@gjsify/gtk-runtime-win32-x64 0.45.0 → 0.46.0

package/README.md

@@ -24,7 +24,7 @@ gtk/
   bin/                     GTK/GLib/cairo/pango/graphene/gdk-pixbuf DLLs (+ deps)
   girepository-1.0/        typelibs — ONLY those this bundle can back (see below)
   lib/ share/ etc/         --windowing only: pixbuf loaders, schemas, icons, fontconfig
-  licenses/                license texts recovered from the gvsbuild prefix
+  licenses/                license texts from the gvsbuild prefix, plus vendored ones
   THIRD-PARTY-NOTICES.md   what is bundled, under which terms, and that it is unmodified
   manifest.json            counts + sizes + DLL list + symmetry/license proof
 ```
@@ -67,8 +67,20 @@ not shipped):
    (`share/doc/<project>/COPYING|LICENSE`, `share/licenses/<project>/*`) into
    `gtk/licenses/` and write `gtk/THIRD-PARTY-NOTICES.md`, which lists every bundled
    DLL and states that the DLLs are byte-identical copies (no relocation on Windows).
-   Per-DLL attribution is deliberately NOT invented: the prefix is one flat build tree,
-   so the whole corpus ships and the notice says the mapping is not recoverable.
+   Per-DLL *terms* are deliberately NOT invented: the prefix is one flat build tree, so
+   the notice says the DLL→project mapping is not recoverable from it.
+
+   "The whole corpus ships" used to stand here and was measured false. Counted on a real
+   artifact: 90 shipped binaries against 45 projects the prefix documents, leaving **14
+   binaries whose project had no license text at all** — `glib` among them, five DLLs
+   under LGPL-2.1-or-later, missing from every win32 tarball published before this. The
+   coverage check only ran its per-binary rules under `attribution: "per-binary"`, and
+   this bundle passes `prefix`, so it effectively asserted that *some* license text
+   existed. A corpus of one file would have satisfied it.
+   So every shipped binary is now named against a project (`WIN32_LICENSE_FAMILIES`, a
+   NAME map — it carries no terms), coverage is enforced in both attribution modes, and
+   texts the prefix does not install are vendored under `licenses-not-in-prefix/` with
+   their provenance pinned to the gvsbuild version.
 
 Contrast with macOS, where dyld bakes each dylib's dependency install-names, so the
 darwin bundle must rewrite every reference to `@loader_path/<leaf>` and ad-hoc

package/gtk/THIRD-PARTY-NOTICES.md

@@ -18,6 +18,10 @@ Per-binary attribution is **not recoverable** from this build prefix: it is a si
 tree, so the license corpus it ships is reproduced in full below and applies to the bundled
 binaries collectively. Listing every project the prefix documents is deliberate over-inclusion.
 
+What is NOT left to over-inclusion is coverage: the build fails unless every bundled binary
+belongs to a declared project whose terms are in this payload, so a shipped library with no
+license text cannot leave the builder.
+
 | Component | Version | License (as declared by the build prefix) | Texts included |
 |---|---|---|---|
 | adwaita-icon-theme | — | (see included text) | COPYING_CCBYSA3, COPYING, COPYING_LGPL |
@@ -26,11 +30,17 @@ binaries collectively. Listing every project the prefix documents is deliberate
 | directx-headers | — | (see included text) | LICENSE |
 | expat | — | (see included text) | AUTHORS, COPYING |
 | fontconfig | — | (see included text) | COPYING |
+| freetype \* | — | (see included text) | LICENSE-FTL.TXT, LICENSE-GPLv2.TXT, LICENSE.TXT |
 | fribidi | — | (see included text) | COPYING |
 | gdk-pixbuf | — | (see included text) | COPYING |
 | gettext | — | (see included text) | COPYING |
+| glib \* | — | (see included text) | COPYING |
+| glib-networking | — | (see included text) | COPYING, LICENSE_EXCEPTION |
 | glibmm | — | (see included text) | COPYING |
+| gobject-introspection \* | — | (see included text) | COPYING, COPYING.LGPL |
