profiles: Sync with Gentoo

It's from Gentoo commit aac544fa8e1756344acb764d6b7335010170e5d3.

sdk_container/src/third_party/portage-stable/profiles/arch/alpha/package.use.mask

@@ -1,10 +1,6 @@
 # Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-# matoro <matoro_gentoo@matoro.tk> (2022-09-30)
-# Per Sam: avoid app-emacs/flycheck deptree, bug #873541
-dev-util/pkgcheck emacs
-
 # matoro <matoro_gentoo@matoro.tk> (2022-09-22)
 # Unable to test due to mask, bug #763963
 net-misc/openntpd constraints

sdk_container/src/third_party/portage-stable/profiles/arch/amd64/no-multilib/package.mask

@@ -91,7 +91,6 @@ games-rpg/dungeon-defenders
 games-rpg/eschalon-book-1-demo
 games-rpg/wasteland2
 games-server/etqw-ded
-games-simulation/bcs-demo
 games-strategy/darwinia
 games-strategy/darwinia-demo
 games-strategy/defcon-demo

sdk_container/src/third_party/portage-stable/profiles/arch/amd64/package.use.mask

@@ -220,7 +220,7 @@ dev-util/catalyst -system-bootloader
 # Ilya Tumaykin <itumaykin+gentoo@gmail.com> (2018-06-17)
 # Vulkan support is only available on few selected arches atm.
 # Mask everywhere, unmask where appropriate.
-media-video/mpv -vulkan
+media-video/mpv -libplacebo -vulkan
 
 # Richard Yao <ryao@gentoo.org> (2018-04-16)
 # sys-fs/zfs is keyworded on amd64

sdk_container/src/third_party/portage-stable/profiles/arch/amd64/x32/package.mask

@@ -176,3 +176,4 @@ sys-apps/yarn
 www-apps/jekyll-coffeescript
 www-apps/kibana-bin
 www-client/chromium
+>=www-apps/redmine-5.0.2

sdk_container/src/third_party/portage-stable/profiles/arch/arm/package.use.mask

@@ -5,10 +5,6 @@
 # pandoc not keyworded here, bug #878355
 app-admin/conky doc
 
-# Volkmar W. Pogatzki <gentoo@pogatzki.net> (2022-08-09)
-# dev-java/jaxws-api not keyworded
->=dev-java/jmock-2.12.0 test
-
 # Bernd Waibel <waebbl-gentoo@posteo.net> (2022-09-16)
 # dev-libs/optix depends on x11-drivers/nvidia-drivers,
 # which lacks arm support

sdk_container/src/third_party/portage-stable/profiles/arch/arm64/package.use.mask

@@ -1,10 +1,6 @@
 # Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-# Volkmar W. Pogatzki <gentoo@pogatzki.net> (2022-08-09)
-# dev-java/jaxws-api not keyworded
->=dev-java/jmock-2.12.0 test
-
 # Alexey Shvetsov <alexxy@gentoo.org> (2022-09-15)
 # Mask nvml use flag for slurm
 sys-cluster/slurm nvml

sdk_container/src/third_party/portage-stable/profiles/arch/base/package.use.mask

@@ -214,7 +214,7 @@ dev-util/catalyst system-bootloader
 # Ilya Tumaykin <itumaykin+gentoo@gmail.com> (2018-06-17)
 # Vulkan support is only available on few selected arches atm.
 # Mask everywhere, unmask where appropriate.
-media-video/mpv vulkan
+media-video/mpv libplacebo vulkan
 
 # Richard Yao <ryao@gentoo.org> (2018-04-16)
 # sys-fs/zfs is not available everywhere.

sdk_container/src/third_party/portage-stable/profiles/arch/hppa/package.use.mask

@@ -4,6 +4,11 @@
 # NOTE: When masking a USE flag due to missing keywords, please file a keyword
 # request bug for the hppa arch.
 
