go1.4-1.4.3-bp152.3.18

- Add gcc9-rsp-clobber.patch in order to fix bsc#1121397.

- Make our profile.d/go.sh no longer set GOROOT=, in order to make switching
  between versions no longer break. This ends up removing the need for go.sh
  entirely (because GOPATH is also set automatically). boo#1119634

- Fix patch for armv6l build
  * armv6l.patch

- fix bsc#1082409: Review dependencies (requires, recommends and supports)

- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522

- Add patch to fix arbitrary code execution during “go get” or “go get -d”
  (CVE-2017-15041).
  bsc#1062085
  + cmd-go-reject-update-of-VCS-inside-VCS.patch

- Add patch to fix PlainAuth to refuse to send passwords to non-TLS servers
  (CVE-2017-15042).
  bsc#1062087
  + net-smtp-fix-PlainAuth-to-refuse-to-send-passwords-to-non-TLS-servers.patch

- Fix incorrectly ghosted files

- Provide go = 1.4
- Fix ghost files

- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions

- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.

- build without cgo on Factory
- remove mercurial requirement

- fix source location for 3rd-party libraries

- CVE-2016-5386.patch: fixes bsc#988487 aka https://httpoxy.org/

- update version 1.4.3
  * net/http: security fixes
  * build: remove -Werror from cmd/dist
  * runtime: panic when accessing an empty struct value
    appended to an uninitialized slice
  * runtime: garbage collector found invalid heap pointer
    iterating over map
  * runtime: leftover defer or casgstatus: waiting for
    Gwaiting but is Grunnable error on windows/amd64
- add patch: go-1.4.3-support-new-386_amd64-relocations.patch
- add go1.4.gdbinit for debug friendly
- drop go-wiki-gadget.xml: it has not been used from the beginning

- rename to go1.4
- use update-alternatives for /usr/bin/go and profile.d, so it
  can be co-installed with go 1.5

- fix update from 1.3.3
  Update from 1.3.3 was broken in this commit
  https://build.opensuse.org/package/rdiff/devel:languages:go/go?linkrev=base&rev=205
  That commit fixed a dangling symlink in src (src/pkg) by instead
  symlinking src, which broke compatibility.
  This commit fixes it by, instead, symlinking all the files in src.

- macros.go: fix missing quotes in %goinstall (bsc#939067)

- macros.go: fix "summary-not-capitalized"

- macros.go:
  * *-doc can't properly describe what the sub-package really is,
    and they're mostly source codes instead of the claimed "API,
    documentation, and examples". so rename to *-source. and not
    recommend to install them to save users' disk space.
  * %%go_requires should be handled automatically by golang-packaging
  * not recommend to install source package any more,
    so %%go_recommmends set to nil.

- macros.go:
  * add a "WITH_FAKE_BUILDID" option to enable the fake build ID
    compution.
  * to fake build ID, you have to make sure your package has only
    one binary. it is nonsense that two or more nonidentical
    binaries have the same build ID.

- enable debuginfo
  * the strip workaround (boo#818502) does not need any more
  * re-enable debug_packge/debug_install_post macros
- add patch: go-1.4.2-rel.plt-alignment.patch
  * cmd/ld: set alignment for the .rel.plt section on 32-bit architectures
  * https://github.com/golang/go/issues/9802
  * or i586 build will fail at extracting debuginfo
- macros.go:
  * re-enable debug_packge/debug_install_post macros from goprep()
  * add ldflags to gobuild() to compute BUILD ID for debuginfo package
- go itself doesn't support BUILD ID yet

- Remove fix_certificates_lookup_on_sles11.patch: this is superseded
  by fix_certificates.patch
- Add fix_certificates_lookup.patch: force Go to look for certificates only
  in the locations available on openSUSE and SLE. Also ensure certificates
  are found on SLE11 (previous fix_certificates_lookup_on_sles11.patch)

- Add fix_certificates_lookup_on_sles11.patch: this patch is required
  to have Go programs read the system certificates on SLE11.
  See issue https://github.com/golang/go/issues/6391

- Fix building of all the Go packages under devel:languages:go. The
  %goprep macro contained some unescaped lines, causing go install to
  attempt the installation of the build artifacts outside of the
  buildroot.

- disable debuginfo/debug package creation on all golang packages
  * .a files in golang doesn't contain debuginfo right now,
    so extract a debug package will cause
    "Failed to write file: invalid section alignment"
    and we don't need to bother stripping them.
  * we can't depend on good luck for all golang packages, hoping
    they'll pass the build and not randomly fail.

- remove "go_disable_brp_strip_static_archive" macro from macros.go,
  which contains redefinition of os_install_post too.
- disable debug package generation for all architectures, because:
  * build IDs are not generated at all, even for successful builds
  * "Failed to write file: invalid section alignment" on arm/i586.

- remove redefinition of os_install_post macro, which was used to
  override brp-strip-static-archive that has been manually removed
  from openSUSE distribution since 2011.05.
- This might fix i586 builds for openSUSE:Factory:
  * Too many levels of recursion in macro expansion
  * Failed to write file: invalid section alignment

- Added Obsoletes for go-vim/emacs, they went to separate projects

- Fix dangling-symlink /usr/lib64/go/src/pkg /usr/share/go/src/pkg

- allow-binary-only-packages.patch: Revert missed patch and update for 1.4

- Updated to 1.4.2:
  Support of editors has been dropped

- Updated to 1.3.3: includes further bug fixes to cgo, the runtime package,s
  and the nacl port.
- Changes associated with release 1.3.2: includes bug fixes to cgo and the
  crypto/tls packages. See the change history for details (bnc#898901 -
  CVE-2014-7189).

- avoid stripping debuginfo on arm, it fails (and is not necessary)

- add armv6l.patch
  * workaround for qemu-arm bug
  * under qemu on armv6 the number of unix signals isn't 64 but 63.
    thus there is an off-by-one error while building and testing.
    this fix now reduces the constant defining the number of signals
    by 1, but that of course means signal handling won't be 100%
    correct.
  * https://groups.google.com/forum/#!topic/golang-nuts/MqKTX_XIOKE