commit de97d8448870eafbc7d84ab92ac143486dd48607
Author: lucascouts <lucascs@protonmail.com>
Date: Sun Sep 6 20:28:03 2026 -0300

fix(app-office/libreoffice-l10n, dev-util/vulkan-tools): two dependency lags, mod(dev-lang/lua, sci-biology/foldingathome): tag two that only look like lags, mod(scripts/gentoo-parity.sh): re-measure A20

Second parity remediation batch, and it splits the same way the gstreamer one
did: half were real, half were consequences of a decision already recorded
somewhere else. Deciding which is which is the work; the edits are one line each.

THE TWO LAGS.

libreoffice-l10n never set RPM_COMPRESS_TYPE. rpm.eclass then takes its unset
branch - "the ebuild hasn't been updated to resolve deprecations" - and narrows
BDEPEND to || ( app-arch/rpm2targz ) alone, dropping ::gentoo's
>=app-arch/rpm-4.19.0[lzma(+)]. Anyone who already has app-arch/rpm installed is
pushed to install rpm2targz as well, for nothing. Measured rather than copied:
extracting a langpack from DISTDIR and running strings over the RPM inside
reports PayloadIsXz, which is exactly the value ::gentoo declares. The variable
is @PRE_INHERIT, so it goes above the inherit or the eclass never sees it.

vulkan-tools got back test? ( dev-cpp/gtest ). The comment sitting there since
2026-09-04 already said what to do - "restore the atom or state why it is
unwanted" - and there is no reason to want it gone: it was collateral from the
edit that rewrote the SDK pins. The tests that need it are behind USE=test, so
its absence is invisible until someone enables that flag and the build fails
looking for gtest.

THE TWO THAT ONLY LOOK LIKE LAGS.

lua is missing app-portage/elt-patches, and must be. libtool.eclass is what puts
that in BDEPEND, and this ebuild deliberately does not inherit it - a divergence
already tagged on the INHERIT axis, because no Gentoo autotools-patched tarball
exists for 5.5 and it drives upstream's Makefile with tc-getCC instead. Nothing
here runs elibtoolize, and elt-patches exists only to feed it.

foldingathome is missing dev-util/patchelf from DEPEND because it MOVED to
BDEPEND, where a build-time tool belongs, and gained an elogind? guard. The
BDEPEND side was already tagged; the axis it left was not. Worth stating plainly
because it generalises: moving an atom between depend axes produces TWO
divergence rows, and tagging only the destination leaves the origin reading
ALIGN forever.

Verified. The md5-cache delta is exactly +[>=app-arch/rpm-4.19.0[lzma(+)]] twice
and +[test? ( dev-cpp/gtest )] once, with no removal anywhere and no depset
change at all on lua and foldingathome, whose edits are comments. pkgcheck was
run against a worktree at c10066d9d and produces identical findings before and
after on all four. The sweep goes 235 rows to 232: three closed, two
reclassified, nothing new. --self-test is 24/24 with A20 re-measured.

NOT VERIFIED: nothing was merged - this host has no sudo, and Portage reads
/var/db/repos/bentoo rather than the checkout. check-foldingathome-image.sh was
not run because it asserts properties of an installed image and this commit
changes no phase, no atom and no installed byte of that package.

RELATED FINDING, left alone: four more overlay ebuilds inherit rpm.eclass with
no RPM_COMPRESS_TYPE - proton-mail-bin, github-desktop, openoffice-bin and one
libreoffice-l10n sibling already covered here. The parity sweep cannot see three
of them because ::gentoo carries no counterpart, so the same latent narrowing is
there unaudited. Each needs its own payload measured; do not assume xz.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

commit 1e14c8268a760e32ca56b89847a08132bbea4cbd
Author: lucascouts <lucascs@protonmail.com>
Date: Sat Sep 5 18:09:16 2026 -0300

mod(sys-kernel/linux-firmware, dev-lang/{lua,ghc}, net-misc/nxplayer, net-analyzer/netdata, media-video/shotcut): document 16 divergences

Sixteen UNDOCUMENTED axes, each evaluated before being written about
rather than after. All sixteen turned out to be deliberate, which is
worth stating explicitly because roughly a third of this sweep's earlier
findings were defects or dead weight rather than divergences.

