add a gotd "listen" process which watches the unix socket ok op@

functionality proposed in TODO as 'gotamin repack' already exists as 'pack -a'

add some TODO items for gotadmin

in gotd regress, use USER instead of USERNAME and check for sudo/doas users Problem where USERNAME is not usually set on OpenBSD reported by Mikhail ok jamsek

fix spurious gotd regress failures caused by fixing gotsh echo_error()

remove bogus abort() call from gotsh echo_error()

make it easier to run gotd regress via doas(1); ok kn, tracey

fix gotd startup without any -v options

gotwebd: simplify bit of gotweb_process_request ok tracey

avoid copying reused deltas to delta cache file; copy from pack file instead ok op@

make gotd_imsg_flush() retry if imsg_flush() returns EAGAIN ok op@

remove done todo item; gotd now has per-repo read/write authorization rules

gotwebd: provide maximum value for the description and cloneurl ok stsp@

add a separate compile-time DEBUG flag for the delta cache

reduce max amount of tags stored in object cache to avoid high memory usage

portable: sha1.h

gotwebd: rework gotweb_get_repo_{description,cloneurl} - use openat(2) since we've already opened the containing dir - use fstat(2) instead of multiple seeks - don't special case len == 0 ok and improvements by stsp

gotwebd: drop unused path parameter from got_get_repo_{owner,age} ok jamsek

gotwebd: simplify gotweb_render_index - drops the double loop; paginate in one go - avoid lstat + got_path_dir_is_empty for each entry: use dt_type if provided by the underlying filesystem - fixes a memleak: before `continue' we need to call gotweb_free_repo_dir ok stsp

gotwebd: use prev_disp to decide when to we've reached max_repos instead of hardcoding d_i - 2 and so expecting only "." and ".." as skipped entries, use t->prev_disp that is the number of repositories traversed until now (both skipped due to the pagination and the ones actually rendered.) ok jamsek

ignore regress/gotd/gotd.conf, it is generated by gotd's regression test suite

portable: ci: update MacOS image Cirrus CI is retiring its Intel-based MacOS VMs in favour of using M1 VMs which means a newer image.

getpwuid() returns NULL without setting errno if no user is found pointed out by millert@

zap double grp.h include spotted by Thomas

forward-declare conf_new_access_rule not all yacc implementations put the section in the same order: with OpenBSD' yacc it's fine, with GNU' bison it results in a warning about using an undeclared function conf_new_access_rule. extracted from -portable via thomas, ok stsp@