* doc/guix-cookbook.texi: Use @lisp for Scheme snippets instead of
"@example scheme".  This allows for syntax highlighting of the HTML
output.

* guix/scripts/build.scm (set-build-options-from-command-line): Remove
obsolete TODO comment.

* guix/scripts/build.scm (set-build-options-from-command-line): When
OPTS has 'keep-failed?' set, check whether STORE is connected over
AF_UNIX and warn when it's not.

* gnu/packages/guile-xyz.scm (guile-studio): Update to 0.0.1-3.98fbbbd.
[arguments]: Add make-flags; remove custom build phase.
[native-inputs]: Add texinfo.

* gnu/packages/haskell-apps.scm (git-annex): Update to 7.20191017.

* gnu/packages/video.scm (youtube-dl): Update to 2019.10.22.

* gnu/packages/cdrom.scm (asunder): Update to 2.9.5.

* gnu/packages/algebra.scm (giac): Update to 1.5.0-69.

* gnu/packages/freedesktop.scm (packagekit): Update to 1.1.12.

* gnu/packages/disk.scm (libblockdev): Update to 2.23.

* gnu/packages/linux.scm (psmisc)[source]: Update URI.

* gnu/packages/linux.scm (btrfs-progs): Update to 5.3.

* gnu/packages/linux.scm (util-linux)[source]: Hard-code NAME.

* gnu/packages/games.scm (tome4): Update to 1.6.0.

* gnu/packages/php.scm (php): Update to 7.3.11.

Apart from translation (po/*) updates, the following code changes were
made in-place: <https://issues.guix.gnu.org/issue/37905>.

* gnu/packages/linux.scm (psmisc)[source]: Update hash.

* gnu/packages/emacs-xyz.scm (emacs-ag): Update to 0.48.

* doc/guix-cookbook.texi (Advanced package management): New chapter.
* doc/guix-cookbook.texi (Guix Profiles in Practice): New section.

This was fixed in a dev release two years prior to our packaged version.

* gnu/packages/web-browsers.scm (lynx)[properties]: New field.

* gnu/packages/python-xyz.scm (python-ipykernel): Update to 5.1.3.
[native-inputs]: Add python-flaky.

* gnu/packages/perl-check.scm (perl-test-mockmodule): Update to 0.171.0.

* gnu/packages/gnome.scm (simple-scan): Update to 3.34.1.
[build-system]: Switch to Meson.
[arguments]: Remove custom #:configure-flags and #:phases.
Use #:glib-or-gtk.
[description]: Adapt to new upstream name and blurb.

* gnu/packages/gnome.scm (simple-scan)[inputs]: Move colord here…
[native-inputs]: …from here.

* gnu/packages/gnome.scm (colord)[arguments]: Enable vapi.
[native-inputs]: Add vala.

* gnu/packages/gnome.scm (colord)[arguments]: Remove unnecessary
configure flag (and outdated colord-gtk comment).
[native-inputs, propagated-inputs, inputs]: Order alphabetically.

This reverts commit 51395c84,
fixing <https://debbugs.gnu.org/cgi/bugreport.cgi?bug=37896>.

Reported by <o.rojon@posteo.net>.

* gnu/packages/gnome.scm (colord): Update to 1.4.4.

* gnu/packages/gnome.scm (colord)[source]: Hard-code NAME.

* guix/build/svn.scm (svn-fetch): Allow to ignore externals.
* guix/svn-download.scm (svn-reference, svn-multi-reference): Add
recursive? field.

* gnu/services/cuirass.scm (cuirass-activation): Create "/var/log/cuirass".

* gnu/packages/ci.scm (cuirass)[arguments]: Add #:configure-flags.

Thanks to Mark H Weaver <mhw@netris.org>.

* gnu/packages/avahi.scm (avahi): Use (package (inherit …)) instead of
package/inherit.

* gnu/packages/avahi.scm (avahi/fixed): New variable.
(avahi)[replacement]: Use it.
* gnu/packages/patches/avahi-CVE-2018-1000845.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.

* gnu/packages/gnome.scm (simple-scan)[home-page]: Update.

* gnu/packages/wine.scm (wine-staging-patchset-data): Update to 4.18.
(wine-staging): Update hash.

* gnu/packages/ci.scm (cuirass): Update to 80b6e89.

This reverts d7fcd9c5.

* guix/lint.scm (%network-dependent-checkers): Re-enable 'cve checker.

The XML feed was discontinued on Oct. 16th, 2019:

  <https://nvd.nist.gov/General/News/XML-Vulnerability-Feed-Retirement-Phase-3>

* guix/cve.scm (string->date*): New procedure.
(<cve-item>, <cve>, <cve-reference>): New record types.
(cpe-match->cve-configuration, configuration-data->cve-configurations)
(json->cve-items, version-matches?): New procedures.
(yearly-feed-uri): Change URL to refer to JSON feed.
(cpe->product-alist, %parse-vulnerability-feed)
(xml->vulnerabilities): Remove.
(cve-configuration->package-list, merge-package-lists)
(cve-item->vulnerability, json->vulnerabilities): New procedures.
(write-cache): Use 'json->vulnerabilities' instead of
'xml->vulnerabilities', and remove 'parameterize'.
(vulnerabilities->lookup-proc): Use 'version-matches?' when VERSION is
true.
* tests/cve.scm (%sample): Use 'tests/cve-sample.json'.
(%expected-vulnerabilities): Rewrite accordingly.
("json->cve-items", "cve-item-published-date")
("json->vulnerabilities"): New tests.
("xml->vulnerabilities"): Remove.
("vulnerabilities->lookup-proc"): Adjust to new vulnerabilities.
* tests/cve-sample.json: New file.
* tests/cve-sample.xml: Remove.
* Makefile.am (EXTRA_DIST): Adjust accordingly.
* doc/guix.texi (Invoking guix lint): Update nist.gov URLs.

* gnu/packages/enlightenment.scm (enlightenment)[arguments]: In custom
'set-system-actions phase hardcode location of 'bc' binary.
[inputs]: Add bc.

Now includs the patch file missed in
73f0ed8d.

* gnu/packages/pdf.scm (weasyprint): New variable.
* gnu/packages/patches/weasyprint-library-paths.patch: New file.
* gnu/local.mk: Add it.