linux-firmware INHERIT BDEPEND git-r3 with a pinned EGIT_COMMIT;
bentoo cuts snapshots between
::gentoo's dated releases
lua INHERIT DEFINED_PHASES
no Gentoo autotools-patched
tarball exists for 5.5, so this
drives upstream's Makefile with
toolchain-funcs where ::gentoo
runs elibtoolize
nxplayer INHERIT DEFINED_PHASES
series 10 ships a .deb where the
7.x in ::gentoo is a .tar.gz
netdata LICENSE IUSE BDEPEND PATCHES
SQLite comes from SRC_URI because
upstream pulls it with
ExternalProject, which downloads
even under FULLY_DISCONNECTED
ghc BDEPEND PATCHES series 9.14, which ::gentoo does
not package at all
shotcut IUSE DEPEND RDEPEND BDEPEND
series 26 dep set and its upstream
-DUSE_VULKAN option; ::gentoo is
still on 25.08

Two readings were checked and rejected before writing. lua, ghc and
nxplayer were verified against ::gentoo's actual version list rather
than taken on the premise that it lags -- it carries lua only to 5.4.8,
ghc to 9.8.4, nxplayer to 7.6.2.4, so none of the three has a
counterpart to align to. And shotcut's added deps were checked for being
unconditional where USE=vulkan exists: qtwebsockets, fftw and libX11 are
unrelated to vulkan and unconditional upstream, so they stay where they
are.

Every tag names exactly one axis. The parser reads up to the first
space, so "DEPEND/RDEPEND" or "DEPEND, RDEPEND" on one line justifies
neither.

egencache also dropped 11 orphaned md5-cache entries for
linux-firmware and nxplayer versions whose ebuilds are long gone.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

commit 0922e3b48f2a627434a525b4a264160e439334af
Author: lucascouts <lucascs@protonmail.com>
Date: Sat Sep 5 14:07:28 2026 -0300

mod(sys-firmware/edk2, net-libs/libqmi, app-editors/{vim,zed}, app-office/libreoffice, +10): apply the approved parity remediation

Second pass over the 2026-09-04 audit, after the items that block or verify.
Each one was re-measured against the tree as it stands today rather than taken
from the report, and three of them came out differently for it.

SECURITY, and the one judgement call in the set:

sys-firmware/edk2 -> openssl 3.5.8 (revbump to -r2). We are deliberately NOT
faithful to edk2-stable202608's submodule pin (8cf17aae = 3.5.7) here, which is
the unusual direction for this overlay, so the ebuild carries the reasoning: the
library is linked statically into firmware with no host update path, and 3.5.8
fixes ten CVEs including CVE-2026-63072, an 8-byte OOB heap write in CMS
AES-WRAP-PAD. Diverging from a submodule SHA is reversible at any bump; an
unfixed CVE in flashed firmware is not. ::gentoo made the same call.

SILENT CORRECTNESS:

net-libs/libqmi declared SLOT="0/5.11" while installing libqmi-glib.so.5.12.0
(measured in VDB CONTENTS). A subslot that does not match its library disables
the rebuild it exists to trigger. Revbumped to -r1, because correcting the value
alone only changes what FUTURE consumers record.

app-editors/zed gained sys-apps/xdg-desktop-portal, which it never had: ashpd is
used from both gpui backends (x11/client.rs and wayland/client.rs), so file
dialogs and screen capture failed at runtime, not at build. ::gentoo has it.

dev-util/glslang gained the multilib_src_test skip for bug #977176. We keyword
~arm without the skip that makes ~arm testable.

app-office/libreoffice: --disable-gtk3 sat 44 lines above $(use_enable gtk3),
contradicting IUSE="+gtk3". It works today only because autoconf honours the
last flag, so a reordering breaks it silently -- removed.
--enable-skia-vulkan-validation was passed unconditionally inside
--enable-release-build; that is SK_ENABLE_VK_LAYERS=1, debug instrumentation, so
it is now gated on USE=debug. Plus the two missing := subslots.

app-editors/vim: restore five of the six patches in ::gentoo's vim-patches
snapshot, which this overlay had been dropping on every bump. Measured, not
assumed -- each verified with portage's own patch flags against the 9.2.1036
tarball. 002_all_vim-7.3-apache is deliberately excluded and tagged: it fails
with 2 hunks because upstream rewrote the block, and it costs syntax
highlighting for two Gentoo-specific config paths. ::gentoo has not hit this yet
(its newest vim is 9.1.1652, where it still applies).