 | gperf | — | (see included text) | COPYING |
+| graphene \* | — | (see included text) | LICENSE.txt |
+| gsettings-desktop-schemas | — | (see included text) | COPYING |
 | gst-plugins-base | — | (see included text) | COPYING |
 | gst-plugins-good | — | (see included text) | COPYING |
 | gstreamer | — | (see included text) | COPYING |
@@ -38,15 +48,23 @@ binaries collectively. Listing every project the prefix documents is deliberate
 | gtkmm | — | (see included text) | COPYING |
 | gtksourceview5 | — | (see included text) | COPYING |
 | harfbuzz | — | (see included text) | COPYING |
+| icu | — | (see included text) | LICENSE |
 | libadwaita | — | (see included text) | COPYING |
 | libepoxy | — | (see included text) | COPYING |
 | libffi | — | (see included text) | LICENSE |
 | libjpeg-turbo | — | (see included text) | LICENSE.md |
 | libpng | — | (see included text) | LICENSE |
+| libpsl | — | (see included text) | LICENSE |
 | librsvg | — | (see included text) | COPYING.LIB |
 | libsigc++ | — | (see included text) | COPYING |
+| libsoup3 | — | (see included text) | COPYING |
+| libtiff \* | — | (see included text) | LICENSE.md |
+| libxml2 \* | — | (see included text) | COPYING |
 | libyuv | — | (see included text) | LICENSE |
+| mit-kerberos | — | (see included text) | NOTICE |
+| nghttp2 | — | (see included text) | COPYING |
 | ogg | — | (see included text) | COPYING |
+| openssl \* | — | (see included text) | LICENSE.txt |
 | opus | — | (see included text) | COPYING |
 | orc | — | (see included text) | COPYING |
 | pango | — | (see included text) | COPYING |
@@ -57,9 +75,13 @@ binaries collectively. Listing every project the prefix documents is deliberate
 | protobuf-c | — | (see included text) | LICENSE |
 | pycairo | — | (see included text) | COPYING, COPYING-LGPL-2.1, COPYING-MPL-1.1 |
 | pygobject | — | (see included text) | COPYING |
+| sqlite \* | — | (see included text) | LICENSE.md |
 | win-iconv | — | (see included text) | COPYING |
+| zlib \* | — | (see included text) | LICENSE |
+
+\* The build prefix documents no terms for 9 project(s) it nevertheless builds binaries from, so their texts are reproduced from the upstream release the prefix pins. The file and the version it was taken from are recorded next to the builder — `freetype`, `glib`, `gobject-introspection`, `graphene`, `libtiff`, `libxml2`, `openssl`, `sqlite`, `zlib`.
 
-38 component(s) ship their license text in `licenses/`; 0 declare a license without shipping its text in the build prefix — for those the declared identifier above is the authoritative statement of terms, and the corresponding text is obtainable from the project and from spdx.org/licenses.
+54 component(s) ship their license text in `licenses/`; 0 declare a license without shipping its text in the build prefix — for those the declared identifier above is the authoritative statement of terms, and the corresponding text is obtainable from the project and from spdx.org/licenses.
 
 ## Bundled binaries
 
@@ -67,6 +89,7 @@ binaries collectively. Listing every project the prefix documents is deliberate
 - `cairo-2.dll`
 - `cairo-gobject-2.dll`
 - `cairo-script-interpreter-2.dll`
+- `comerr64.dll`
 - `epoxy-0.dll`
 - `ffi-8.dll`
 - `fontconfig-1.dll`
@@ -74,35 +97,68 @@ binaries collectively. Listing every project the prefix documents is deliberate
 - `fribidi-0.dll`
 - `gdk_pixbuf-2.0-0.dll`
 - `gio-2.0-0.dll`
+- `giognomeproxy.dll`
+- `gioopenssl.dll`
 - `girepository-1.0-1.dll`
 - `girepository-2.0-0.dll`
 - `glib-2.0-0.dll`
 - `gmodule-2.0-0.dll`
 - `gobject-2.0-0.dll`
 - `graphene-1.0-0.dll`
+- `gssapi64.dll`
+- `gst-plugin-scanner.exe`
+- `gstalaw.dll`
 - `gstapp-1.0-0.dll`
+- `gstapp.dll`
 - `gstaudio-1.0-0.dll`
+- `gstaudioconvert.dll`
+- `gstaudiomixer.dll`
+- `gstaudioparsers.dll`
+- `gstaudiorate.dll`
+- `gstaudioresample.dll`
+- `gstaudiotestsrc.dll`
+- `gstauparse.dll`
+- `gstautodetect.dll`
 - `gstbase-1.0-0.dll`
