Release Expat 2.4.4

[hartwork]

Issues to be fixed prior to the release:

• n/a

Pull requests to be merged prior to the release:

• n/a

Regular releases:

• Bump .so version info, document in change log
• Bump release version everywhere (including doc/reference.html)
• Fill release date (both change log and man page date)
• make distcheck source tarballs using ./distribute.sh
• Build Windows installer using AppVeyor CI — https://ci.appveyor.com/project/libexpat/libexpat/builds/42383768/artifacts
• Build Windows binaries zip file from installer
• SourceForge:
  • Upload Windows installer and binaries zip file
  • Upload source tarballs + .asc GPG signature
  • Make one new source tarball default download for all but Windows
  • Make new binary zip file default download for Windows
• GitHub:
  • Create signed Git tag and push it
  • Create new release — https://github.com/libexpat/libexpat/releases/tag/R_2_4_4
  • Upload source tarball + .asc GPG signature
  • Upload Windows installer and binaries zip file
  • Close current milestone and create a follow-up one
• Let the community know:
  • News item on https://libexpat.github.io/ project website — libexpat/libexpat.github.io@8460163
  • Mail Expat distro maintainers directly
  • Write to the xml-dev mailing list — http://lists.xml.org/archives/xml-dev/202201/msg00253.html
  • Blog about it at blog.hartwork.org — https://blog.hartwork.org/posts/expat-2-4-4-released/
    • Submit to Hacker News — https://news.ycombinator.com/item?id=30153393
  • Blog about it at xml.com — https://www.xml.com/news/2022-01-expat-244/
• Bump ebuild in Gentoo — gentoo/gentoo@7fd316f

Specific to 2.4.4:

• security aspects

Related downstreams issues and pull requests:

• Bundled copies
  • CMake — https://gitlab.kitware.com/cmake/cmake/-/issues/23165
  • CPython — https://bugs.python.org/issue46400
  • node-expat — [CVE-2022-23852] of underlying libexpat  xmppo/node-expat#215
• Packaging
  • AOSC — expat: security update to 2.4.6 AOSC-Dev/aosc-os-abbs#3753
  • Conan — expat: add 2.4.4 + relocatable shared lib on macOS conan-io/conan-center-index#9111
  • Gentoo — gentoo/gentoo@7fd316f
  • Gobo Linux — Please bump vulnerable Expat to 2.4.4 gobolinux/Recipes#151
  • msys2
    • expat: update to 2.4.4 msys2/MINGW-packages#10627
    • expat: update to 2.4.4 msys2/MSYS2-packages#2831
  • NixOS
    • expat: add patches for CVE-2022-23852 NixOS/nixpkgs#156607
    • expat: add patch for CVE-2022-23990 NixOS/nixpkgs#157052
    • expat: 2.4.3 -> 2.4.4 NixOS/nixpkgs#157586
  • Pisi Linux — Please update vulnerable Expat to 2.4.6 pisilinux/core#1311
  • Spack — expat: Add latest release 2.4.4 with security fixes spack/spack#28692
  • vcpkg — [expat] update to 2.4.7 (with security fixes) microsoft/vcpkg#22551