+# Conrad Kostecki <conikost@gentoo.org> (2022-11-01)
+# Mask tests, as not all needed deps are available on this arch.
+# See #878933 for progress.
+net-dns/ddclient test
+
 # Arthur Zamarin <arthurzam@gentoo.org> (2022-08-15)
 # deps not keyworded
 dev-util/pkgcheck emacs

sdk_container/src/third_party/portage-stable/profiles/arch/hppa/package.use.stable.mask

@@ -17,6 +17,10 @@
 
 #--- END OF EXAMPLES ---
 
+# Michał Górny <mgorny@gentoo.org> (2022-11-06)
+# Unmask the target on python-exec while it's masked elsewhere.
+dev-lang/python-exec -python_targets_python3_11
+
 # Sam James <sam@gentoo.org> (2022-02-02)
 # net-analyzer/net-snmp is not marked stable on HPPA
 net-analyzer/ifstat snmp

sdk_container/src/third_party/portage-stable/profiles/arch/hppa/use.stable.mask

@@ -4,6 +4,11 @@
 # This file requires eapi 5 or later. New entries go on top.
 # Please use the same syntax as in use.mask
 
+# Sam James <sam@gentoo.org> (2022-11-08)
+# Mask until dev-lang/python:3.11 becomes stable.
+python_targets_python3_11
+python_single_target_python3_11
+
 # Rolf Eike Beer <eike@sf-mail.de> (2021-11-12)
 # dev-libs/nspr and dev-libs/nss are not stable on hppa
 nss

sdk_container/src/third_party/portage-stable/profiles/arch/loong/package.use.mask

@@ -1,6 +1,10 @@
 # Copyright 2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Ionen Wolkens <ionen@gentoo.org> (2022-11-04)
+# media-libs/libffado is not keyworded here yet.
+media-sound/jack2 ieee1394
+
 # WANG Xuerui <xen0n@gentoo.org> (2022-10-04)
 # Sanitizers partially supported on this architecture.
 #
@@ -36,7 +40,7 @@ sys-block/fio -io-uring -zbc
 # WANG Xuerui <xen0n@gentoo.org> (2022-04-18)
 # We never had non-deprecated libcrypt support from glibc, so disable compat
 # from libxcrypt for a world without libcrypt.so.1
->=sys-libs/libxcrypt-4.4.23-r1 compat
+sys-libs/libxcrypt compat
 
 # WANG Xuerui <xen0n@gentoo.org> (2022-04-18)
 # Catalyst has support for assembling bootloader on this arch

sdk_container/src/third_party/portage-stable/profiles/arch/loong/use.mask

@@ -1,6 +1,10 @@
 # Copyright 2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# WANG Xuerui <xen0n@gentoo.org> (2022-11-01)
+# qtwebengine isn't available on loong yet
+webengine
+
 # Unmask the flag which corresponds to ARCH.
 -loong
 

sdk_container/src/third_party/portage-stable/profiles/arch/mips/package.use.mask

@@ -1,6 +1,11 @@
 # Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Conrad Kostecki <conikost@gentoo.org> (2022-11-01)
+# Mask tests, as not all needed deps are available on this arch.
+# See #878933 for progress.
+net-dns/ddclient test
+
 # Mike Gilbert <floppym@gentoo.org> (2022-10-16)
 # Only supported on MIPS.
 dev-lang/gnat-gpl -fixed-point

sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/package.use.mask

@@ -13,10 +13,6 @@ media-gfx/geeqie heif
 # dev-cpp/notcurses not keyworded here
 media-sound/snd notcurses
 
-# Volkmar W. Pogatzki <gentoo@pogatzki.net> (2022-08-09)
-# dev-java/jaxws-api not keyworded
->=dev-java/jmock-2.12.0 test
-
 # Andrew Ammerlaan <andrewammerlaan@gentoo.org> (2022-09-23)
 # Only PyQt5 is keyworded on pcc64 at the moment.
 # Mask the other Qt4Python implementations

sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/package.use.stable.mask

@@ -17,6 +17,10 @@
 
 #--- END OF EXAMPLES ---
 
+# Michał Górny <mgorny@gentoo.org> (2022-11-06)
+# Unmask the target on python-exec while it's masked elsewhere.
+dev-lang/python-exec -python_targets_python3_11
+
 # Sam James <sam@gentoo.org> (2021-10-25)
 # Various unstable dependencies:
 # gnome-base/nautilus

sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc32/package.use.stable.mask

