libzypp-plugin-appdata-1.0.1+git.20180426-150400.18.3.1

- 0001-InstallAppdata-use-subprocess.run-instead-of-os.syst.patch:
  Guard against shell injection which could happen if somebody gets
  a .repo file with 'funny' repo names.
- bsc#1206836, CVE-2023-22643

- Update to version 1.0+git.20150408:
  + Drop the irrelevant LICENSE file from git.
- Update License tag to be MIT (InstallAppdata.sh) AND CC0-1.0 (the
  appdata metafiles).

- Provide 'appstream-provider': we might want to implement
  different methods of providing AppStream metadata to
  applications, and the frontends should not have to care about the
  technical details in the background. Software Centers like GNOME
  Software and Discover are supposed to use the new symbol.

- Update InstallAppdata.sh: use appstreamcli refresh-cache instead
  of refresh-index (boo#1044114).
- Drop GNOME software mention from the description. There are other
  frontends out there by now.

- InstallAppdata.sh: do not stumble over the presence of the
  appdata-failed.xml.gz file: this is for debug purpose and does
  not contain valid applications (boo#989031).
- Add awk Requires, as the latest modification relies on awk to
  find the right filenames.

- InstallAppdata.sh: prepare for YaST type repositories to receive
  appdata.xml.gz and appdata-icons.tar.gz with a hashed filename in
  order to allow mirrorbrain to distribute it.

- Expand the InstallAppdata.sh so that it (re)builds the Xapian
  database for the available appdata. This Xapian database is
  required by the KDE tools (Muon/Discover) to show the
  installed software
  * Add Requires on AppStream package as that this provides the
    appstreamcli binary

- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_appstream-sync-cache.service.patch

- Install ASHelper to %{_prefix}/lib: the scripts hardcode this
  path.