Log message:
gzip: Update to 1.15

* Noteworthy changes in release 1.15 (2026-09-20) [stable]

** Bug fixes

gzip no longer can mistakenly remove the wrong file if some other
process simultaneously renames a gzip destination's ancestor.
[bug present since the beginning]

gzip -d no longer rejects PKZIP signatures, local header, and data
descriptors.  These can appear in well-formed streamed zip files.
[bug present since the beginning]

gzip diagnostics now quote file names containing unusual characters.
[bug present since the beginning]

A use of uninitialized memory on some malformed inputs has been fixed.
[bug present since the beginning]

A buffer overflow has been fixed when decompressing an .lzh file
after decompressing a .Z file.
[bug present since the beginning]

When decompressing an .lzh file, the output is no longer corrupted
when an internal bit buffer is not properly cleared.
[bug present since the beginning]

When decompressing an .lzh file after another .lzh file, the output is
no longer corrupted by the previous file's decoding table.
[bug present since the beginning]

gzip --synchronous no longer fails to synchronize unreadable parent
directories on platforms like GNU/Linux that have O_PATH, or to
synchronize any parent directories on platforms like FreeBSD that
have O_SEARCH but not O_PATH.
[bug introduced in gzip-1.7]

On old-fashioned or limited platforms lacking mktemp, gzexe, zdiff
and znew no longer have a race when creating a temporary file.
[bug present since the beginning]

** Changes in behavior

gzip no longer insists on the "C" locale; instead, it follows the
typical practice of using the locale specified by the environment.
This change, which is needed for file name quoting, can affect the
format of floating-point numbers output by gzip's -l and -v options.
Diagnostics are still in English, though.

gzip -l now reports "-Inf%" instead of "0.0%" for the infinite
compression ratio of an empty file.

znew's -P option is now ignored, with a warning.  It was present
only to improve performance, and its implementation had too many
bugs to be worth supporting.

** Platforms no longer supported

The following platforms (or earlier) are no longer supported because
their old multibyte libraries do not work well enough: FreeBSD 4.11
(2005), HP-UX 11.00 (1997), Minix 3.1.8 (2010), MS-Windows 8.1
(2013) via mingw without UCRT.

Log message:
gzip: Add conflicts with zutils

Log message:
gzip: update to 1.14nb1.

Based on wip/gzip by drixter@ and myself.

Add patch for CVE-2026-41992, thus bump to nb1 immediately.

* Noteworthy changes in release 1.14 (2025-04-09) [stable]

** Bug fixes
  'gzip -d' no longer omits the last partial output buffer when the
  input ends unexpectedly on an IBM Z platform.
  [bug introduced in gzip-1.11]
  'gzip -l' no longer misreports lengths of multimember inputs.
  [bug introduced in gzip-1.12]
  'gzip -S' now rejects suffixes containing '/'.
  [bug present since the beginning]

** Changes in behavior
  The GZIP environment variable is now silently ignored except for the
  options -1 (--fast) through -9 (--best), --rsyncable, and --synchronous.
  This brings gzip into line with more-cautious compressors like zstd
  that limit environment variables' effect to relatively innocuous
  performance issues.  You can continue to use scripts to specify
  whatever gzip options you like.
  'zmore' is no longer installed on platforms lacking 'more'.

** Performance improvements
  gzip now decompresses significantly faster by computing CRCs via a
  slice by 8 algorithm, and faster yet on x86-64 platforms that
  support pclmul instructions.

* Noteworthy changes in release 1.13 (2023-08-19) [stable]

** Changes in behavior
  zless now diagnoses gzip failures, if using less 623 or later.
  When SIGPIPE is ignored, gzip now exits with status 2 (warning)
  instead of status 1 (error) when writing to a broken pipe.  This is
  more useful with programs like 'less' that treat gzip exit status 2
  as a non-failure.

** Bug fixes
  'gzip -d' no longer fails to report invalid compressed data
  that uses a dictionary distance outside the input window.
  [bug present since the beginning]
  Port to C23, which does not allow K&R-style function definitions
  with parameters, and which does not define __alignas_is_defined.

Log message:
archivers: fix the ordering of common package variables

Log message:
gzip: update to 1.12.

* Noteworthy changes in release 1.12 (2022-04-07) [stable]

** Changes in behavior

  'gzip -l' no longer misreports file lengths 4 GiB and larger.
  Previously, 'gzip -l' output the 32-bit value stored in the gzip
  header even though that is the uncompressed length modulo 2**32.
  Now, 'gzip -l' calculates the uncompressed length by decompressing
  the data and counting the resulting bytes.  Although this can take
  much more time, nowadays the correctness pros seem to outweigh the
  performance cons.

  'zless' is no longer installed on platforms lacking 'less'.

** Bug fixes

  zgrep applied to a crafted file name with two or more newlines
  can no longer overwrite an arbitrary, attacker-selected file.
  [bug introduced in gzip-1.3.10]

  zgrep now names input file on error instead of mislabeling it as
  "(standard input)", if grep supports the GNU -H and --label options.

  'zdiff -C 5' no longer misbehaves by treating '5' as a \ 
file name.
  [bug present since the beginning]

  Configure-time options like --program-prefix now work.

* Noteworthy changes in release 1.11 (2021-09-03) [stable]

** Performance improvements

  IBM Z platforms now support hardware-accelerated deflation.

Log message:
archivers: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and SHA512
hashes.

Log message:
archivers: Remove SHA1 distfiles hashes

Log message:
all: migrate several HOMEPAGEs to https

pkglint --only "https instead of http" -r -F

With manual adjustments afterwards since pkglint 19.4.4 fixed a few
indentations in unrelated lines.

This mainly affects projects hosted at SourceForce, as well as
freedesktop.org, CTAN and GNU.