@@ -17,6 +17,10 @@
 
 #--- END OF EXAMPLES ---
 
+# Michał Górny <mgorny@gentoo.org> (2022-11-06)
+# Unmask the target on python-exec while it's masked elsewhere.
+dev-lang/python-exec -python_targets_python3_11
+
 # Sam James <sam@gentoo.org> (2022-07-27)
 # sys-devel/lld is not marked stable on ppc
 >=dev-lang/spidermonkey-78 lto

sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc32/use.stable.mask

@@ -1,6 +1,11 @@
 # Copyright 2014-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Sam James <sam@gentoo.org> (2022-11-08)
+# Mask until dev-lang/python:3.11 becomes stable.
+python_targets_python3_11
+python_single_target_python3_11
+
 # Sam James <sam@gentoo.org> (2022-03-03)
 # dev-lang/ocaml and dev-ml/* not marked stable here
 ocaml

sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc64/64le/package.use.mask

@@ -1,6 +1,10 @@
 # Copyright 2019-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Joonas Niilola <juippis@gentoo.org> (2022-11-10)
+# Doesn't work on ppc64, #871921
+sci-mathematics/gmp-ecm custom-tune
+
 # Michał Górny <mgorny@gentoo.org> (2021-12-31)
 # Don't apply stable masks to python-exec since we're forcing every
 # impl there anyway. Please keep this in sync with use.stable.mask.
@@ -51,7 +55,7 @@ dev-qt/qtdeclarative -vulkan
 dev-qt/qtgui -vulkan
 dev-qt/qtwayland -vulkan
 media-libs/mesa -vulkan -vulkan-overlay
-media-video/mpv -vulkan
+media-video/mpv -libplacebo -vulkan
 media-video/vlc -libplacebo
 
 # Robin H. Johnson <robbat2@gentoo.org> (2019-12-06)

sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/ppc64/package.use.force

@@ -1,6 +1,11 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Georgy Yakovlev <gyakovlev@gentoo.org> (2022-11-10)
+# fails with bundled png, so force system one.
+# ld.lld: error: undefined symbol: png_init_filter_functions_vsx
+www-client/chromium system-png
+
 # Samuli Suominen <ssuominen@gentoo.org> (2012-10-30)
 # Only gnome-base/gdm has stable keywording. If x11-misc/lightdm or kde-plasma/kdm gets
 # stable keyword, this line can be removed.

sdk_container/src/third_party/portage-stable/profiles/arch/powerpc/use.stable.mask

@@ -1,4 +1,4 @@
-# Copyright 1999-2019 Gentoo Authors
+# Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # This file requires eapi 5 or later. New entries go on top.

sdk_container/src/third_party/portage-stable/profiles/arch/riscv/package.use.force

@@ -1,6 +1,10 @@
 # Copyright 2021-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Georgy Yakovlev <gyakovlev@gentoo.org> (2022-11-13)
+# 1.64 segfaults, so we force 1.65 bootstrapping 1.65
+~dev-lang/rust-1.65.0 system-bootstrap
+
 # matoro <matoro_gentoo@matoro.tk> (2022-09-10)
 # GHC does not support native codegen for riscv at all.
 # It gains LLVM codegen in 9.2, but we maintain a backport of this,

sdk_container/src/third_party/portage-stable/profiles/arch/sparc/package.use.stable.mask

@@ -1,6 +1,10 @@
 # Copyright 2019-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Michał Górny <mgorny@gentoo.org> (2022-11-06)
+# Unmask the target on python-exec while it's masked elsewhere.
+dev-lang/python-exec -python_targets_python3_11
+
 # Sam James <sam@gentoo.org> (2022-09-12)
 # dev-lang/rust lacks wiring up to use our custom rust-bin bootstrap
 # tarball, so force system-bootstrap instead (i.e. force using rust-bin

sdk_container/src/third_party/portage-stable/profiles/arch/sparc/use.stable.mask

@@ -4,6 +4,11 @@
 # This file requires eapi 5 or later. New entries go on top.
 # Please use the same syntax as in use.mask
 
