighting-format-ansi ==0.1,
+             skylighting-format-blaze-html ==0.1.1,
+             skylighting-format-context ==0.1.0.1,
+             skylighting-format-latex ==0.1,
+             socks ==0.6.1,
+             some ==1.0.4.1,
+             sop-core ==0.5.0.2,
+             split ==0.2.3.5,
+             splitmix ==0.1.0.4,
+             stm ==2.5.0.0,
+             streaming-commons ==0.2.2.5,
+             strict ==0.4.0.1,
+             string-conversions ==0.4.0.1,
+             syb ==0.7.2.2,
+             tagged ==0.8.6.1,
+             tagsoup ==0.14.8,
+             template-haskell ==2.17.0.0,
+             temporary ==1.3,
+             texmath ==0.12.5.4,
+             text ==1.2.4.1,
+             text-conversions ==0.3.1.1,
+             text-short ==0.1.5,
+             th-abstraction ==0.4.5.0,
+             th-compat ==0.1.4,
+             th-lift ==0.8.2,
+             th-lift-instances ==0.1.20,
+             these ==1.1.1.1,
+             time ==1.9.3,
+             time-compat ==1.9.6.1,
+             time-manager ==0.0.0,
+             tls ==1.6.0,
+             transformers ==0.5.6.2,
+             transformers-base ==0.4.6,
+             transformers-compat ==0.7.2,
+             type-equality ==1,
+             typed-process ==0.2.10.1,
+             unicode-collation ==0.1.3.3,
+             unicode-data ==0.4.0.1,
+             unicode-transforms ==0.4.0.1,
+             uniplate ==1.6.13,
+             unix ==2.7.2.2,
+             unix-compat ==0.6,
+             unix-time ==0.4.8,
+             unliftio ==0.2.23.0,
+             unliftio-core ==0.2.0.1,
+             unordered-containers ==0.2.19.1,
+             utf8-string ==1.0.2,
+             uuid-types ==1.0.5,
+             vault ==0.3.1.5,
+             vector ==0.13.0.0,
+             vector-algorithms ==0.9.0.1,
+             vector-stream ==0.1.0.0,
+             wai ==3.2.3,
+             wai-app-static ==3.1.7.4,
+             wai-extra ==3.1.13.0,
+             wai-logger ==2.4.0,
+             warp ==3.3.23,
+             witherable ==0.4.2,
+             word8 ==0.1.3,
+             x509 ==1.7.7,
+             x509-store ==1.6.9,
+             x509-system ==1.6.7,
+             x509-validation ==1.6.12,
+             xml ==1.3.14,
+             xml-conduit ==1.9.1.1,
+             xml-types ==0.3.8,
+             yaml ==0.11.8.0,
+             zip-archive ==0.4.2.2,
+             zlib ==0.6.3.0
--- a/backports/pandoc/texmath-0.12.5.4.patch
+++ b/backports/pandoc/texmath-0.12.5.4.patch
@ -0,0 +1,13 @@
+diff --git a/test/writer.ms b/test/writer.ms
+index 9df9083..836d7a2 100644
+--- a/test/writer.ms
+++ b/test/writer.ms
+@@ -700,7 +700,7 @@ LaTeX
+ .IP \[bu] 3
+ Here\[cq]s some display math:
+ .EQ
+-d over {d x} f left ( x right ) = lim sub {h -> 0} {f left ( x + h right ) \[u2212] f left ( x right )} over h
+d over {d x} f left ( x right ) = lim sub {h -> 0} {f left ( x + h right ) - f left ( x right )} over h
+ .EN
+ .IP \[bu] 3
+ Here\[cq]s one that has a line break in it: @alpha + omega times x sup 2@.
--- a/backports/php8-pecl-inotify/APKBUILD
+++ b/backports/php8-pecl-inotify/APKBUILD
@ -0,0 +1,33 @@
+# Contributor: Fabio Ribeiro <fabiorphp@gmail.com>
+# Maintainer: Andy Postnikov <apostnikov@gmail.com>
+pkgname=php8-pecl-inotify
+_extname=inotify
+pkgver=3.0.0
+pkgrel=0
+pkgdesc="Inotify bindings for PHP 8"
+url="https://pecl.php.net/package/inotify"
+arch="all"
+license="PHP-3.01"
+depends="php8-common"
+makedepends="php8-dev"
+source="php-pecl-$_extname-$pkgver.tgz::https://pecl.php.net/get/$_extname-$pkgver.tgz"
+builddir="$srcdir"/$_extname-$pkgver
+
+build() {
+	phpize8
+	./configure --prefix=/usr --with-php-config=php-config8
+	make
+}
+
+check() {
+	make NO_INTERACTION=1 REPORT_EXIT_STATUS=1 test
+}
+
+package() {
+	make INSTALL_ROOT="$pkgdir" install
+	local _confdir="$pkgdir"/etc/php8/conf.d
+	install -d $_confdir
+	echo "extension=$_extname" > $_confdir/70_$_extname.ini
+}
+
+sha512sums="f8b29f8611f16b92136ab8de89181c254bba1abee1e61cac2344440567a3155aae4b9b54b10fdb1b0254fd7a96da8c14b7dc5c9f7f08a03db30ab1645aca1eee  php-pecl-inotify-3.0.0.tgz"
--- a/backports/py3-anyio/APKBUILD
+++ b/backports/py3-anyio/APKBUILD
@ -0,0 +1,45 @@
+# Contributor: Michał Polański <michal@polanski.me>
+# Maintainer: Michał Polański <michal@polanski.me>
+pkgname=py3-anyio
+pkgver=3.6.2
+pkgrel=1
+pkgdesc="High level compatibility layer for multiple asynchronous event loop implementations"
+url="https://github.com/agronholm/anyio"
+license="MIT"
+arch="noarch !armhf !ppc64le" # limited by py3-uvloop
+depends="python3 py3-idna py3-sniffio"
+makedepends="py3-setuptools py3-setuptools_scm"
+# change this when 4.x releases and upgrade py3-trio
+checkdepends="py3-pytest py3-pytest-mock py3-hypothesis py3-trustme py3-trio<0.22 py3-uvloop"
+source="https://github.com/agronholm/anyio/archive/$pkgver/py3-anyio-$pkgver.tar.gz"
+builddir="$srcdir/anyio-$pkgver"
+
+case "$CARCH" in
+x86*)
+	# weird dns resolution errors on builders
+	options="$options !check"
+	;;
+esac
+
+export SETUPTOOLS_SCM_PRETEND_VERSION=$pkgver
+
+build() {
+	python3 setup.py build
+}
+
+check() {
+	python3 setup.py install --root="$PWD/test_install" --skip-build
+
+	# Behavior of getaddrinfo differs between event loop implementations
+	# on musl-based systems
+	PYTHONPATH="$(echo $PWD/test_install/usr/lib/python3*/site-packages)" pytest \
+		--deselect tests/test_sockets.py::test_getaddrinfo_ipv6addr
+}
+
+package() {
+	python3 setup.py install --root="$pkgdir" --skip-build
+}
+
+sha512sums="
+4a0d3dd11393bd3d7a99d3365825df14d70fa14fa6ddf0e3f9eb9affcde7a9ac1f9e5ba38d6ac9b7f246ba9e7d4bea0dd9c8049f1dc8beadbe6b4b803571fc21  py3-anyio-3.6.2.tar.gz
+"
--- a/backports/py3-cbor2/APKBUILD
+++ b/backports/py3-cbor2/APKBUILD
@ -11,6 +11,7 @@ depends="
 	python3
 	"
 makedepends="
+	py3-pip
 	py3-setuptools
 	py3-setuptools_scm
 	py3-wheel
--- a/backports/py3-gitlab/APKBUILD
+++ b/backports/py3-gitlab/APKBUILD
@ -0,0 +1,49 @@
+# Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
+pkgname=py3-gitlab
+_pyname=${pkgname/py3/python}
+pkgver=3.12.0
+pkgrel=1
+pkgdesc="Python wrapper for Gitlab's API"
+url="https://github.com/python-gitlab/python-gitlab"
+arch="noarch"
+license="LGPL-3.0-or-later"
+depends="python3 py3-requests py3-requests-toolbelt"
+makedepends="
+	py3-setuptools
+	py3-gpep517
+	py3-installer
+	py3-wheel
+	py3-sphinx
+	py3-sphinxcontrib-autoprogram
+	py3-myst-parser
+	"
+checkdepends="py3-pytest py3-responses"
+option="!check"
+subpackages="$pkgname-doc"
+source="$pkgname-$pkgver.tar.gz::https://github.com/python-gitlab/python-gitlab/archive/refs/tags/v$pkgver.tar.gz"
+builddir="$srcdir/$_pyname-$pkgver"
+
+build() {
+	gpep517 build-wheel \
+		--wheel-dir dist \
+		--output-fd 3 3>&1 >&2
+	sphinx-build -W -b man docs/ man/
+}
+
+check() {
+	sed -i "s|/usr/bin/false|/bin/false|g" tests/unit/test_config.py
+	python3 -m venv --system-site-packages testenv
+	testenv/bin/python3 -m installer dist/*.whl
+	testenv/bin/python3 -m pytest --ignore=tests/functional/
+}
+
+package() {
+	python3 -m installer -d "$pkgdir" \
+		dist/*.whl
+	install -Dm644 man/$_pyname.1 \
+		"$pkgdir"/usr/share/man/man1/$_pyname.1
+}
+
+sha512sums="
+25229542fcb790dfc96bb5f946628136dce342ae825edc7ed318651dac9840ec16f896198c357a4751bde8cda7ee7abb3fbc1f4e4abfa5a3cce7bc61f956f2e6  py3-gitlab-3.12.0.tar.gz
+"
--- a/backports/py3-gnupg/APKBUILD
+++ b/backports/py3-gnupg/APKBUILD
@ -0,0 +1,31 @@
+# Contributor: Rasmus Thomsen <oss@cogitri.dev>
+# Maintainer: Rasmus Thomsen <oss@cogitri.dev>
+pkgname=py3-gnupg
+pkgver=0.5.0
+pkgrel=1
+pkgdesc="Python3 wrapper for the Gnu Privacy Guard (GPG or GnuPG)"
+url="https://gnupg.readthedocs.io/en/latest/"
+arch="noarch"
+license="BSD-3-Clause"
+depends="python3 gnupg"
+makedepends="py3-setuptools py3-wheel py3-build py3-installer"
+checkdepends="py3-pytest"
+source="https://pypi.io/packages/source/p/python-gnupg/python-gnupg-$pkgver.tar.gz"
+builddir="$srcdir/python-gnupg-$pkgver"
+
+build() {
+	python3 -m build --no-isolation --wheel
+}
+
+check() {
+	NO_EXTERNAL_TESTS=no pytest -v
+}
+
+package() {
+	python3 -m installer -d "$pkgdir" \
+		dist/python_gnupg-$pkgver-py2.py3-none-any.whl
+}
+
+sha512sums="
+cfd302257b53fdc9318004db7323ea5bf4bddc055b65b24386a1ecb27cd476fdf1bc771adcdde70a4eef442982a0c57dc832b92274bbe5ba16cbdf3247f4e77a  python-gnupg-0.5.0.tar.gz
+"
--- a/backports/py3-httpcore/APKBUILD
+++ b/backports/py3-httpcore/APKBUILD
@ -0,0 +1,52 @@
+# Contributor: Michał Polański <michal@polanski.me>
+# Maintainer: Michał Polański <michal@polanski.me>
+pkgname=py3-httpcore
+pkgver=0.15.0
+pkgrel=2
+pkgdesc="Minimal HTTP client"
+url="https://www.encode.io/httpcore/"
+license="BSD-3-Clause"
+arch="noarch !armhf !ppc64le" # limited by py3-anyio
+depends="
+	python3
+	py3-anyio
+	py3-certifi
+	py3-h11
+	py3-sniffio
+	py3-trio<0.22
+	"
+makedepends="py3-setuptools"
+checkdepends="
+	py3-h2
+	py3-hpack
+	py3-hyperframe
+	py3-pytest
+	py3-pytest-asyncio
+	py3-pytest-httpbin
+	py3-pytest-trio
+	py3-socksio
+	"
+subpackages="$pkgname-doc"
+source="https://github.com/encode/httpcore/archive/$pkgver/py3-httpcore-$pkgver.tar.gz
+	pytest-asyncio-warning.patch
+	"
+builddir="$srcdir/httpcore-$pkgver"
+
+build() {
+	python3 setup.py build
+}
+
+check() {
+	PYTHONPATH="$PWD/build/lib" pytest
+}
+
+package() {
+	python3 setup.py install --root="$pkgdir" --skip-build
+
+	install -Dm644 LICENSE.md "$pkgdir"/usr/share/licenses/$pkgname/LICENSE.md
+}
+
+sha512sums="
+3c25630d582448e3c7d46176c8862e4d92c6c4aac954bfe46b06e26297b32f996db2e002a87c7187accb5bf4ef86e82d7f9051404bee651ce5254119571d0c95  py3-httpcore-0.15.0.tar.gz
+28aa7bc050d56a09df5eb19c2edc8eda389a77c73c043945dcf74f8832387849d7a08c9366c403f451c65ab888720fcc4c5d233d3fb9a6628e91800f6c82ab3f  pytest-asyncio-warning.patch
+"
--- a/backports/py3-httpcore/pytest-asyncio-warning.patch
+++ b/backports/py3-httpcore/pytest-asyncio-warning.patch
@ -0,0 +1,11 @@
+looks like upstream enabled a pytest equivalent of -Werror without testing too much
+--- a/setup.cfg
+++ b/setup.cfg
+@@ -29,6 +29,7 @@
+     ignore:unclosed <(socket\.socket|ssl\.SSLSocket) .*:ResourceWarning