+- `gstcoreelements.dll`
+- `gstdirectsound.dll`
+- `gstisomp4.dll`
+- `gstmulaw.dll`
+- `gstogg.dll`
+- `gstopus.dll`
 - `gstpbutils-1.0-0.dll`
+- `gstplayback.dll`
 - `gstreamer-1.0-0.dll`
 - `gstriff-1.0-0.dll`
 - `gstrtp-1.0-0.dll`
+- `gstsoup.dll`
 - `gsttag-1.0-0.dll`
+- `gsttypefindfunctions.dll`
 - `gstvideo-1.0-0.dll`
+- `gstvolume.dll`
+- `gstwavparse.dll`
 - `gtk-4-1.dll`
 - `gtksourceview-5-0.dll`
 - `harfbuzz-cairo.dll`
 - `harfbuzz-gobject.dll`
 - `harfbuzz-gpu.dll`
+- `harfbuzz-icu.dll`
 - `harfbuzz-raster.dll`
 - `harfbuzz-subset.dll`
 - `harfbuzz-vector.dll`
 - `harfbuzz.dll`
 - `iconv.dll`
+- `icudt78.dll`
+- `icuuc78.dll`
 - `intl.dll`
 - `jpeg62.dll`
+- `k5sprt64.dll`
+- `krb5_64.dll`
+- `libcrypto-3-x64.dll`
 - `libexpat.dll`
 - `libpng16.dll`
+- `libssl-3-x64.dll`
+- `nghttp2.dll`
 - `opus-0.dll`
 - `orc-0.4-0.dll`
 - `pango-1.0-0.dll`
@@ -110,8 +166,12 @@ binaries collectively. Listing every project the prefix documents is deliberate
 - `pangoft2-1.0-0.dll`
 - `pangowin32-1.0-0.dll`
 - `pcre2-8-0.dll`
+- `pixbufloader_svg.dll`
 - `pixman-1-0.dll`
+- `psl-5.dll`
 - `rsvg-2-2.dll`
+- `soup-3.0-0.dll`
+- `sqlite3.dll`
 - `tiff.dll`
 - `xml2-16.dll`
 - `zlib1.dll`

package/gtk/licenses/freetype/LICENSE-FTL.TXT

@@ -0,0 +1,169 @@
+                    The FreeType Project LICENSE
+                    ----------------------------
+
+                            2006-Jan-27
+
+                    Copyright 1996-2002, 2006 by
+          David Turner, Robert Wilhelm, and Werner Lemberg
+
+
+
+Introduction
+============
+
+  The FreeType  Project is distributed in  several archive packages;
+  some of them may contain, in addition to the FreeType font engine,
+  various tools and  contributions which rely on, or  relate to, the
+  FreeType Project.
+
+  This  license applies  to all  files found  in such  packages, and
+  which do not  fall under their own explicit  license.  The license
+  affects  thus  the  FreeType   font  engine,  the  test  programs,
+  documentation and makefiles, at the very least.
+
+  This  license   was  inspired  by  the  BSD,   Artistic,  and  IJG
+  (Independent JPEG  Group) licenses, which  all encourage inclusion
+  and  use of  free  software in  commercial  and freeware  products
+  alike.  As a consequence, its main points are that:
+
+    o We don't promise that this software works. However, we will be
+      interested in any kind of bug reports. (`as is' distribution)
+
+    o You can  use this software for whatever you  want, in parts or
+      full form, without having to pay us. (`royalty-free' usage)
+
+    o You may not pretend that  you wrote this software.  If you use
+      it, or  only parts of it,  in a program,  you must acknowledge
+      somewhere  in  your  documentation  that  you  have  used  the
+      FreeType code. (`credits')
+
+  We  specifically  permit  and  encourage  the  inclusion  of  this
+  software, with  or without modifications,  in commercial products.
+  We  disclaim  all warranties  covering  The  FreeType Project  and
+  assume no liability related to The FreeType Project.
+
+
+  Finally,  many  people  asked  us  for  a  preferred  form  for  a
+  credit/disclaimer to use in compliance with this license.  We thus
+  encourage you to use the following text:
+
+   """
+    Portions of this software are copyright © <year> The FreeType
+    Project (https://freetype.org).  All rights reserved.
+   """
+
+  Please replace <year> with the value from the FreeType version you
+  actually use.
+
+
+Legal Terms
+===========
+
+0. Definitions
+--------------
+
+  Throughout this license,  the terms `package', `FreeType Project',
+  and  `FreeType  archive' refer  to  the  set  of files  originally
+  distributed  by the  authors  (David Turner,  Robert Wilhelm,  and
+  Werner Lemberg) as the `FreeType Project', be they named as alpha,
+  beta or final release.
