build: Bump expat to the latest version

[hebasto]

This change includes security fixes:

• https://github.com/libexpat/libexpat/blob/R_2_4_3/expat/Changes
• https://github.com/libexpat/libexpat/blob/R_2_4_4/expat/Changes
• https://github.com/libexpat/libexpat/blob/R_2_4_5/expat/Changes

[laanwj]

Expat is a dependency of fontconfig (right?), which is linked dynamically. So as I understand it, we don't actually link it into the binary. If that is the case, bumping its minor version makes no difference at all.

[hebasto]

Expat is a dependency of fontconfig (right?), which is linked dynamically. So as I understand it, we don't actually link it into the binary. If that is the case, bumping its minor version makes no difference at all.

Correct. I've suggested this change as a part of #22708, where the native_expat package being linked statically.

[DrahtBot]

The following sections might be updated with supplementary metadata relevant to reviewers and maintainers.

Conflicts

No conflicts as of last run.

[hebasto]

Expat is a dependency of fontconfig (right?), which is linked dynamically. So as I understand it, we don't actually link it into the binary. If that is the case, bumping its minor version makes no difference at all.

Correct. I've suggested this change as a part of #22708, where the native_expat package being linked statically.

It is no longer the case. See #22708 (comment).

Closing.