ARCH COVERAGE, against the overlay's own "restricting to ~amd64 needs a
justification" rule. All widened to ~arch only -- our versions are newer than
::gentoo's, so nothing enters stable: dev-lang/lua (1 arch -> 16),
media-plugins/frei0r-plugins (2 -> 9), app-emulation/qemu (2 -> 8),
net-analyzer/netdata (1 -> 5), dev-util/mesa_clc (+~riscv).

dev-util/spirv-headers is the one with a measured failure behind it, and the
audit had it backwards. It is not behind ::gentoo -- it is byte-identical to
their 9999. The defect is INTERNAL: our spirv-tools carries 13 arches and our
spirv-headers 8, so the consumer cannot resolve its header on ~mips (48
profiles) and ~alpha (82). Widened to match the consumer; pkgcheck
NonsolvableDeps for the pair goes to zero.

STALE FLOORS: media-libs/mesa RUST_MIN_VER 1.82.0 -> 1.85.0 (::gentoo raised it
at 26.2.1); net-misc/modemmanager was LOWERING the tree-wide
gobject-introspection floor to 1.38.

WHERE THE REPORT WAS WRONG:

media-gfx/imagemagick "lost verify-sig" is not remediable and the ebuild now
says why, with evidence. The old comment claimed upstream signs only the latest
release; it does not sign that either -- 7.1.2-31 IS the newest and both the
tarball and its .asc are 404 on all three mirror://imagemagick hosts, as are
-30, -29, -28 and -25. ::gentoo's copy works because Gentoo mirrors distfiles on
its own infrastructure. Adopting their SRC_URI would trade a working fetch for a
signature we cannot obtain, so the divergence is documented with the two
conditions that would reverse it.

The vim finding was five patches, not four. The spirv-headers finding pointed at
the wrong tree.

Also drops app-editors/vim-core/files/{vimrc-r7,xxd-completion}, orphaned -- no
ebuild in the overlay references either.

Verification: pkgcheck one target at a time with --cache=-git over all 16
packages. What remains is pre-existing or inherited and was checked as such:
app-editors/zed DeprecatedEclass llvm-r1 (::gentoo's zed uses it too),
app-office/libreoffice NonsolvableDeps on media-libs/libeot (no ~arm in
::gentoo). egencache with an explicit filter; it also pruned 101 orphan cache
entries, and no live ebuild lost its entry. No build was merged -- this host has
no sudo.

app-office/libreoffice-l10n is NOT in this commit. The new digest axis found all
180 of its 26.2.6.1 distfiles missing from the Manifest; regenerating it is a
separate change and a large download.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

commit 9558f41a14e8c3c1275ccf9a7039d5861dc02d2d
Author: lucascouts <lucascs@protonmail.com>
Date: Mon Aug 3 22:24:34 2026 -0300

add(metadata/{md5-cache/dev-lang/lua-5.5.1, md5-cache/dev-util/mesa_clc-26.3.0_pre20260804, md5-cache/media-libs/mesa-26.3.0_pre20260804, md5-cache/sci-ml/llama-cpp-0_pre10248}), up(dev-lang/lua-5.5.0 -> 5.5.1, dev-util/mesa_clc-26.3.0_pre20260803 -> 26.3.0_pre20260804, media-libs/mesa-26.3.0_pre20260803 -> 26.3.0_pre20260804, sci-ml/llama-cpp-0_pre10245 -> 0_pre10248)

commit 5eecb60cc1fbe315f2bd16bbf9bdf9fcc68a5d0d
Author: lucascouts <lucascs@protonmail.com>
Date: Mon Feb 9 16:29:36 2026 -0300

add(dev-lang/lua-5.5.0)

commit c37938fb612bbdd71144a6059b7e57b91c10d467
Author: lucascouts <lucascs@protonmail.com>
Date: Sun Aug 25 22:03:21 2019 +0000

the master branch is the minimal overlay configuration.

commit 141f853da589a21cdfe86b84c1fea296f3542f12
Author: lucascouts <lucascs@protonmail.com>
Date: Wed Jun 19 19:15:14 2019 -0300

add+ dev-lang/lua-5.3.5-r1

commit 4c9cf3c5ad3d8e216d9d27fcbcea802cea68d8db
Author: lucascouts <lucascs@protonmail.com>
Date: Mon Jun 17 22:54:51 2019 -0300

del- dev-lang/lua-5.3.5-r1

commit e1c6c1e21632c76feb0418c81ee2f82a19270565
Author: lucascouts <lucascs@protonmail.com>
Date: Mon Jun 17 20:59:40 2019 -0300

add+ dev-lang/lua-5.2.4-r1

commit 9782356513650dd73a0132ad757706c8577c7fc1
Author: lucascouts <lucascs@protonmail.com>
Date: Sun Jun 16 02:33:38 2019 -0300

add+ dev-lang/lua-5.3.5-r1