+     ignore:ssl\.wrap_socket\(\) is deprecated, use SSLContext\.wrap_socket\(\):DeprecationWarning
+     ignore:ssl\.PROTOCOL_TLS is deprecated:DeprecationWarning
+    ignore:The 'asyncio_mode' default value will change:DeprecationWarning
+ 
+ [coverage:run]
+ omit = venv/*, httpcore/_sync/*
--- a/backports/py3-httpx/APKBUILD
+++ b/backports/py3-httpx/APKBUILD
@ -0,0 +1,44 @@
+# Contributor: Michał Polański <michal@polanski.me>
+# Maintainer: Michał Polański <michal@polanski.me>
+pkgname=py3-httpx
+pkgver=0.23.0
+pkgrel=1
+pkgdesc="Next generation HTTP client for Python"
+url="https://www.python-httpx.org/"
+license="BSD-3-Clause"
+arch="noarch !armhf !ppc64le" # limited by py3-httpcore
+depends="
+	python3
+	py3-certifi
+	py3-httpcore
+	py3-idna
+	py3-rfc3986
+	py3-sniffio
+	"
+makedepends="py3-setuptools"
+checkdepends="py3-pytest py3-pytest-asyncio py3-pytest-trio py3-socksio py3-trustme uvicorn"
+subpackages="$pkgname-doc"
+source="https://github.com/encode/httpx/archive/$pkgver/py3-httpx-$pkgver.tar.gz
+	relax-dependencies.patch
+	"
+builddir="$srcdir/httpx-$pkgver"
+options="!check" # cyclic dependency on uvicorn
+
+build() {
+	python3 setup.py build
+}
+
+check() {
+	PYTHONPATH="$PWD/build/lib" pytest
+}
+
+package() {
+	python3 setup.py install --root="$pkgdir" --skip-build
+
+	install -Dm644 LICENSE.md "$pkgdir"/usr/share/licenses/$pkgname/LICENSE.md
+}
+
+sha512sums="
+3cfdf2b3b2f15967a1eec0be05ed947c5e18a46576b68a9cbfd5147dfd4736cb7c389f5431732b93f3a11f3ec6c6f25f7cbb3d96d845f00b58e2b8dae047c1d5  py3-httpx-0.23.0.tar.gz
+dc64c27e15116fdd061972747f96caedda4e4f73ca4545e77785d8c319763d55701f059339a502edc709441e21076e689caf113484986d0cb4a09b569b41603a  relax-dependencies.patch
+"
--- a/backports/py3-httpx/relax-dependencies.patch
+++ b/backports/py3-httpx/relax-dependencies.patch
@ -0,0 +1,13 @@
+Relax dependencies
+
+--- a/setup.py
+++ b/setup.py
+@@ -58,7 +58,7 @@ setup(
+     install_requires=[
+         "certifi",
+         "sniffio",
+-        "rfc3986[idna2008]>=1.3,<2",
+        "rfc3986[idna2008]",
+         "httpcore>=0.15.0,<0.16.0",
+     ],
+     extras_require={
--- a/backports/py3-nose2/APKBUILD
+++ b/backports/py3-nose2/APKBUILD
@ -0,0 +1,26 @@
+# Maintainer: psykose <alice@ayaya.dev>
+pkgname=py3-nose2
+pkgver=0.12.0
+pkgrel=1
+pkgdesc="Successor to nose, based on unittest"
+url="https://docs.nose2.io/en/latest/"
+arch="noarch"
+license="LGPL-2.0-or-later"
+depends="python3"
+makedepends="py3-setuptools"
+source="https://github.com/nose-devs/nose2/archive/refs/tags/$pkgver/nose2-$pkgver.tar.gz"
+options="!check" # don't work
+builddir="$srcdir/nose2-$pkgver"
+
+build() {
+	rm -rf nose2/tests
+	python3 setup.py build
+}
+
+package() {
+	python3 setup.py install --root="$pkgdir" --skip-build
+}
+
+sha512sums="
+7f1462613b7d38a77cd0764f721be4223b8f4ae4694c49ba416a076c321e07484969ee1a7c2d2f89484c0c3b2a96e74d6a42321981af4930ebe5f63f07df7755  nose2-0.12.0.tar.gz
+"
--- a/backports/py3-python-jwt/APKBUILD
+++ b/backports/py3-python-jwt/APKBUILD
@ -0,0 +1,30 @@
+# Contributor: Rejah Rehim <rejah@beaglesecurity.com>
+# Maintainer: Rejah Rehim <rejah@beaglesecurity.com>
+pkgname=py3-python-jwt
+_pkgname=python_jwt
+pkgver=4.0.0
+pkgrel=0
+pkgdesc="Module for generating and verifying JSON Web Tokens"
+options="!check" # no test suite
+url="https://github.com/davedoesdev/python-jwt"
+arch="noarch"
+license="MIT"
+depends="python3 py3-jwcrypto"
+makedepends="py3-setuptools"
+subpackages="$pkgname-doc"
+source="https://files.pythonhosted.org/packages/source/p/$_pkgname/$_pkgname-$pkgver.tar.gz"
+builddir="$srcdir"/$_pkgname-$pkgver
+
+build() {
+	python3 setup.py build
+}
+
+package() {
+	python3 setup.py install --skip-build --root="$pkgdir"
+	install -Dm644 LICENCE "$pkgdir"/usr/share/licenses/$pkgname/LICENCE
+	install -Dm644 README.md "$pkgdir"/usr/share/licenses/$pkgname/README.md
+}
+
+sha512sums="
+94c6ebd7738da3087b7192f3eff3e6af3aa7dce3f38cd0e001261e61a5aa42e03fa08d76bb56b7d033ee64723a428bfbad480b6d46934c9b1ef446f613b1cbe0  python_jwt-4.0.0.tar.gz
+"
--- a/backports/py3-rapidjson/APKBUILD
+++ b/backports/py3-rapidjson/APKBUILD
@ -0,0 +1,51 @@
+# Contributor: Marian Buschsieweke <marian.buschsieweke@ovgu.de>
+# Maintainer: Marian Buschsieweke <marian.buschsieweke@ovgu.de>
+pkgname=py3-rapidjson
+pkgver=1.9
+pkgrel=1
+pkgdesc="Python3 wrapper around RapidJSON"
+url="https://github.com/python-rapidjson/python-rapidjson"
+arch="all"
+license="MIT"
+depends="
+	python3
+	"
+makedepends="
+	py3-setuptools
+	rapidjson-dev
+	python3-dev
+	"
+checkdepends="
+	py3-pytest
+	py3-tz
+	"
+source="$pkgname-$pkgver.tar.gz::https://github.com/python-rapidjson/python-rapidjson/archive/refs/tags/v$pkgver.tar.gz"
+builddir="$srcdir/"python-rapidjson-$pkgver
+
+build() {
+	python3 setup.py \
+		--rj-include-dir=/usr/include/rapidjson \
+		build
+}
+
+check() {
+	PYTHONPATH="$(echo "$PWD"/build/lib.linux*)" pytest \
+		--ignore benchmarks \
+		--deselect tests/test_base_types.py::test_base_values \
+		--deselect tests/test_unicode.py::test_unicode_decode_error \
+		--deselect tests/test_validator.py::test_additional_and_pattern_properties_valid \
+		#
+}
+
+package() {
+	python3 setup.py \
+		--rj-include-dir=/usr/include/rapidjson \
+		install \
+		--skip-build \
+		--prefix=/usr \
+		--root="$pkgdir"
+}
+
+sha512sums="
+d3f4c06d021058ea42f01f676e77dfa84997a681d548582060d20713878ecf73ada257186026847de43718764078f7e3a2467a165fa6d8b15b2f3e3d4bded4e1  py3-rapidjson-1.9.tar.gz
+"
--- a/backports/py3-redis/0001-all-remove-support-for-nonfree-Redis-modules.patch
+++ b/backports/py3-redis/0001-all-remove-support-for-nonfree-Redis-modules.patch
--- a/backports/py3-redis/0002-Drop-tests-test_ssl.py.patch
+++ b/backports/py3-redis/0002-Drop-tests-test_ssl.py.patch
@ -0,0 +1,183 @@
+From 9bf9f40f41141942be166966ec434720da5b85bd Mon Sep 17 00:00:00 2001
+From: Drew DeVault <sir@cmpwn.com>
+Date: Wed, 29 Dec 2021 10:16:53 +0100
+Subject: [PATCH 2/2] Drop tests/test_ssl.py
+
+This test expects to be run in the upstream project's CI enviornment.
+
+Ref https://github.com/redis/redis-py/issues/1838
+---
+ tests/test_ssl.py | 161 ----------------------------------------------
+ 1 file changed, 161 deletions(-)
+ delete mode 100644 tests/test_ssl.py
+
+diff --git a/tests/test_ssl.py b/tests/test_ssl.py
+deleted file mode 100644
+index a2f66b2..0000000
+--- a/tests/test_ssl.py
+++ /dev/null
+@@ -1,161 +0,0 @@
+-import os
+-import socket
+-import ssl
+-from urllib.parse import urlparse
+-
+-import pytest
+-
+-import redis
+-from redis.exceptions import ConnectionError, RedisError
+-
+-from .conftest import skip_if_cryptography, skip_if_nocryptography
+-
+-
+-@pytest.mark.ssl
+-class TestSSL:
+-    """Tests for SSL connections
+-
+-    This relies on the --redis-ssl-url purely for rebuilding the client
+-    and connecting to the appropriate port.
+-    """
+-
+-    ROOT = os.path.join(os.path.dirname(__file__), "..")
+-    CERT_DIR = os.path.abspath(os.path.join(ROOT, "docker", "stunnel", "keys"))
+-    if not os.path.isdir(CERT_DIR):  # github actions package validation case
+-        CERT_DIR = os.path.abspath(
+-            os.path.join(ROOT, "..", "docker", "stunnel", "keys")
+-        )
+-        if not os.path.isdir(CERT_DIR):
+-            raise IOError(f"No SSL certificates found. They should be in {CERT_DIR}")
+-
+-    def test_ssl_with_invalid_cert(self, request):
+-        ssl_url = request.config.option.redis_ssl_url
+-        sslclient = redis.from_url(ssl_url)
+-        with pytest.raises(ConnectionError) as e:
+-            sslclient.ping()
+-            assert "SSL: CERTIFICATE_VERIFY_FAILED" in str(e)
+-
+-    def test_ssl_connection(self, request):
+-        ssl_url = request.config.option.redis_ssl_url
+-        p = urlparse(ssl_url)[1].split(":")
+-        r = redis.Redis(host=p[0], port=p[1], ssl=True, ssl_cert_reqs="none")
+-        assert r.ping()
+-
+-    def test_ssl_connection_without_ssl(self, request):
+-        ssl_url = request.config.option.redis_ssl_url
+-        p = urlparse(ssl_url)[1].split(":")
+-        r = redis.Redis(host=p[0], port=p[1], ssl=False)
+-
+-        with pytest.raises(ConnectionError) as e:
+-            r.ping()
+-            assert "Connection closed by server" in str(e)
+-
+-    def test_validating_self_signed_certificate(self, request):
+-        ssl_url = request.config.option.redis_ssl_url
+-        p = urlparse(ssl_url)[1].split(":")
+-        r = redis.Redis(
+-            host=p[0],
+-            port=p[1],
+-            ssl=True,
+-            ssl_certfile=os.path.join(self.CERT_DIR, "server-cert.pem"),
+-            ssl_keyfile=os.path.join(self.CERT_DIR, "server-key.pem"),
+-            ssl_cert_reqs="required",
+-            ssl_ca_certs=os.path.join(self.CERT_DIR, "server-cert.pem"),
+-        )
+-        assert r.ping()
+-
+-    def _create_oscp_conn(self, request):
+-        ssl_url = request.config.option.redis_ssl_url
+-        p = urlparse(ssl_url)[1].split(":")
+-        r = redis.Redis(
+-            host=p[0],
+-            port=p[1],
+-            ssl=True,
+-            ssl_certfile=os.path.join(self.CERT_DIR, "server-cert.pem"),
+-            ssl_keyfile=os.path.join(self.CERT_DIR, "server-key.pem"),
+-            ssl_cert_reqs="required",
+-            ssl_ca_certs=os.path.join(self.CERT_DIR, "server-cert.pem"),
+-            ssl_validate_ocsp=True,
+-        )
+-        return r
+-
+-    @skip_if_cryptography()
+-    def test_ssl_ocsp_called(self, request):
+-        r = self._create_oscp_conn(request)
+-        with pytest.raises(RedisError) as e:
+-            assert r.ping()
+-            assert "cryptography not installed" in str(e)
+-
+-    @skip_if_nocryptography()
+-    def test_ssl_ocsp_called_withcrypto(self, request):
+-        r = self._create_oscp_conn(request)
+-        with pytest.raises(ConnectionError) as e:
+-            assert r.ping()
+-            assert "No AIA information present in ssl certificate" in str(e)
+-
+-        # rediss://, url based
+-        ssl_url = request.config.option.redis_ssl_url
+-        sslclient = redis.from_url(ssl_url)
+-        with pytest.raises(ConnectionError) as e:
+-            sslclient.ping()