+
+  `You' refers to  the licensee, or person using  the project, where
+  `using' is a generic term including compiling the project's source
+  code as  well as linking it  to form a  `program' or `executable'.
+  This  program is  referred to  as  `a program  using the  FreeType
+  engine'.
+
+  This  license applies  to all  files distributed  in  the original
+  FreeType  Project,   including  all  source   code,  binaries  and
+  documentation,  unless  otherwise  stated   in  the  file  in  its
+  original, unmodified form as  distributed in the original archive.
+  If you are  unsure whether or not a particular  file is covered by
+  this license, you must contact us to verify this.
+
+  The FreeType  Project is copyright (C) 1996-2000  by David Turner,
+  Robert Wilhelm, and Werner Lemberg.  All rights reserved except as
+  specified below.
+
+1. No Warranty
+--------------
+
+  THE FREETYPE PROJECT  IS PROVIDED `AS IS' WITHOUT  WARRANTY OF ANY
+  KIND, EITHER  EXPRESS OR IMPLIED,  INCLUDING, BUT NOT  LIMITED TO,
+  WARRANTIES  OF  MERCHANTABILITY   AND  FITNESS  FOR  A  PARTICULAR
+  PURPOSE.  IN NO EVENT WILL ANY OF THE AUTHORS OR COPYRIGHT HOLDERS
+  BE LIABLE  FOR ANY DAMAGES CAUSED  BY THE USE OR  THE INABILITY TO
+  USE, OF THE FREETYPE PROJECT.
+
+2. Redistribution
+-----------------
+
+  This  license  grants  a  worldwide, royalty-free,  perpetual  and
+  irrevocable right  and license to use,  execute, perform, compile,
+  display,  copy,   create  derivative  works   of,  distribute  and
+  sublicense the  FreeType Project (in  both source and  object code
+  forms)  and  derivative works  thereof  for  any  purpose; and  to
+  authorize others  to exercise  some or all  of the  rights granted
+  herein, subject to the following conditions:
+
+    o Redistribution of  source code  must retain this  license file
+      (`FTL.TXT') unaltered; any  additions, deletions or changes to
+      the original  files must be clearly  indicated in accompanying
+      documentation.   The  copyright   notices  of  the  unaltered,
+      original  files must  be  preserved in  all  copies of  source
+      files.
+
+    o Redistribution in binary form must provide a  disclaimer  that
+      states  that  the software is based in part of the work of the
+      FreeType Team,  in  the  distribution  documentation.  We also
+      encourage you to put an URL to the FreeType web page  in  your
+      documentation, though this isn't mandatory.
+
+  These conditions  apply to any  software derived from or  based on
+  the FreeType Project,  not just the unmodified files.   If you use
+  our work, you  must acknowledge us.  However, no  fee need be paid
+  to us.
+
+3. Advertising
+--------------
+
+  Neither the  FreeType authors and  contributors nor you  shall use
+  the name of the  other for commercial, advertising, or promotional
+  purposes without specific prior written permission.
+
+  We suggest,  but do not require, that  you use one or  more of the
+  following phrases to refer  to this software in your documentation
+  or advertising  materials: `FreeType Project',  `FreeType Engine',
+  `FreeType library', or `FreeType Distribution'.
+
+  As  you have  not signed  this license,  you are  not  required to
+  accept  it.   However,  as  the FreeType  Project  is  copyrighted
+  material, only  this license, or  another one contracted  with the
+  authors, grants you  the right to use, distribute,  and modify it.
+  Therefore,  by  using,  distributing,  or modifying  the  FreeType
+  Project, you indicate that you understand and accept all the terms
+  of this license.
+
+4. Contacts
+-----------
+
+  There are two mailing lists related to FreeType:
+
+    o freetype@nongnu.org
+
+      Discusses general use and applications of FreeType, as well as
+      future and  wanted additions to the  library and distribution.
+      If  you are looking  for support,  start in  this list  if you
+      haven't found anything to help you in the documentation.
+
+    o freetype-devel@nongnu.org
+
+      Discusses bugs,  as well  as engine internals,  design issues,
+      specific licenses, porting, etc.
+
+  Our home page can be found at
+
+    https://freetype.org
+
+
+--- end of FTL.TXT ---