v0.10.43

New Features:

• pkgcheck scan and pkgcheck ci now confine themselves with Landlock, where the kernel supports it: writes are limited to the cache dir, the temp dir and writable repo metadata caches, and outgoing TCP is denied unless --net is passed. Disable it with --sandbox=n, or require it with --sandbox=y (@arthurzam)

New Checks:

• AcctCheck: new InvalidAccountIdentifier result, flagging ACCT_USER_ID or ACCT_GROUP_ID set to a negative value (usually -1), which requests a dynamically allocated id. That is meant for overlays only and is prohibited by policy in the gentoo repository (@arthurzam, #789)
• CommandSubstitutionCheck (optional): suggest using bash 5.3 function substitution, ${ command; }, for command substitution in an ebuild's global scope. Only for EAPI 9 ebuilds, the first EAPI whose bash version provides it (@arthurzam)
• DeadEclass: report ebuild that inherits a @DEAD eclass (@arthurzam)

Fixes:

• config: fix the user config file, cache dir and data dir being placed under a relative path when an XDG base dir variable is set to an empty (or relative) value, as is common in containers and root shells. The user config was then silently ignored, and the git cache landed in the current directory. Per the XDG basedir spec such values are now discarded in favor of the default location, which also applies to the $XDG_CONFIG_HOME/git/ignore lookup (@arthurzam)
• GitPkgCommitsCheck: fix a FileNotFoundError crash when a package's removals span several commits, e.g. a revbump done as a rename followed by the removal of another version. The historical repo was archived from a single commit's parent, which doesn't necessarily hold every removed version, while all of them were registered with it (@arthurzam, #675, #756)
• BinaryFile: fix valid UTF-8 files being reported as binary when a multibyte character straddles the end of the block read to classify them (@arthurzam)
• EclassUsageCheck: also flag use of @USER_VARIABLE function variables, those documented in a @VARIABLE: block, which were never reported (@arthurzam)
• EclassUsageCheck: also flag use of @DEPRECATED: function variables, those documented in a @VARIABLE: block, which were never reported (@arthurzam)