+-            assert "No AIA information present in ssl certificate" in str(e)
+-
+-    @skip_if_nocryptography()
+-    def test_valid_ocsp_cert_http(self):
+-        from redis.ocsp import OCSPVerifier
+-
+-        hostnames = ["github.com", "aws.amazon.com", "ynet.co.il", "microsoft.com"]
+-        for hostname in hostnames:
+-            context = ssl.create_default_context()
+-            with socket.create_connection((hostname, 443)) as sock:
+-                with context.wrap_socket(sock, server_hostname=hostname) as wrapped:
+-                    ocsp = OCSPVerifier(wrapped, hostname, 443)
+-                    assert ocsp.is_valid()
+-
+-    @skip_if_nocryptography()
+-    def test_revoked_ocsp_certificate(self):
+-        from redis.ocsp import OCSPVerifier
+-
+-        context = ssl.create_default_context()
+-        hostname = "revoked.badssl.com"
+-        with socket.create_connection((hostname, 443)) as sock:
+-            with context.wrap_socket(sock, server_hostname=hostname) as wrapped:
+-                ocsp = OCSPVerifier(wrapped, hostname, 443)
+-                assert ocsp.is_valid() is False
+-
+-    @skip_if_nocryptography()
+-    def test_unauthorized_ocsp(self):
+-        from redis.ocsp import OCSPVerifier
+-
+-        context = ssl.create_default_context()
+-        hostname = "stackoverflow.com"
+-        with socket.create_connection((hostname, 443)) as sock:
+-            with context.wrap_socket(sock, server_hostname=hostname) as wrapped:
+-                ocsp = OCSPVerifier(wrapped, hostname, 443)
+-                with pytest.raises(ConnectionError):
+-                    ocsp.is_valid()
+-
+-    @skip_if_nocryptography()
+-    def test_ocsp_not_present_in_response(self):
+-        from redis.ocsp import OCSPVerifier
+-
+-        context = ssl.create_default_context()
+-        hostname = "google.co.il"
+-        with socket.create_connection((hostname, 443)) as sock:
+-            with context.wrap_socket(sock, server_hostname=hostname) as wrapped:
+-                ocsp = OCSPVerifier(wrapped, hostname, 443)
+-                assert ocsp.is_valid() is False
+-
+-    @skip_if_nocryptography()
+-    def test_unauthorized_then_direct(self):
+-        from redis.ocsp import OCSPVerifier
+-
+-        # these certificates on the socket end return unauthorized
+-        # then the second call succeeds
+-        hostnames = ["wikipedia.org", "squarespace.com"]
+-        for hostname in hostnames:
+-            context = ssl.create_default_context()
+-            with socket.create_connection((hostname, 443)) as sock:
+-                with context.wrap_socket(sock, server_hostname=hostname) as wrapped:
+-                    ocsp = OCSPVerifier(wrapped, hostname, 443)
+-                    assert ocsp.is_valid()
+-- 
+2.34.1
+
--- a/backports/py3-redis/APKBUILD
+++ b/backports/py3-redis/APKBUILD
@ -0,0 +1,42 @@
+# Maintainer: Eivind Uggedal <eu@eju.no>
+pkgname=py3-redis
+_pkgname=redis
+pkgver=4.1.0
+pkgrel=1
+pkgdesc="Python3 client for Redis key-value store"
+url="https://github.com/andymccurdy/redis-py"
+arch="noarch"
+license="MIT"
+depends="python3 py3-deprecated py3-hiredis"
+makedepends="py3-setuptools"
+checkdepends="py3-pytest py3-mock redis"
+source="
+	https://files.pythonhosted.org/packages/source/${_pkgname:0:1}/$_pkgname/$_pkgname-$pkgver.tar.gz
+	0001-all-remove-support-for-nonfree-Redis-modules.patch
+	0002-Drop-tests-test_ssl.py.patch
+"
+builddir="$srcdir"/$_pkgname-$pkgver
+options="!check" # tests fail due to old version + disabled proprietary redis features
+
+replaces="py-redis" # Backwards compatibility
+provides="py-redis=$pkgver-r$pkgrel" # Backwards compatibility
+
+build() {
+	python3 setup.py build
+}
+
+check() (
+	redis-server --dir "$builddir" &
+	trap "kill $!" EXIT
+	pytest
+)
+
+package() {
+	python3 setup.py install --skip-build --root="$pkgdir"
+}
+
+sha512sums="
+85cd09570f4faf34a735befd0677aa8ca2cb0d62b0285c4c040380c2440f2774e47762ec4219381294465343353a15804b96f06b4d6eefa7159a224eb9e72001  redis-4.1.0.tar.gz
+b1dd96aeb6129f121108fac3c1ad033b1b657287fb0f959bc7fcab997b26c4b91cc7c0df6f86d6d2ac283951956a4a38826647f0e744514ce5031cf3917d1746  0001-all-remove-support-for-nonfree-Redis-modules.patch
+5184efc472ad16020240e57222f906656b1f6db5139d37de22b34298c7a15c9b91f5c2d976f6c8455071459d2ff273f75f6bf76f3f46990bacec6673a83a2872  0002-Drop-tests-test_ssl.py.patch
+"
--- a/backports/py3-setuptools/APKBUILD
+++ b/backports/py3-setuptools/APKBUILD
@ -0,0 +1,83 @@
+# Contributor: Andrew Manison <amanison@anselsystems.com>
+# Contributor: Fabian Affolter <fabian@affolter-engineering.ch>
+# Contributor: Leo <thinkabit.ukim@gmail.com>
+# Maintainer: psykose <alice@ayaya.dev>
+pkgname=py3-setuptools
+_pkgname=${pkgname#py3-}
+pkgver=65.7.0
+pkgrel=0
+pkgdesc="Collection of enhancements to the Python3 distutils"
+options="!check" # Tests require packages out of main/
+url="https://pypi.python.org/pypi/setuptools"
+arch="noarch"
+license="MIT"
+# everything is vendored
+depends="
+	py3-packaging
+	python3
+	"
+# depends="
+# 	py3-appdirs
+# 	py3-more-itertools
+# 	py3-ordered-set
+# 	py3-packaging
+# 	py3-parsing
+# 	python3
+# 	"
+makedepends="py3-setuptools-stage0"
+source="$_pkgname-$pkgver.tar.gz::https://github.com/pypa/$_pkgname/archive/v$pkgver.tar.gz"
+builddir="$srcdir"/$_pkgname-$pkgver
+
+provides="py-setuptools=$pkgver-r$pkgrel" # Backwards compatibility
+replaces="py-setuptools" # Backwards compatiblity
+
+# py3-setuptools needs itself to build, bootstrapped with a lower version
+# in main/py3-setuptools-stage0
+provides="$provides py3-setuptools-bootstrap"
+provider_priority=100 # highest
+
+export SETUPTOOLS_INSTALL_WINDOWS_SPECIFIC_FILES=0
+
+prepare() {
+	default_prepare
+
+	# Unbundle
+	# rm -rf pkg_resources/extern pkg_resources/_vendor \
+	# 	setuptools/extern setuptools/_vendor
+
+	# Upstream devendoring logic is badly broken, see:
+	# https://bugs.archlinux.org/task/58670
+	# https://github.com/pypa/pip/issues/5429
+	# https://github.com/pypa/setuptools/issues/1383
+	# The simplest fix is to simply rewrite import paths to use the canonical
+	# location in the first place
+	# for _module in setuptools pkg_resources '' ; do
+	# 	find . -name \*.py -exec sed -i \
+	# 		-e 's/from '$_module.extern' import/import/' \
+	# 		-e 's/from '$_module.extern'./from /' \
+	# 		-e 's/import '$_module.extern'./import /' \
+	# 		-e "s/__import__('$_module.extern./__import__('/" \
+	# 		{} +
+	# done
+
+	# Fix post-release tag
+	sed -e '/tag_build = .post/d' \
+		-e '/tag_date = 1/d' \
+		-i setup.cfg
+}
+
+build() {
+	python3 setup.py build
+}
+
+package() {
+	# Otherwise it complains that build/scripts-3.10 cannot be found
+	# no other changes noted
+	mkdir -p build/scripts-3.11
+
+	python3 setup.py install --root="$pkgdir" --skip-build
+}
+
+sha512sums="
+864bdd80acc65c34c472c9401ee6eadee057871b2f10793720887b43354bce08a2201e79fcf92767ddf46912285c46df88ec7733cca25982537e0bd51529e409  setuptools-65.7.0.tar.gz
+"
--- a/backports/py3-socksio/APKBUILD
+++ b/backports/py3-socksio/APKBUILD
@ -0,0 +1,33 @@
+# Contributor: Michał Polański <michal@polanski.me>
+# Maintainer: Michał Polański <michal@polanski.me>
+pkgname=py3-socksio
+pkgver=1.0.0
+pkgrel=1
+pkgdesc="Sans-I/O implementation of SOCKS4, SOCKS4A, and SOCKS5"
+url="https://pypi.org/project/socksio/"
+license="MIT"
+arch="noarch"
+depends="python3"
+makedepends="py3-setuptools"
+checkdepends="py3-pytest py3-pytest-cov"
+subpackages="$pkgname-doc"
+source="$pkgname-$pkgver.tar.gz::https://files.pythonhosted.org/packages/source/s/socksio/socksio-$pkgver.tar.gz"
+builddir="$srcdir/socksio-$pkgver"
+
+build() {
+	python3 setup.py build
+}
+
+check() {
+	PYTHONPATH="$PWD/build/lib" pytest
+}
+
+package() {
+	python3 setup.py install --root="$pkgdir" --skip-build
+
+	install -Dm644 LICENSE "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
+}
+
+sha512sums="
+89bce7294555e2623df68e99352c27b83af38a4fcc4e3b86c8826c9c4bf545eeaf0a6328b000cfe1d286fa442c756c4579b4887cff03bc9e559cd66414a7ac6f  py3-socksio-1.0.0.tar.gz
+"
--- a/backports/py3-sphinxcontrib-autoprogram/APKBUILD
+++ b/backports/py3-sphinxcontrib-autoprogram/APKBUILD
@ -0,0 +1,34 @@
+# Maintainer: Hoang Nguyen <folliekazetani@protonmail.com>
+pkgname=py3-sphinxcontrib-autoprogram
+pkgver=0.1.7
+pkgrel=2
+pkgdesc="Sphinx extension to document CLI programs"
+url="https://github.com/sphinx-contrib/autoprogram"
+arch="noarch"
+license="BSD-2-Clause"
+depends="python3 py3-six py3-sphinx"
+makedepends="py3-setuptools"
+source="
+	$pkgname-$pkgver.tar.gz::https://github.com/sphinx-contrib/autoprogram/archive/refs/tags/$pkgver.tar.gz
+	fix-argparse-output-py310.patch
+	"
+builddir="$srcdir/autoprogram-$pkgver"
+# fail with new docutils
+options="!check"
+
+build() {
+	python3 setup.py build
+}
+
+check() {
+	python3 setup.py test
+}
+
+package() {
+	python3 setup.py install --skip-build --root="$pkgdir"
+}
+
+sha512sums="
+81679a8bed93274193efb5ac784d72280db32f37156aca5a422af6c8e8abd6d4e4a22e070ee73e9b3194eacf22a8228be0df3329f6fd6a0ff2408a3c7973c8a7  py3-sphinxcontrib-autoprogram-0.1.7.tar.gz
+2405814d8cf546b6078e8d3c854943e1b5603cbc52558dad67fcaf7a729e1f6a29ae049e1172fe4612ccb20f0209ddebedf7c2a214602f1d6b7720b2fbcf0caa  fix-argparse-output-py310.patch
+"
--- a/backports/py3-sphinxcontrib-autoprogram/fix-argparse-output-py310.patch
+++ b/backports/py3-sphinxcontrib-autoprogram/fix-argparse-output-py310.patch
@ -0,0 +1,19 @@
+Patch-Source: https://github.com/sphinx-contrib/autoprogram/pull/25
+
+diff --git a/sphinxcontrib/autoprogram.py b/sphinxcontrib/autoprogram.py
+index c60cf68..0e7d9a0 100644
+--- a/sphinxcontrib/autoprogram.py
+++ b/sphinxcontrib/autoprogram.py
+@@ -476,7 +476,11 @@ class ScannerTestCase(unittest.TestCase):
+         # section: default optionals
+         program, options, group = sections[1]
+         self.assertEqual([], program)
+-        self.assertEqual("optional arguments", group.title)
+        # See https://github.com/sphinx-contrib/autoprogram/issues/24
+        if sys.version_info >= (3, 10):
+            self.assertEqual("options", group.title)
+        else:
+            self.assertEqual("optional arguments", group.title)
+         self.assertEqual(None, group.description)
+         self.assertEqual(2, len(options))
+         self.assertEqual(
--- a/backports/py3-uvloop/APKBUILD
+++ b/backports/py3-uvloop/APKBUILD
@ -0,0 +1,37 @@
+# Contributor: Michał Polański <michal@polanski.me>
+# Maintainer: Michał Polański <michal@polanski.me>
+pkgname=py3-uvloop
+pkgver=0.16.0
+pkgrel=0
+pkgdesc="Ultra fast asyncio event loop"
+url="https://github.com/MagicStack/uvloop"
+license="MIT OR Apache-2.0"
+arch="all !armhf !ppc64le" # tests fail
+depends="python3"
+makedepends="py3-setuptools python3-dev cython libuv-dev py3-pip"
+checkdepends="py3-pytest py3-aiohttp py3-openssl py3-psutil"
+source="https://github.com/MagicStack/uvloop/archive/v$pkgver/py3-uvloop-$pkgver.tar.gz
+	tcp-tests.patch
+	dns-tests.patch
+	"
+options="!check" # mypy validation fails with our mypy version
+builddir="$srcdir/uvloop-$pkgver"
+
+build() {
+	python3 setup.py build build_ext --inplace --cython-always --use-system-libuv
+}
+
+check() {
+	PYTHONASYNCIODEBUG=1 PYTHONPATH="$(echo "$builddir"/build/lib.linux-*)" pytest -v \
+		-k 'not test_remote_shutdown_receives_trailing_data'
+}
+
+package() {
+	python3 setup.py install --root="$pkgdir" --skip-build
+}
+
+sha512sums="
+1896d9a60a9c4e4b8d146ad858e664f3e43969ad0c14026fe79c69f546e40bf1dc6a4cce2d388a7a6e0f5b8306b1eb4da3f713cce44c58ba6628b82ac6eaf271  py3-uvloop-0.16.0.tar.gz
+809af42dc056b718652ff1e2f99cc493b230a9566367bccf349afc705653ffb830288b7de80bc6016071980af5d5e0e635e72d53f7774ace193ce4fb2b1a62cc  tcp-tests.patch
+072c955662a9922de1f08713a73f0f9a08bd76b82cabd04e15cbb8b8299d81615516d03bdff207d2f0125afe055e9573604ebc331ad85f5d69ec6bf69668e620  dns-tests.patch
+"
--- a/backports/py3-uvloop/dns-tests.patch
+++ b/backports/py3-uvloop/dns-tests.patch
@ -0,0 +1,47 @@
+Behavior of getaddrinfo provided by libuv differs from musl.
+Skip affected tests.
+
+--- a/tests/test_dns.py
+++ b/tests/test_dns.py
+@@ -1,4 +1,5 @@
+ import asyncio
+import pytest
+ import socket
+ import unittest
+ 
+@@ -99,18 +100,22 @@ class BaseTestDNS:
+         self._test_getaddrinfo(b'example.com', '80')
+         self._test_getaddrinfo(b'example.com', '80', type=socket.SOCK_STREAM)
+ 
+    @pytest.mark.skip(reason="failure")
+     def test_getaddrinfo_12(self):
+         self._test_getaddrinfo('127.0.0.1', '80')
+         self._test_getaddrinfo('127.0.0.1', '80', type=socket.SOCK_STREAM)
+ 
+    @pytest.mark.skip(reason="failure")
+     def test_getaddrinfo_13(self):
+         self._test_getaddrinfo(b'127.0.0.1', b'80')
+         self._test_getaddrinfo(b'127.0.0.1', b'80', type=socket.SOCK_STREAM)
+ 
+    @pytest.mark.skip(reason="failure")
+     def test_getaddrinfo_14(self):
+         self._test_getaddrinfo(b'127.0.0.1', b'http')
+         self._test_getaddrinfo(b'127.0.0.1', b'http', type=socket.SOCK_STREAM)
+ 
+    @pytest.mark.skip(reason="failure")
+     def test_getaddrinfo_15(self):
+         self._test_getaddrinfo('127.0.0.1', 'http')
+         self._test_getaddrinfo('127.0.0.1', 'http', type=socket.SOCK_STREAM)
+@@ -127,10 +132,12 @@ class BaseTestDNS:
+         self._test_getaddrinfo('localhost', b'http')
+         self._test_getaddrinfo('localhost', b'http', type=socket.SOCK_STREAM)
+ 
+    @pytest.mark.skip(reason="failure")
+     def test_getaddrinfo_19(self):
+         self._test_getaddrinfo('::1', 80)
+         self._test_getaddrinfo('::1', 80, type=socket.SOCK_STREAM)
+ 
+    @pytest.mark.skip(reason="failure")
+     def test_getaddrinfo_20(self):
+         self._test_getaddrinfo('127.0.0.1', 80)
+         self._test_getaddrinfo('127.0.0.1', 80, type=socket.SOCK_STREAM)
--- a/backports/py3-uvloop/tcp-tests.patch
+++ b/backports/py3-uvloop/tcp-tests.patch
@ -0,0 +1,15 @@
+Adjust error message for musl-based systems.
+
+--- a/tests/test_tcp.py
+++ b/tests/test_tcp.py
+@@ -221,8 +221,8 @@ class _TestTCP:
+             addr = sock.getsockname()
+ 
+             with self.assertRaisesRegex(OSError,
+-                                        r"error while attempting.*\('127.*: "
+-                                        r"address already in use"):
+                                        r"\[Errno 98\] error while attempting.*\('127.*: "
+                                        r"address in use"):
+ 
+                 self.loop.run_until_complete(
+                     self.loop.create_server(object, *addr))
--- a/backports/py3-zxcvbn/APKBUILD
+++ b/backports/py3-zxcvbn/APKBUILD
@ -0,0 +1,33 @@
+# Contributor: Anjandev Momi <anjan@momi.ca>
+# Maintainer: Anjandev Momi <anjan@momi.ca>
+pkgname=py3-zxcvbn
+pkgdesc="Python implementation of Dropbox's realistic password strength estimator"
+_pkgreal=zxcvbn
+pkgver=4.4.28
+pkgrel=1
+url="http://packages.python.org/pypi/zxcvbn"
+arch="noarch"
+license="MIT"
+depends="python3"
+checkdepends="py3-pytest"
+makedepends="py3-setuptools"
+_pypiprefix="${_pkgreal%"${_pkgreal#?}"}"
+source="https://files.pythonhosted.org/packages/source/$_pypiprefix/$_pkgreal/$_pkgreal-$pkgver.tar.gz"
+builddir="$srcdir/$_pkgreal-$pkgver"
+options="!check" # no upstream checks
+
+build() {
+	python3 setup.py build
+}
+
+check() {
+	pytest
+}
+
+package() {
+	python3 setup.py install --skip-build --root="$pkgdir"
+}
+
+sha512sums="
+6ed12b555442b4ee30662c90f38c90988833545310acce45e68a0aa2fc6297729da500ae0f578a1a266e85c09522eb3287c38d92bcfc1017f852ee76bf92c606  zxcvbn-4.4.28.tar.gz
+"
--- a/backports/signal-desktop/APKBUILD
+++ b/backports/signal-desktop/APKBUILD
@ -1,387 +0,0 @@
-# Contributor: Lauren N. Liberda <lauren@selfisekai.rocks>
-# Maintainer: Lauren N. Liberda <lauren@selfisekai.rocks>
-pkgname=signal-desktop
-pkgver=6.1.0
-pkgrel=0
-pkgdesc="A messaging app for simple private communication with friends"
-url="https://github.com/signalapp/Signal-Desktop/"
-# same as electron
-# aarch64: polyval-0.5.3 crate subdep uses unstable stdsimd feature
-arch="x86_64"
-license="AGPL-3.0-only"
-# this build system sucks massive ass and does not add needed to anything
-depends="
-	electron
-	ffmpeg-libs
-	font-barlow
-	font-eb-garamond
-	font-inter
-	font-parisienne
-	libevent
-	opus
-	"
-makedepends="
-	alsa-lib-dev
-	bsd-compat-headers
-	cargo
-	clang-dev
-	cmake
-	electron-dev
-	ffmpeg-dev
-	git-lfs
-	glib-dev
-	gn
-	libepoxy-dev
-	libevent-dev
-	lld
-	llvm-dev
-	mesa-dev
-	nodejs
-	npm
-	openssl-dev
-	opus-dev
-	pipewire-dev
-	protoc
-	pulseaudio-dev
-	py3-setuptools
-	python3
-	samurai
-	sqlcipher-dev
-	vips-dev
-	yarn
-	"
-options="net !check"
-
-# follow signal-desktop package.json -> @signalapp/libsignal-client
-_libsignalver=0.21.1
-
-# follow signal-desktop package.json -> ringrtc -> commit title
-_ringrtcver=2.22.0
-
-# follow ringrtc (on version above) -> config/version.sh -> WEBRTC_VERSION
-# downloading tarball generated with abuild snapshot (with gclient dependencies fetched)
-_webrtcver=5005b
-
-source="
-	https://github.com/signalapp/Signal-Desktop/archive/refs/tags/v$pkgver/Signal-Desktop-$pkgver.tar.gz
-	https://github.com/signalapp/libsignal/archive/refs/tags/v$_libsignalver/libsignal-$_libsignalver.tar.gz
-	https://github.com/signalapp/ringrtc/archive/refs/tags/v$_ringrtcver/ringrtc-$_ringrtcver.tar.gz
-	https://s3.sakamoto.pl/lnl-aports-snapshots/webrtc-$_webrtcver.tar.xz
-
-	bettersqlite-use-system-sqlcipher.patch
-	signal-build-expire-time.patch
-	signal-disable-updates.patch
-	signal-update-links.patch
-	webrtc-canonicalize-file-name.patch
-	webrtc-use-alpine-target.patch
-	webrtc-no-shared-deps-in-static-lib.patch
-
-	signal-desktop
-	signal-desktop.desktop
-	"
-builddir="$srcdir/Signal-Desktop-$pkgver"
-
-export CC=clang
-export CXX=clang++
-
-# required to find the tools
-export AR=llvm-ar
-export NM=llvm-nm
-export LD=clang++
-
-# less log spam, reproducible, allow lto with rust
-export CFLAGS="${CFLAGS/-g/} -O2 -Wno-deprecated-builtins -Wno-unknown-warning-option -Wno-builtin-macro-redefined"
-export CXXFLAGS="${CXXFLAGS/-g/} -O2 -Wno-deprecated-builtins -Wno-unknown-warning-option -Wno-builtin-macro-redefined"
-export CPPFLAGS="$CPPFLAGS -D__DATE__=  -D__TIME__=  -D__TIMESTAMP__="
-
-export CARGO_PROFILE_RELEASE_OPT_LEVEL=2
-export CARGO_PROFILE_RELEASE_STRIP="symbols"
-export RUSTFLAGS="$RUSTFLAGS -C linker=clang -C link-arg=-fuse-ld=lld"
-
-export YARN_CACHE_FOLDER="$srcdir/.yarn"
-
-# webrtc only, the other dependencies are fine with tarballs
-snapshot() {
-	mkdir -p "$srcdir"
-	cd "$srcdir"
-
-	echo "
-solutions = [{
-	'name': 'src',
-	'url': 'https://github.com/signalapp/webrtc.git@$_webrtcver',
-}]
-target_cpu = ['x64']
-target_cpu_only = True
-" > .gclient
-
-	gclient sync --no-history --nohooks --tpot-cipd-ignore-platformed
-
-	# needed DEPS hooks
-	python3 'src/build/landmines.py' --landmine-scripts 'src/tools_webrtc/get_landmines.py' --src-dir 'src'
-	python3 'src/build/util/lastchange.py' -o 'src/build/util/LASTCHANGE'
-
-	for elf in $(scanelf -RA -F "%F" src); do
-		rm -f "$elf"
-	done
-
-	mv src webrtc-$_webrtcver
-
-	msg "generating tarball.."
-	tar -cf webrtc-$_webrtcver.tar \
-		--exclude="ChangeLog*" \
-		--exclude="testdata/" \
-		--exclude="test_data/" \
-		--exclude="android_rust_toolchain/toolchain/" \
-		--exclude-backups \
-		--exclude-caches-all \
-		--exclude-vcs \
-		webrtc-$_webrtcver
-
-	xz -T0 -e -9 -vv -k webrtc-$_webrtcver.tar
-}
-
-prepare() {
-	ln -s "$srcdir"/webrtc-$_webrtcver "$srcdir"/ringrtc-$_ringrtcver/src/webrtc
-	ln -sf "$srcdir"/ringrtc-$_ringrtcver/src "$srcdir"/webrtc-$_webrtcver/ringrtc
-
-	msg "Applying patches"
-	for x in $source; do
-		case "$x" in
-		signal-*.patch)
-			msg "$x"
-			patch -p1 -i "$srcdir"/$x -d "$srcdir"/Signal-Desktop-$pkgver
-			;;
-		ringrtc-*.patch)
-			msg "$x"
-			patch -p1 -i "$srcdir"/$x -d "$srcdir"/ringrtc-$_ringrtcver
-			;;
-		webrtc-*.patch)
-			msg "$x"
-			patch -p1 -i "$srcdir"/$x -d "$srcdir"/webrtc-$_webrtcver
-			;;
-		esac
-	done
-
-	msg "Installing signal-desktop JS dependencies"
-	echo 'ignore-engines true' > .yarnrc
-	yarn --ignore-scripts --frozen-lockfile
-
-	(
-		cd "$srcdir"/webrtc-$_webrtcver
-
-		local use_system="
-			ffmpeg
-			fontconfig
-			freetype
-			harfbuzz-ng
-			icu
-			libdrm
-			libevent
-			libjpeg
-			libpng
