# Maintainer: Carlo Landmeter <clandmeter@alpinelinux.org>
pkgname=expat
pkgver=2.8.5
_tagver=R_${pkgver//./_}
pkgrel=0
pkgdesc="XML Parser library written in C"
url="https://libexpat.github.io/"
arch="all"
license="MIT"
checkdepends="bash"
source="https://github.com/libexpat/libexpat/releases/download/$_tagver/expat-$pkgver.tar.xz"
# pull in xmlwf for dev
depends_dev="$pkgname=$pkgver-r$pkgrel"
# Order matters, ensure -dev does not gobble up static libraries.
subpackages="$pkgname-static $pkgname-dev $pkgname-doc lib$pkgname:libs"

# secfixes:
#   2.8.5-r0:
#     - CVE-2026-93990
#   2.8.4-r0:
#     - CVE-2026-66046
#     - CVE-2026-76641
#     - CVE-2026-76956
#     - CVE-2026-76957
#   2.8.2-r0:
#     - CVE-2026-50219
#     - CVE-2026-56131
#     - CVE-2026-56132
#     - CVE-2026-56403
#     - CVE-2026-56404
#     - CVE-2026-56405
#     - CVE-2026-56406
#     - CVE-2026-56407
#     - CVE-2026-56408
#     - CVE-2026-56409
#     - CVE-2026-56410
#     - CVE-2026-56411
#     - CVE-2026-56412
#   2.8.1-r0:
#     - CVE-2026-45186
#   2.8.0-r0:
#     - CVE-2026-41080
#   2.7.5-r0:
#     - CVE-2026-32776
#     - CVE-2026-32777
#     - CVE-2026-32778
#   2.7.4-r0:
#     - CVE-2026-24515
#     - CVE-2026-25210
#   2.7.2-r0:
#     - CVE-2025-59375
#   2.7.0-r0:
#     - CVE-2024-8176
#   2.6.4-r0:
#     - CVE-2024-50602
#   2.6.3-r0:
#     - CVE-2024-45490
#     - CVE-2024-45491
#     - CVE-2024-45492
#   2.6.2-r0:
#     - CVE-2024-28757
#   2.6.0-r0:
#     - CVE-2023-52425
#     - CVE-2023-52426
#   2.5.0-r0:
#     - CVE-2022-43680
#   2.4.9-r0:
#     - CVE-2022-40674
#   2.4.5-r0:
#     - CVE-2022-25235
#     - CVE-2022-25236
#     - CVE-2022-25313
#     - CVE-2022-25314
#     - CVE-2022-25315
#   2.4.4-r0:
#     - CVE-2022-23852
#     - CVE-2022-23990
#   2.4.3-r0:
#     - CVE-2021-45960
#     - CVE-2021-46143
#     - CVE-2022-22822
#     - CVE-2022-22823
#     - CVE-2022-22824
#     - CVE-2022-22825
#     - CVE-2022-22826
#     - CVE-2022-22827
#   2.2.7-r1:
#     - CVE-2019-15903
#   2.2.7-r0:
#     - CVE-2018-20843
#   2.2.0-r1:
#     - CVE-2017-9233
#   0:
#     - CVE-2026-72522

build() {
	./configure \
		--build=$CBUILD \
		--host=$CHOST \
		--prefix=/usr \
		--mandir=/usr/share/man \
		--enable-static
	make
}

check() {
	make check
}

package() {
	make DESTDIR="$pkgdir/" install
}

sha512sums="
ad3d4198a70682c7c8b2149cb7c743585cc9470ea2e4bd81ec7c0aff9545d9010b51df5cfcd0714335c7ef1578537cbd2a5580f649246b4ea78ee5e3466808a3  expat-2.8.5.tar.xz
"