-			libwebp
-			libxml
-			libxslt
-			opus
-			re2
-			snappy
-			zlib
-			"
-		for _lib in $use_system libjpeg_turbo; do
-			msg "Removing buildscripts for system provided $_lib"
-			find . -type f -path "*third_party/$_lib/*" \
-				\! -path "*third_party/$_lib/chromium/*" \
-				\! -path "*third_party/$_lib/google/*" \
-				\! -path './base/third_party/icu/*' \
-				\! -path './third_party/libxml/*' \
-				\! -path './third_party/pdfium/third_party/freetype/include/pstables.h' \
-				\! -path './third_party/harfbuzz-ng/utils/hb_scoped.h' \
-				\! -path './third_party/crashpad/crashpad/third_party/zlib/zlib_crashpad.h' \
-				\! -regex '.*\.\(gn\|gni\|isolate\|py\)' \
-				-delete
-		done
-
-		msg "Replacing gn files"
-		python3 build/linux/unbundle/replace_gn_files.py --system-libraries \
-			$use_system
-
-		# allow system dependencies in "official builds"
-		sed -i 's/OFFICIAL_BUILD/GOOGLE_CHROME_BUILD/' \
-			tools/generate_shim_headers/generate_shim_headers.py
-	)
-
-	(
-		cd "$srcdir"/ringrtc-$_ringrtcver/src/node
-
-		msg "Installing ringrtc js dependencies"
-		yarn --frozen-lockfile --ignore-scripts
-	)
-
-	(
-		cd "$srcdir"/libsignal-$_libsignalver/node
-
-		# fix target
-		sed -i 's/unknown-linux-gnu/alpine-linux-musl/g' binding.gyp
-
-		msg "Installing libsignal js dependencies"
-		yarn --ignore-scripts --frozen-lockfile
-	)
-
-	# remove shipped fonts for system-provided (part 1)
-	rm -rf fonts/
-}
-
-build() {
-	chromium_arch="$(node -e 'console.log(process.arch)')"
-
-	# required dependency of ringrtc
-	(
-		cd "$srcdir"/webrtc-$_webrtcver
-
-		local webrtc_args="
-			rtc_build_examples=false
-			rtc_build_tools=false
-			rtc_enable_protobuf=false
-			rtc_enable_sctp=false
-			rtc_include_tests=false
-			rtc_include_ilbc=false
-			rtc_libvpx_build_vp9=true
-			rtc_use_x11=false
-
-			build_with_mozilla=false
-			chrome_pgo_phase=0
-			clang_use_chrome_plugins=false
-			custom_toolchain=\"//build/toolchain/linux/unbundle:default\"
-			is_cfi=false
-			is_clang=true
-			is_debug=false
-			is_official_build=true
-			host_toolchain=\"//build/toolchain/linux/unbundle:default\"
-			proprietary_codecs=true
-			rtc_link_pipewire=true
-			rtc_use_pipewire=true
-			symbol_level=0
-			use_custom_libcxx=false
-			use_sysroot=false
-			use_system_freetype=true
-			use_system_harfbuzz=true
-			use_system_libjpeg=true
-		"
-		mkdir -p "$srcdir"/ringrtc-$_ringrtcver/out/release
-		msg "Building signal's webrtc"
-		gn gen "$srcdir"/ringrtc-$_ringrtcver/out/release --args="$(echo $webrtc_args)"
-		ninja -C "$srcdir"/ringrtc-$_ringrtcver/out/release webrtc
-	)
-
-	# add lto for the remaining c steps (sqlite)
-	export CFLAGS="$CFLAGS -flto"
-	export CXXFLAGS="$CXXFLAGS -flto"
-	export LDFLAGS="$LDFLAGS -flto -fuse-ld=lld"
-
-	(
-		cd "$srcdir"/ringrtc-$_ringrtcver/src/rust
-
-		msg "Building libringrtc"
-		OUTPUT_DIR="$srcdir"/ringrtc-$_ringrtcver/out \
-			cargo build --features electron --release
-		mkdir -p ../node/build/linux
-		cp -fv target/release/libringrtc.so ../node/build/linux/libringrtc-$chromium_arch.node
-	)
-
-	(
-		cd "$srcdir"/ringrtc-$_ringrtcver/src/node
-		msg "Building ringrtc JS glue code"
-		yarn build
-	)
-
-	# module on npm intentionally unbuildable: https://github.com/signalapp/libsignal/issues/464#issuecomment-1160665052
-	(
-		cd "$srcdir"/libsignal-$_libsignalver/node
-
-		msg "Building libsignal"
-		yarn node-gyp configure --nodedir=/usr/include/electron/node_headers --build-from-source
-		yarn node-gyp build --nodedir=/usr/include/electron/node_headers --build-from-source
-
-		mkdir -p prebuilds/linux-$chromium_arch
-		mv build/Release/libsignal_client_linux_$chromium_arch.node prebuilds/linux-$chromium_arch/node.napi.node
-
-		msg "Building libsignal glue code"
-		yarn tsc
-	)
-
-	# from package.json postinstall
-	yarn build:acknowledgments
-	yarn patch-package
-	rm -rf node_modules/dtrace-provider
-
-	# use our libsignal
-	rm -rf node_modules/@signalapp/libsignal-client/
-	ln -s "$srcdir"/libsignal-$_libsignalver/node/ node_modules/@signalapp/libsignal-client
-
-	# use our libringrtc
-	rm -rf node_modules/ringrtc/
-	ln -s "$srcdir"/ringrtc-$_ringrtcver/src/node/ node_modules/ringrtc
-
-	# patch the sqlcipher module
-	for x in $source; do
-		case "$x" in
-		bettersqlite-*.patch)
-			msg "$x"
-			patch -Np1 -i "$srcdir"/$x -d "$srcdir"/Signal-Desktop-$pkgver/node_modules/better-sqlite3/
-			;;
-		esac
-	done
-
-	# use system-provided font
-	echo '' > node_modules/typeface-inter/inter.css
-	rm -rf 'node_modules/typeface-inter/Inter '*
-
-	npm rebuild sharp better-sqlite3 --nodedir=/usr/include/electron/node_headers --build-from-source
-
-	NODE_ENV=production \
-	SIGNAL_ENV=production \
-	NODE_OPTIONS=--openssl-legacy-provider \
-	yarn build:dev
-
-	NODE_ENV=production \
-	SIGNAL_ENV=production \
-	yarn build:electron \
-		--config.extraMetadata.environment=production \
-		--config.directories.output=release \
-		--linux=dir
-}
-
-check() {
-	# tests run against downloaded build of electron for glibc, probably can be patched
-	yarn test
-}
-
-package() {
-	cd "$builddir"/release/linux-unpacked
-
-	install -Dm644 resources/app.asar "$pkgdir"/usr/lib/$pkgname/app.asar
-	cp -r resources/app.asar.unpacked "$pkgdir"/usr/lib/$pkgname/app.asar.unpacked
-
-	install -Dm755 "$srcdir"/$pkgname "$pkgdir"/usr/bin/$pkgname
-	install -Dm644 "$srcdir"/$pkgname.desktop "$pkgdir"/usr/share/applications/$pkgname.desktop
-
-	for i in 16 32 48 128 250 256 1024; do
-		install -Dm644 "$builddir"/images/icon_$i.png "$pkgdir"/usr/share/icons/hicolor/${i}x$i/apps/$pkgname.png
-	done
-}
-
-sha512sums="
-8f5234fa018e0590b3cad934ab46797bef16ff489a36a05364df7f43be80022143e8034665d2f24a171401bfac3315a16918d702a249c9ef8acd1de78e30f52e  Signal-Desktop-6.1.0.tar.gz
-d2c13bf0d96eb706afe018c0ef9b377f3f50d2a82690f6ccb7260efa7cc620fb5c52ae775d598d6ebcaa581acfaab244dfe6f7f1738755604bf860cd548a62b6  libsignal-0.21.1.tar.gz
-e263390ea2ae877edb39e9973a8c8a03e2f396f255ca48487311031c69493a93da0dedbce5f10adfef4859cb8e51579bf285fbd9b94f98fabd538acaee18c413  ringrtc-2.22.0.tar.gz
-748f870d35b9a9789311c3d7cee9c0bc150aed8094838406e0a1969f2f824900ffec40d0b4fe2702f2f93d4a78d7987b0f91668cff859a8a34517663b138f8b5  webrtc-5005b.tar.xz
-1aaf59c2d401ae127ed73981be330cd999794a217b455cb8033652063eb7b549c7070c63f54e4e60bf4338b475e162b6eae98683c3ce058e8f1a407588b3b2e1  bettersqlite-use-system-sqlcipher.patch
-3ecfbd1b0cd03d1a697f3e53c057fa8bc2118de48ff0c3f07f8bb731f128f9478862a388efb36dd4dbc1dc5ad9977165a935fe65664aea915b8b80c38e801070  signal-build-expire-time.patch
-60a45285d885922f5c21f64b761a10efbee9081baf3efa4c8c13abc6a43dc4d27662ed10e239b0fa2071ab9e3a0dbbb4b11d6e3d26fe2b74a19f39e72b74a5bd  signal-disable-updates.patch
-c68a2a6a37c1cdea227f29c0922b9bf15259f044e9b3240b120bba14809d04d66cf0b619f52bb91abd596ad93e51e972be132b5951d0e8f6ea238fcb7bb613eb  signal-update-links.patch
-252b37a2ecc5e7a25385943045f426dc2e30991b28d206ceaff1be7fd8ffeeb024310a8fca6b3e69a4b1c57db535d51c570935351053525f393682d5ecd0f9a9  webrtc-canonicalize-file-name.patch
-6add8b4c293f5392748a2eec9486cb4a6534e161977c6a98de71617b9abcdd1e8ad94b44014256a4b52e33eb9dd4aca380279d4161629a1bb2d7b15f8eb5b459  webrtc-use-alpine-target.patch
-bab56a33265b5b094f161af1462166e371913a5269fe8e7d12e9f65ec4f5b908157406b3bcbcf73db15d03470445127d27c64fd731b6ea57c631aba3f4d302cb  webrtc-no-shared-deps-in-static-lib.patch
-87534e7b5ad7365509eab75629e6bd1a9ed61ee92f7e358405a0abaf0df57de14623fb3894eb082f8785422e5c087e1c50f9e2e5cafbb2529591fd7bf447f7f5  signal-desktop
-87ef5f3ffcf64e3cae308aa0f6bc208fb05dd8568f6a288217cdf8498ae1523f276987a7be8d6f5208f13394bab350e08734d806a8e7c08849dd8ba0dda49d66  signal-desktop.desktop
-"
--- a/backports/signal-desktop/bettersqlite-use-system-sqlcipher.patch
+++ b/backports/signal-desktop/bettersqlite-use-system-sqlcipher.patch
@ -1,45 +0,0 @@
--- a/binding.gyp
-+++ b/binding.gyp
-@@ -7,7 +7,16 @@
-   'targets': [
-     {
-       'target_name': 'better_sqlite3',
-      'dependencies': ['deps/sqlite3.gyp:sqlite3'],
-+      'include_dirs': ['/usr/include/sqlcipher'],
-+      'direct_dependent_settings': {
-+        'include_dirs': ['/usr/include/sqlcipher'],
-+      },
-+      'link_settings': {
-+        'libraries': [
-+          '-L/usr/lib/sqlcipher',
-+          '-lsqlcipher',
-+        ]
-+      },
-       'sources': ['src/better_sqlite3.cpp'],
-       'cflags_cc': ['-std=c++17'],
-       'xcode_settings': {
-@@ -17,14 +26,22 @@
-         ['OS=="linux"', {
-           'ldflags': [
-             '-Wl,-Bsymbolic',
-            '-Wl,--exclude-libs,ALL',
-           ],
-         }],
-       ],
-     },
-     {
-       'target_name': 'test_extension',
-      'dependencies': ['deps/sqlite3.gyp:sqlite3'],
-+      'include_dirs': ['/usr/include/sqlcipher'],
-+      'direct_dependent_settings': {
-+        'include_dirs': ['/usr/include/sqlcipher'],
-+      },
-+      'link_settings': {
-+        'libraries': [
-+          '-L/usr/lib/sqlcipher',
-+          '-lsqlcipher',
-+        ]
-+      },
-       'conditions': [['sqlite3 == ""', { 'sources': ['deps/test_extension.c'] }]],
-     },
-   ],
--- a/backports/signal-desktop/signal-build-expire-time.patch
+++ b/backports/signal-desktop/signal-build-expire-time.patch
@ -1,15 +0,0 @@
--- a/ts/scripts/get-expire-time.ts
-+++ b/ts/scripts/get-expire-time.ts
-@@ -7,11 +7,7 @@
- 
- import { DAY } from '../util/durations';
- 
-const unixTimestamp = parseInt(
-  execSync('git show -s --format=%ct').toString('utf8'),
-  10
-);
-const buildCreation = unixTimestamp * 1000;
-+const buildCreation = new Date().getTime();
- 
- const buildExpiration = buildCreation + DAY * 90;
- 
--- a/backports/signal-desktop/signal-desktop
+++ b/backports/signal-desktop/signal-desktop
@ -1,6 +0,0 @@
-#!/bin/sh
-
-# app chooses config (including used endpoints) based on this
-export NODE_ENV=production
-
-exec electron /usr/lib/signal-desktop/app.asar
--- a/backports/signal-desktop/signal-desktop.desktop
+++ b/backports/signal-desktop/signal-desktop.desktop
@ -1,10 +0,0 @@
-[Desktop Entry]
-Name=Signal
-Exec=/usr/bin/signal-desktop %U
-Terminal=false
-Type=Application
-Icon=signal-desktop
-StartupWMClass=Signal
-Comment=Private messaging from your desktop
-MimeType=x-scheme-handler/sgnl;x-scheme-handler/signalcaptcha;
-Categories=Network;InstantMessaging;Chat;
--- a/backports/signal-desktop/signal-disable-updates.patch
+++ b/backports/signal-desktop/signal-disable-updates.patch
@ -1,9 +0,0 @@
--- a/config/production.json
-+++ b/config/production.json
-@@ -11,5 +11,5 @@
-   },
-   "serverPublicParams": "AMhf5ywVwITZMsff/eCyudZx9JDmkkkbV6PInzG4p8x3VqVJSFiMvnvlEKWuRob/1eaIetR31IYeAbm0NdOuHH8Qi+Rexi1wLlpzIo1gstHWBfZzy1+qHRV5A4TqPp15YzBPm0WSggW6PbSn+F4lf57VCnHF7p8SvzAA2ZZJPYJURt8X7bbg+H3i+PEjH9DXItNEqs2sNcug37xZQDLm7X36nOoGPs54XsEGzPdEV+itQNGUFEjY6X9Uv+Acuks7NpyGvCoKxGwgKgE5XyJ+nNKlyHHOLb6N1NuHyBrZrgtY/JYJHRooo5CEqYKBqdFnmbTVGEkCvJKxLnjwKWf+fEPoWeQFj5ObDjcKMZf2Jm2Ae69x+ikU5gBXsRmoF94GXQ==",
-   "serverTrustRoot": "BXu6QIKVz5MA8gstzfOgRQGqyLqOwNKHL6INkv3IHWMF",
-  "updatesEnabled": true
-+  "updatesEnabled": false
- }
--- a/backports/signal-desktop/signal-update-links.patch
+++ b/backports/signal-desktop/signal-update-links.patch
@ -1,25 +0,0 @@
--- a/ts/components/DialogExpiredBuild.tsx
-+++ b/ts/components/DialogExpiredBuild.tsx
-@@ -29,9 +29,9 @@
-       containerWidthBreakpoint={containerWidthBreakpoint}
-       type="error"
-       onClick={() => {
-        openLinkInWebBrowser('https://signal.org/download/');
-+        openLinkInWebBrowser('https://pkgs.alpinelinux.org/packages?name=signal-desktop');
-       }}
-      clickLabel={i18n('upgrade')}
-+      clickLabel={<code>apk upgrade signal-desktop</code>}
-       hasAction
-     >
-       {i18n('expiredWarning')}{' '}
--- a/ts/components/DialogUpdate.tsx
-+++ b/ts/components/DialogUpdate.tsx
-@@ -27,7 +27,7 @@
-   currentVersion: string;
- };
- 
-const PRODUCTION_DOWNLOAD_URL = 'https://signal.org/download/';
-+const PRODUCTION_DOWNLOAD_URL = 'https://pkgs.alpinelinux.org/packages?name=signal-desktop';
- const BETA_DOWNLOAD_URL = 'https://support.signal.org/beta';
- 
- export const DialogUpdate = ({
--- a/backports/signal-desktop/webrtc-canonicalize-file-name.patch
+++ b/backports/signal-desktop/webrtc-canonicalize-file-name.patch
@ -1,13 +0,0 @@
-no canonicalize_file_name on musl. funnily, the file using this says this is
-not portable, but avoids the nonportability of realpath(path, NULL);
--- a/third_party/nasm/config/config-linux.h
-+++ b/third_party/nasm/config/config-linux.h
-@@ -139,7 +139,7 @@
- #define HAVE_ACCESS 1
- 
- /* Define to 1 if you have the `canonicalize_file_name' function. */
-#define HAVE_CANONICALIZE_FILE_NAME 1
-+/* #define HAVE_CANONICALIZE_FILE_NAME 1 */
- 
- /* Define to 1 if you have the `cpu_to_le16' intrinsic function. */
- /* #undef HAVE_CPU_TO_LE16 */
--- a/backports/signal-desktop/webrtc-no-shared-deps-in-static-lib.patch
+++ b/backports/signal-desktop/webrtc-no-shared-deps-in-static-lib.patch
@ -1,14 +0,0 @@
--- a/BUILD.gn
-+++ b/BUILD.gn
-@@ -480,11 +480,6 @@
-       "rtc_base",
-       "sdk",
-       "video",
-
-      # Added by RingRTC
-      # Necessary for use_custom_libcxx=true,
-      # which is in turn necessary for deploying to Ubuntu 16.04.
-      "//build/config:shared_library_deps",
-     ]
- 
-     if (rtc_include_builtin_audio_codecs) {
--- a/backports/signal-desktop/webrtc-use-alpine-target.patch
+++ b/backports/signal-desktop/webrtc-use-alpine-target.patch
@ -1,13 +0,0 @@
--- ./build/config/compiler/BUILD.gn
-+++ ./build/config/compiler/BUILD.gn
-@@ -766,8 +766,8 @@
-       }
-     } else if (current_cpu == "arm64") {
-       if (is_clang && !is_android && !is_nacl && !is_fuchsia) {
-        cflags += [ "--target=aarch64-linux-gnu" ]
-        ldflags += [ "--target=aarch64-linux-gnu" ]
-+        cflags += [ "--target=aarch64-alpine-linux-musl" ]
-+        ldflags += [ "--target=aarch64-alpine-linux-musl" ]
-       }
-     } else if (current_cpu == "mipsel" && !is_nacl) {
-       ldflags += [ "-Wl,--hash-style=sysv" ]
--- a/backports/sqlcipher/APKBUILD
+++ b/backports/sqlcipher/APKBUILD
@ -1,53 +0,0 @@
-# Contributor: wener <wenermail@gmail.com>
-# Maintainer: wener <wenermail@gmail.com>
-pkgname=sqlcipher
-pkgver=4.5.2
-pkgrel=1
-pkgdesc="SQLCipher is an SQLite extension that provides 256 bit AES encryption of database files."
-url="https://www.zetetic.net/sqlcipher/"
-arch="all"
-license="BSD-3-clause"
-makedepends="openssl-dev>3 tcl-dev readline-dev zlib-dev"
-subpackages="$pkgname-dev $pkgname-doc $pkgname-libs"
-source="$pkgname-$pkgver.tar.gz::https://github.com/sqlcipher/sqlcipher/archive/v$pkgver.tar.gz"
-# block by https://github.com/sqlcipher/sqlcipher/issues/368#issuecomment-669984195
-# options="!check"
-
-build() {
-	export CFLAGS="$CFLAGS -DSQLITE_HAS_CODEC -DSQLCIPHER_TEST -DSQLITE_ENABLE_COLUMN_METADATA"
-	export LDFLAGS="$LDFLAGS -lcrypto"
-
-	./configure \
-		--build=$CBUILD \
-		--host=$CHOST \
-		--prefix=/usr \
-		--sysconfdir=/etc \
-		--mandir=/usr/share/man \
-		--localstatedir=/var \
-		--enable-tempstore=yes \
-		--enable-fts5
-
-	make
-}
-
-check() {
-	make testfixture
-	./testfixture test/sqlcipher.test
-}
-
-package() {
-	make DESTDIR="$pkgdir" install
-
-	install -Dm0644 sqlcipher.1 \
-		"$pkgdir"/usr/share/man/man1/sqlcipher.1
-}
-
-libs() {
-	pkgdesc="SQLCipher library"
-	mkdir -p "$subpkgdir"/usr
-	mv "$pkgdir"/usr/lib "$subpkgdir"/usr/
-}
-
-sha512sums="
-1de5b219392bb976631857e32b4523258fd660fedb558d478e536b7e10c711c72c7e7c9062e45bd8a5ceaecbc1fee717935d2357f6811c3ddf76702167f4601b  sqlcipher-4.5.2.tar.gz
-"
--- a/backports/uvicorn/APKBUILD
+++ b/backports/uvicorn/APKBUILD
@ -0,0 +1,59 @@
+# Contributor: Michał Polański <michal@polanski.me>
+# Maintainer: Michał Polański <michal@polanski.me>
+pkgname=uvicorn
+pkgver=0.18.3
+pkgrel=1
+pkgdesc="Lightning-fast ASGI server"
+url="https://www.uvicorn.org/"
+license="BSD-3-Clause"
+arch="noarch"
+depends="
+	python3
+	py3-asgiref
+	py3-click
+	py3-h11
+	"
+makedepends="py3-build py3-hatchling py3-installer"
+checkdepends="
+	py3-dotenv
+	py3-httptools
+	py3-httpx
+	py3-pytest
+	py3-pytest-mock
+	py3-yaml
+	py3-trustme
+	py3-watchgod
+	py3-websockets
+	py3-wsproto
+	"
+subpackages="$pkgname-doc"
+source="https://github.com/encode/uvicorn/archive/$pkgver/uvicorn-$pkgver.tar.gz
+	skip-warns.patch
+	"
+
+case "$CARCH" in
+	# test suite blocked by py3-httpx
+	armhf|ppc64le) options="!check" ;;
+	# test suite blocked by py3-watchgod
+	s390x) options="!check" ;;
+esac
+
+build() {
+	python3 -m build --no-isolation --wheel
+}
+
+check() {
+	export PYTHONWARNINGS="ignore::DeprecationWarning"
+	pytest
+}
+
+package() {
+	python3 -m installer -d "$pkgdir" dist/uvicorn-$pkgver-py3-none-any.whl
+
+	install -Dm644 LICENSE.md "$pkgdir"/usr/share/licenses/$pkgname/LICENSE
+}
+
+sha512sums="
+a4983e7095f3596ac54557432a074eb8cae4c6dd579fabfe8b6c34606ba8258e6c0684c2e34e8019f2455fbfd1771f8c2c88bf8b01fc505abfae93655f61f032  uvicorn-0.18.3.tar.gz
+0fe235e59a595bc36c9aeb6c8f54ecde9ee4ad30dbe8feae0477db533fd1c3a4c866719b7354e0e5e0e92085ab7e4909a0586256daaaaa76465d39f653bd720a  skip-warns.patch
+"
--- a/backports/uvicorn/skip-warns.patch
+++ b/backports/uvicorn/skip-warns.patch
@ -0,0 +1,15 @@
+diff --git a/setup.cfg b/setup.cfg
+index aef20c6..61d3ef4 100644
+--- a/setup.cfg
+++ b/setup.cfg
+@@ -69,10 +69,6 @@ addopts = -rxXs
+   --strict-config
+   --strict-markers
+ xfail_strict=True
+-filterwarnings=
+-    # Turn warnings that aren't filtered into exceptions
+-    error
+-    ignore: \"watchgod\" is depreciated\, you should switch to watchfiles \(`pip install watchfiles`\)\.:DeprecationWarning
+ 
+ [coverage:run]
+ omit = venv/*
--- a/unmaintained/caprine/APKBUILD
+++ b/unmaintained/caprine/APKBUILD
--- a/unmaintained/caprine/caprine.desktop
+++ b/unmaintained/caprine/caprine.desktop
--- a/unmaintained/caprine/caprine.js
+++ b/unmaintained/caprine/caprine.js
--- a/user/firefly-iii/APKBUILD
+++ b/user/firefly-iii/APKBUILD
@ -9,7 +9,7 @@ arch="noarch"
 url="https://github.com/firefly-iii/firefly-iii"
 license="AGPL-3.0-only"
 options="!check" # No testsuite
-_php=php81
+_php=php8
 _php_mods="-intl -curl -bcmath -zip -gd -xml -mbstring -ldap -session -fileinfo -simplexml -sodium -tokenizer -xmlwriter -dom -pdo"
 depends="$_php ${_php_mods//-/$_php-}"
 makedepends="composer"
--- a/user/git-mirror/APKBUILD
+++ b/user/git-mirror/APKBUILD
@ -0,0 +1,34 @@
+# Maintainer: Antoine Martin <dev@ayakael.net>
+# Contributor: Antoine Martin <dev@ayakael.net>
+pkgname=git-mirror
+pkgver=0.14.10
+pkgrel=0
+pkgdesc="A small utility that allows to mirror external repositories to GitLab, GitHub and possible more."
+url="https://github.com/bachp/git-mirror/tree/21fd1dd9586fa6743d3bc720c02afc568c6d2dfe"
+arch="all"
+license="MIT"
+depends="git git-lfs py3-gitlab git-svn"
+makedepends="cargo openssl-dev"
+source="$pkgname-$pkgver.tar.gz::https://github.com/bachp/git-mirror/archive/refs/tags/v$pkgver.tar.gz"
+builddir="$srcdir/$pkgname-$pkgver"
+
+prepare() {
+	default_prepare
+	cargo fetch --locked
+}
+
+build() {
+	OPENSSL_NO_VENDOR=true cargo build --release --frozen
+}
+
+check() {
+	OPENSSL_NO_VENDOR=true cargo test --frozen
+}
+
+package() {
+	install -Dm755 "$builddir"/target/release/git-mirror "$pkgdir"/usr/bin/git-mirror
+}
+
+sha512sums="
+f7af31f4f0460df30c9192423b0861baaeb338c7ebbe1fd2247743b7cd6f87141e65ed32c84dada8b238a4e39775b3f19c5df097d2b190eb290aa9255a1e4d16  git-mirror-0.14.10.tar.gz
+"
--- a/user/gitaly/APKBUILD
+++ b/user/gitaly/APKBUILD
@ -1,8 +1,9 @@
+# Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
+# Contributor: Antoine Martin (ayakael) <dev@ayakael.net>
 # Contributor: Jakub Jirutka <jakub@jirutka.cz>
-# Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=gitaly
 pkgver=15.3.3
-pkgrel=0
+pkgrel=1
 pkgdesc="A Git RPC service for handling all the git calls made by GitLab"
 url="https://gitlab.com/gitlab-org/gitaly/"
 arch="all"
@ -35,8 +36,7 @@ subpackages="
 	$pkgname-blackbox
 	$pkgname-praefect
 	"
-# FIXME: Makefile clones libgit2 and git repositories.
-source="https://gitlab.com/gitlab-org/$pkgname/-/archive/v$pkgver/$pkgname-v$pkgver.tar.gz
+source="https://gitlab.com/gitlab-org/gitaly/-/archive/v$pkgver/gitaly-v$pkgver.tar.gz
 	gemfile-use-local-grpc.patch
 	libgit-1.4-compat.patch
 	config.patch
@ -56,14 +56,16 @@ prepare() {

 	default_prepare

-	# This Google gem is totally messed, so we copy our fixed version
+	# Some gems are broken, so we copy our fixed version
 	# instead of installing it from RubyGems using Bundler.
-	mkdir -p ruby/vendor/grpc
-	cp -r "$sysgemdir"/gems/grpc-*/* ruby/vendor/grpc/
-	cp "$sysgemdir"/specifications/grpc-*.gemspec \
-		ruby/vendor/grpc/grpc.gemspec
-	cp "$sysgemdir"/extensions/*/*/grpc-*/grpc/*.so \
-		ruby/vendor/grpc/src/ruby/lib/grpc/
+	for i in grpc; do
+		mkdir -p ruby/vendor/$i/src/ruby/lib/$i
+		cp -r "$sysgemdir"/gems/$i-*/* ruby/vendor/$i/
+		cp "$sysgemdir"/specifications/$i-*.gemspec \
+			ruby/vendor/$i/$i.gemspec
+		cp "$sysgemdir"/extensions/*/*/$i-*/$i/*.so \
+			ruby/vendor/$i/src/ruby/lib/$i/
+	done
 }

 build() {
@ -76,6 +78,8 @@ build() {
 	bundle config --local build.rugged --use-system-libraries
 	# https://github.com/protocolbuffers/protobuf/issues/2335#issuecomment-579913357
 	bundle config --local build.google-protobuf --with-cflags=-D__va_copy=va_copy
+	bundle config --local path "vendor/bundle"
+	bundle config --local without "$BUNDLE_WITHOUT"

 	bundle install --no-cache

@ -123,20 +127,21 @@ package() {
 	cd "$rubydir"/vendor/bundle/ruby/*/gems

 	# Remove tests, docs and other unnecessary files.
-	rm -Rf */benchmark \
-		*/spec \
-		*/test \
-		*/tests \
-		*/appveyor.yml \
-		*/*.md \
-		*/*.rdoc \
-		*/*.txt \
-		*/CHANGELOG* \
-		*/CHANGES* \
-		*/CONTRIBUT* \
-		*/*LICENSE* \
-		*/Rakefile \
-		*/README*
+	rm -Rf \
+		./*/benchmark \
+		./*/spec \
+		./*/test \
+		./*/tests \
+		./*/appveyor.yml \
+		./*/*.md \
+		./*/*.rdoc \
+		./*/*.txt \
+		./*/CHANGELOG* \
+		./*/CHANGES* \
+		./*/CONTRIBUT* \
+		./*/*LICENSE* \
+		./*/Rakefile \
+		./*/README*

 	# Remove bundled libgit2 and pg_query sources.
 	rm -R rugged-*/vendor/libgit2
--- a/user/gitlab-foss/APKBUILD
+++ b/user/gitlab-foss/APKBUILD
@ -1,8 +1,9 @@
+# Maintainer: Antoine Martin (ayakael) <dev@ayakael.net>
 # Contributor: Jakub Jirutka <jakub@jirutka.cz>
-# Maintainer: Jakub Jirutka <jakub@jirutka.cz>
+# Contributor: Antoine Martin (ayakael) <dev@ayakael.net>
 pkgname=gitlab-foss
 _pkgname=${pkgname%-foss}
-pkgver=15.7.2
+pkgver=15.9.3
 _gittag=v$pkgver
 pkgrel=0
 pkgdesc="A version control for your server"
@ -17,7 +18,7 @@ depends="
 	exiftool
 	git>=2.18.0
 	gitaly~=15.3
-	gitlab-shell~=14.10
+	gitlab-shell~=14.17
 	graphicsmagick
 	http-parser
 	procps
@ -62,8 +63,9 @@ pkggroups="git www-data"
 install="$pkgname.pre-install $pkgname.post-install $pkgname.post-upgrade"
 subpackages="$pkgname-assets::noarch"
 source="https://gitlab.com/gitlab-org/gitlab-foss/-/archive/$_gittag/gitlab-foss-$_gittag.tar.gz
-	libgit-1.4-compat.patch
 	database-config.patch
+	libgit-1.4-compat.patch
+	use-bundler-2.3.patch
 	$_pkgname.initd
 	$_pkgname.mailroom.initd
 	$_pkgname.rails.initd
@ -87,8 +89,6 @@ prepare() {

 	default_prepare

-	cd "$builddir"
-
 	# The default log level is very chatty.
 	sed -i 's/^\(\s*config.log_level\s*=\).*$/\1 :warn/' \
 		config/environments/production.rb
@ -130,16 +130,10 @@ build() {
 	bundle config --local build.rugged --use-system-libraries
 	# https://github.com/protocolbuffers/protobuf/issues/2335#issuecomment-579913357
 	bundle config --local build.google-protobuf --with-cflags=-D__va_copy=va_copy
+	bundle config --local path "vendor/bundle"

 	bundle install --no-cache

-	# Fix https://github.com/funny-falcon/murmurhash3-ruby/pull/9
-	(
-		cd vendor/bundle/ruby/*/extensions/*/*/murmurhash3-*
-		mkdir -p murmurhash3
-		mv native.so murmurhash3/
-	)
-
 	# Replace bundled CA bundle with symlink.
 	(
 		cd vendor/bundle/ruby/*/gems/aws-sdk-core-*/
@ -213,8 +207,6 @@ package() {
 	local datadir="$pkgdir/var/lib/gitlab"
 	local file dest

-	cd "$builddir"
-
 	install -d -m755 "$destdir" "$destdir"/bin

 	install -d -m755 -o git -g git \
@ -248,7 +240,7 @@ package() {
 	# Install application files.
 	# Note: *VERSION files and doc directory are required (Help in GitLab
 	# menu refers to the doc directory).
-	cp -rl .bundle config.ru Gemfile* INSTALLATION_TYPE Rakefile *VERSION \
+	cp -rl .bundle config.ru Gemfile* INSTALLATION_TYPE Rakefile ./*VERSION \
 		app data db doc fixtures config lib locale metrics_server public sidekiq_cluster vendor \
 		"$destdir"/

@ -269,7 +261,7 @@ package() {
 	rm -r app/assets
 	rm -r vendor/assets
 	find public/assets -name '*.vue' -delete
-	find public/assets -type d | xargs rmdir --ignore-fail-on-non-empty
+	find public/assets -type d -exec rmdir --ignore-fail-on-non-empty '{}' \;
 	# These load gems in the assets group.
 	rm config/initializers/gettext_rails_i18n_patch.rb
 	rm config/initializers/sprockets.rb
@ -378,9 +370,10 @@ assets() {
 }

 sha512sums="
-d976dda4677f143598a9b87f7dea929c83ba4adedace4252fc2f15cf5c7fbebff473074e6659b017ced78e9397590900d309f6c6411e9dbd58306196a91b01e1  gitlab-foss-v15.7.2.tar.gz
-80e27697772c4529720f2ec65d314641cd5f437070d0fefd3c521852ff6dad8c9127534e379a5c0bcee4bbae8d5a373d131bf91a58606d02c89104e34a88baac  libgit-1.4-compat.patch
-dd984ae890c10119df6c510be1bd22e3d18652115ccaec6cb3e0a7c49d00cc72ec1c7c2414c29e6a13171c0a139626c8227e0ba3020f0ec3fe2c318b47101248  database-config.patch
+fc2304d3dcc4c2594fa6ce5207c70ce4f7f2ec09509bdc6eb6e4488a30a9088aed80e3fa38a5e3654f1af1792b2d253b72f6ccb9bde25b8bd3ab368f162b1919  gitlab-foss-v15.9.3.tar.gz
+f8b6855445e4086b4a4059a6359fafe7ca78ccf9ed6953a5b2a606d02add9519bb98ccf5f4a3bb750b94cfc44e660e70186813f7c7296fac343377e922e8a54a  database-config.patch
+0a95e0013427c210e8a381edb867f2aa515849e67ae60926cce3410d02869bf20d6ebcfb1953b6a6b32c7838061347564f29b2edd2ee5b41c65634a738786247  libgit-1.4-compat.patch
+3fa3b5fd221004db639a7d64b1537dd81bb516acb605706a0c4c1806d9fdccb25e70793e57593027b2b6daf0edf37cd24c6ec133d708c85932b9a0db1a003738  use-bundler-2.3.patch
 55b0667d3969113ffd6860652ee8bdb9a534c25f413f33b2739e922c886988e7cea72c1c00c7eecf29fcff3682b1324156365605ffc6aae45d1e0ccddf96288b  gitlab.initd
 1f451b67a5d5e58650b0fe862a2b65cfb8bff5502b37d94ae90619c1ff9affbecf24428303a2849bebce5f94bef37078f0e5710e344bbab616134e910938384a  gitlab.mailroom.initd
 b6a6d9ba20557e61efa24f2d5a489873fefbb981f7d4465794a857b2971263c08ec29cc001c372522cdc0d48245e59751307c9f44f6ef4d87bf2e3ec5c23fb1c  gitlab.rails.initd
--- a/user/gitlab-foss/database-config.patch
+++ b/user/gitlab-foss/database-config.patch
@ -1,11 +1,11 @@
-diff --git a/config/database.yml.postgresql b/config/database.yml.postgresql
-index 5329a8e..a4daab1 100644
--- a/config/database.yml.postgresql
+diff --git a/config/database.yml.postgresql.orig b/config/database.yml.postgresql
+index c1b1247..dbe5b77 100644
+--- a/config/database.yml.postgresql.orig
 +++ b/config/database.yml.postgresql
-@@ -18,13 +18,6 @@ production:
-     #     port: 8600
-     #     record: secondary.postgresql.service.consul
-     #     interval: 300
+@@ -26,14 +26,7 @@ production:
+   #   username: git
+   #   password: "secure password"
+   #   host: localhost
 -  geo:
 -    adapter: postgresql
 -    encoding: unicode
@ -13,13 +13,15 @@ index 5329a8e..a4daab1 100644
 -    username: git
 -    password: "secure password"
 -    host: localhost
- 
+-
+ 
 #
 # Development specific
-@@ -39,13 +32,6 @@ development:
-     host: localhost
-     variables:
-       statement_timeout: 15s
+ #
+@@ -57,13 +50,6 @@ development:
+   #   host: localhost
+   #   variables:
+   #     statement_timeout: 15s
 -  geo:
 -    adapter: postgresql
 -    encoding: unicode
@ -30,10 +32,10 @@ index 5329a8e..a4daab1 100644
 
 #
 # Staging specific
-@@ -58,13 +44,6 @@ staging:
-     username: git
-     password: "secure password"
-     host: localhost
+@@ -84,13 +70,6 @@ staging:
+   #   username: git
+   #   password: "secure password"
+   #   host: localhost
 -  geo:
 -    adapter: postgresql
 -    encoding: unicode
@ -44,10 +46,10 @@ index 5329a8e..a4daab1 100644
 
 # Warning: The database defined as "test" will be erased and
 # re-generated from your development database when you run "rake".
-@@ -80,10 +59,3 @@ test: &test
-     prepared_statements: false
-     variables:
-       statement_timeout: 15s
+@@ -117,10 +96,3 @@ test: &test
+   #   prepared_statements: false
+   #   variables:
+   #     statement_timeout: 15s
 -  geo:
 -    adapter: postgresql
 -    encoding: unicode
--- a/user/gitlab-foss/gitlab-foss.post-install
+++ b/user/gitlab-foss/gitlab-foss.post-install
@ -8,11 +8,6 @@ shell_secret_file='/etc/gitlab/gitlab_shell_secret'
 workhorse_secret_file='/etc/gitlab/gitlab_workhorse_secret'
 kas_secret_file='/etc/gitlab/gitlab_kas_secret'

-gen_random_hex() {
-	local bits="$1"
-	ruby -e "require 'securerandom'; puts SecureRandom.hex($bits)"
-}
-
 gen_random_b64() {
 	local bits="$1"
 	ruby <<-EOF
@ -57,7 +52,7 @@ chown root:$group "$secrets_file"
 if [ ! -f "$shell_secret_file" ]; then
 	echo "* Generating random secret in $shell_secret_file" >&2

-	gen_random_hex 16 > "$shell_secret_file"
+	head -c 512 /dev/urandom | LC_CTYPE=C tr -cd 'a-zA-Z0-9' | head -c 64 > "$shell_secret_file"
 	chown root:$group "$shell_secret_file"
 	chmod 0640 "$shell_secret_file"
 fi
--- a/user/gitlab-foss/libgit-1.4-compat.patch
+++ b/user/gitlab-foss/libgit-1.4-compat.patch
@ -1,11 +1,13 @@
--- a/Gemfile.lock
+diff --git a/Gemfile.lock.orig b/Gemfile.lock
+index 2e548c4..85f047a 100644
+--- a/Gemfile.lock.orig
 +++ b/Gemfile.lock
-@@ -1215 +1215 @@
-    rugged (1.2.0)
-+    rugged (1.4.4)
-@@ -1411 +1411 @@
-    undercover (0.4.4)
-+    undercover (0.4.5)
-@@ -1414 +1414 @@
-      rugged (>= 0.27, < 1.3)
-+      rugged (>= 0.27, < 1.6)
+@@ -1311,7 +1311,7 @@ GEM
+     rubyntlm (0.6.3)
+     rubypants (0.2.0)
+     rubyzip (2.3.2)
+-    rugged (1.5.1)
+    rugged (1.4.5)
+     safe_yaml (1.0.4)
+     safety_net_attestation (0.4.0)
+       jwt (~> 2.0)
--- a/user/gitlab-foss/use-bundler-2.3.patch
+++ b/user/gitlab-foss/use-bundler-2.3.patch
@ -0,0 +1,10 @@
+diff --git a/Gemfile.lock.orig b/Gemfile.lock
+index 2e548c4..59b0194 100644
+--- a/Gemfile.lock.orig
+++ b/Gemfile.lock
+@@ -1893,4 +1893,4 @@ DEPENDENCIES
+   yajl-ruby (~> 1.4.3)
+ 
+ BUNDLED WITH
+-   2.4.6
+   2.3.26
--- a/user/gitlab-shell/APKBUILD
+++ b/user/gitlab-shell/APKBUILD
@ -1,19 +1,19 @@
 # Contributor: Jakub Jirutka <jakub@jirutka.cz>
 # Maintainer: Jakub Jirutka <jakub@jirutka.cz>
 pkgname=gitlab-shell
-pkgver=14.10.0
+pkgver=14.17.0
 pkgrel=0
 pkgdesc="GitLab Shell handles git SSH sessions for GitLab"
 url="https://gitlab.com/gitlab-org/gitlab-shell"
 arch="all"
 license="MIT"
 depends="git openssh"
-makedepends="go"
+makedepends="go krb5-dev"
 pkgusers="git"
 pkggroups="git"
 install="$pkgname.pre-install $pkgname.post-install"
 # NOTE: user vs system gitconfig, see https://gitlab.com/gitlab-org/omnibus-gitlab/-/merge_requests/6166
-source="https://gitlab.com/gitlab-org/$pkgname/-/archive/v$pkgver/$pkgname-v$pkgver.tar.gz
+source="https://gitlab.com/gitlab-org/gitlab-shell/-/archive/v$pkgver/gitlab-shell-v$pkgver.tar.gz
 	config.patch
 	change-config-path.patch
 	gitconfig
@ -42,7 +42,6 @@ package() {

 	cd "$pkgdir"

-	rm "$libdir"/bin/check
 	rm "$libdir"/bin/gitlab-sshd

 	install -d -m755 -o git -g git \
@ -59,8 +58,8 @@ package() {
 }

 sha512sums="
-4062d2f31d5bcbff653a44564aabff61dfcad4f0257c0ce5c131287864faaffcc37f86eb54d22b9e02b93f7149912c42f097f6b615b3dd479bdce3ba08af35da  gitlab-shell-v14.10.0.tar.gz
-22a6e87a317bbffa063717ca5f06f08e05da90c3ea18744049abfc29b3109a34d90d366b46b381cfbf3817e410daf8d0bc51a592b51a81b7f4a9381d20e347d8  config.patch
+2329f1172fe7f765cbf40a5155c08f19534b24d80d9c2ec379e08a363f949144a3bc49a35db872f3b33e1d6d675174245c66bfe24ca09bad1d96bd0f1ca35257  gitlab-shell-v14.17.0.tar.gz
+8cf13bf472e22b1c429bba5df98afb931c80b043ec83c8366d59f15a1e9b21daf09078f134e7aa622c87b32c774d1d5cf129878d5035102c06d0b12ead33f804  config.patch
 499b3a46ea94a33a23b01f6a7509d74f5a6781b930619b3b8ae42bdeae8a052cc636578744d7992b4ae4f9b9f72b11ee3d3c0f5e50986fa3f7e35b979b08aada  change-config-path.patch
 c53da7f145593693392d9fa880ad5a1909bfc7504fd1c93d94a468c3e0f5cc80f712f41ee1dc8bf38105b410c1165658f208bd88a70c4674104c78af33d8d09c  gitconfig
 "
--- a/user/gitlab-shell/config.patch
+++ b/user/gitlab-shell/config.patch
@ -1,6 +1,8 @@
--- a/config.yml.example
+diff --git a/config.yml.example.orig b/config.yml.example
+index 886fde0..f03c897 100644
+--- a/config.yml.example.orig
 +++ b/config.yml.example
-@@ -13,7 +13,7 @@
+@@ -13,7 +13,7 @@ user: git
 # only listen on a Unix domain socket. For Unix domain sockets use
 # "http+unix://<urlquoted-path-to-socket>", e.g.
 # "http+unix://%2Fpath%2Fto%2Fsocket"
@ -9,7 +11,7 @@
 
 # When a http+unix:// is used in gitlab_url, this is the relative URL root to GitLab.
 # Not used if gitlab_url is http:// or https://.
-@@ -29,15 +29,15 @@
+@@ -29,15 +29,15 @@ http_settings:
 #
 
 # File used as authorized_keys for gitlab user
@ -28,7 +30,7 @@
 #
 # The secret field supersedes the secret_file, and if set that
 # file will not be read.
-@@ -45,13 +45,13 @@
+@@ -45,13 +45,13 @@ auth_file: "/home/git/.ssh/authorized_keys"
 
 # Log file.
 # Default is gitlab-shell.log in the root directory.
@ -45,7 +47,7 @@
 
 # Audit usernames.
 # Set to true to see real usernames in the logs instead of key ids, which is easier to follow, but
-@@ -61,45 +61,3 @@
+@@ -61,57 +61,3 @@ audit_usernames: false
 # Distributed Tracing. GitLab-Shell has distributed tracing instrumentation.
 # For more details, visit https://docs.gitlab.com/ee/development/distributed_tracing.html
 # gitlab_tracing: opentracing://driver
@ -60,6 +62,10 @@
 -  # Proxy protocol policy ("use", "require", "reject", "ignore"), "use" is the default value
 -  # Values: https://github.com/pires/go-proxyproto/blob/195fedcfbfc1be163f3a0d507fac1709e9d81fed/policy.go#L20
 -  proxy_policy: "use"
+-  # Proxy allowed IP addresses. Takes precedent over proxy_policy. Disabled by default.
+-  # proxy_allowed:
+-  #  - "192.168.0.1"
+-  #  - "192.168.1.0/24"
 -  # Address which the server listens on HTTP for monitoring/health checks. Defaults to localhost:9122.
 -  web_listen: "localhost:9122"
 -  # Maximum number of concurrent sessions allowed on a single SSH connection. Defaults to 10.
@ -91,3 +97,11 @@
 -    - /run/secrets/ssh-hostkeys/ssh_host_rsa_key-cert.pub
 -    - /run/secrets/ssh-hostkeys/ssh_host_ecdsa_key-cert.pub
 -    - /run/secrets/ssh-hostkeys/ssh_host_ed25519_key-cert.pub
+-  # GSSAPI-related settings
+-  gssapi:
+-    # Enable the gssapi-with-mic authentication method. Defaults to false.
+-    enabled: false
+-    # Keytab path. Defaults to "", system default (usually /etc/krb5.keytab).
+-    keytab: ""
+-    # The Kerberos service name to be used by sshd. Defaults to "", accepts any service name in keytab file.
+-    service_principal_name: ""
--- a/Show more
+++ b/Show more
Author	SHA1	Message	Date
Antoine Martin	7bff872938	backports/php8-pecl-inotify: new aport	2023-06-02 17:03:01 -04:00
Antoine Martin	37d1ce98d5	user/gitaly: fix bundler config issues	2023-03-14 16:19:42 -04:00
Antoine Martin	2e2b6cea68	user/gitlab-foss: upgrade to 15.9.3	2023-03-14 15:35:51 -04:00
Antoine Martin	f74aa56727	user/gitlab-foss: add missing patch	2023-03-08 13:06:53 -05:00
Antoine Martin	455d41278e	user/gitlab-foss: use gitlab-shell 14.17	2023-03-03 01:40:15 -05:00
Antoine Martin	0daa0f5273	user/gitlab-shell: upgrade to 14.17.0	2023-03-03 01:40:01 -05:00
Antoine Martin	d47baab861	gitlab-ci: fix public RSA key creation and APKINDEX signing	2023-03-03 01:39:38 -05:00
Antoine Martin	46754752e6	user/gitlab-foss: upgrade to 15.9.2	2023-03-03 00:47:45 -05:00
Antoine Martin	bf6ae6587a	gitlab-ci: fix APKINDEX signing on push	2023-02-21 22:15:29 -05:00
Antoine Martin	45ee55f106	Merge branch 'ci-initial-316' into 'v3.16' gitlab-ci: initial v3.16 See merge request ayakael/user-aports!2	2023-02-10 05:37:41 +00:00
Antoine Martin	304a1fef18	gitlab-ci: initial v3.16	2023-02-10 05:37:40 +00:00
Antoine Martin	fcbaddcfd3	gitlab-ci: unhardcode pulled repo-apk branch	2023-02-09 18:03:58 -05:00
Antoine Martin	669a372fe7	gitlab-ci: Initial verify-build-push pipeline	2023-02-09 18:03:53 -05:00
build@apk-groulx	de3d580722	user/gitlab-foss: upgrade to 15.8.1	2023-02-03 08:49:49 +00:00
build@apk-groulx	26dfacb896	user/gitlab-shell: upgrade to 4.15.0	2023-02-03 08:20:18 +00:00
build@apk-groulx	00faf34c75	user/gitlab-foss: upgrade to 15.8.0	2023-02-03 08:19:55 +00:00
build@apk-groulx	6d3b99ced7	user/git-mirror: new aport	2023-02-03 08:18:18 +00:00
build@apk-groulx	6a9a5e3d15	backports/py3-sphinxcontrib-autoprogram: backported from edge/testing	2023-02-03 08:17:48 +00:00
build@apk-groulx	14f32da4e4	backports/py3-gitlab: backported from edge/testing	2023-02-03 08:17:28 +00:00
build@apk-groulx	9b43f1ac3c	community/gitlab-foss: upgrade to 15.8.0	2023-01-30 19:18:15 +00:00
Antoine Martin	eb114fea0c	user/gitlab-foss: fix shell secret generator	2023-01-14 10:09:11 -05:00
Antoine Martin	dfeca8184d	user/gitlab-shell: keep check	2023-01-14 09:38:21 -05:00
Antoine Martin	e0e123d878	user/gitlab-foss: depend on gitlab-shell 14.14	2023-01-13 15:29:03 -05:00
Antoine Martin	207645bae5	user/gitlab-shell: downgrade to 14.14.0	2023-01-13 15:28:31 -05:00
Antoine Martin	a3be6f96b6	user/gitlab-shell: upgrade to 14.15.0	2023-01-13 14:52:27 -05:00
build@apk-groulx	787729f3ad	Added missing v3.16 backports	2023-01-12 18:10:32 +00:00