+# Sam James <sam@gentoo.org> (2022-11-08)
+# Mask until dev-lang/python:3.11 becomes stable.
+python_targets_python3_11
+python_single_target_python3_11
+
 # Matt Turner <mattst88@gentoo.org> (2022-09-16)
 # gui-libs/gtk is not stable here
 gtk4

sdk_container/src/third_party/portage-stable/profiles/arch/x86/package.mask

@@ -1,6 +1,7 @@
 # Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-# Volkmar W. Pogatzki <gentoo@pogatzki.net> (2022-08-19)
+# Viorel Munteanu <ceamac@gentoo.org> (2022-11-04)
-# dev-java/hamcrest:0 is not keyworded
+# Upstream dropped the x86 build.  Bug #879519
->=dev-java/jmock-2.12.0
+# Removal on 2022-12-04.
+net-im/mattermost-desktop-bin

sdk_container/src/third_party/portage-stable/profiles/arch/x86/package.use.mask

@@ -1,6 +1,10 @@
 # Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Ionen Wolkens <ionen@gentoo.org> (2022-11-07)
+# media-libs/libplacebo is keyworded here and vulkan is usable
+media-video/mpv -libplacebo -vulkan
+
 # WANG Xuerui <xen0n@gentoo.org> (2022-10-07)
 # sys-libs/libsmbios is available here.
 app-laptop/pbbuttonsd -macbook

sdk_container/src/third_party/portage-stable/profiles/arch/x86/package.use.stable.mask

@@ -17,6 +17,10 @@
 
 #--- END OF EXAMPLES ---
 
+# Michał Górny <mgorny@gentoo.org> (2022-11-06)
+# Unmask the target on python-exec while it's masked elsewhere.
+dev-lang/python-exec -python_targets_python3_11
+
 # Andreas Sturmlechner <asturm@gentoo.org> (2022-09-14)
 # sci-libs/vtk is not stable on x86 and we don't want to complicate
 # newer maxima stabilisation, bug #867547

sdk_container/src/third_party/portage-stable/profiles/arch/x86/use.stable.mask

@@ -4,6 +4,11 @@
 # This file requires eapi 5 or later. New entries go on top.
 # Please use the same syntax as in use.mask
 
+# Sam James <sam@gentoo.org> (2022-11-08)
+# Mask until dev-lang/python:3.11 becomes stable.
+python_targets_python3_11
+python_single_target_python3_11
+
 # Sam James <sam@gentoo.org> (2020-11-10)
 # media-gfx/openvdb is not stable on x86
 # ... and has failing tests right now anyway

sdk_container/src/third_party/portage-stable/profiles/base/make.defaults

@@ -104,6 +104,12 @@ LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses te
 # Updated to include ruby27 on 2021-10-10
 RUBY_TARGETS="ruby27"
 
+# Andreas K. Hüttel <dilfridge@gentoo.org> (2022-10-22)
+# These USE flags are what is common between the various sub-profiles. Stages 2
+# and 3 are built against these, so be careful what you add.
+# Moved here from releases/
+USE="acl bzip2 gdbm nptl unicode"
+
 # Enable extended filesystem attribute support by default.
 # https://archives.gentoo.org/gentoo-dev/message/ba0e3457e4b807e79816f0df03566af0
 USE="${USE} xattr"

sdk_container/src/third_party/portage-stable/profiles/base/package.use.force

@@ -130,7 +130,7 @@ sys-kernel/vanilla-kernel initramfs
 # distribution and rely on external providers like libxcrypt.
 # Here we are following that path too.
 <sys-libs/glibc-2.33-r2 crypt
->=sys-libs/libxcrypt-4.4.23-r1 system compat
+sys-libs/libxcrypt system compat
 
 # Matt Turner <mattst88@gentoo.org> (2019-09-01)
 # <dev-scheme/guile-2 is package.mask'd, so force USE=guile2
@@ -142,6 +142,11 @@ media-sound/lilypond guile2
 # to have a compiler not capable of C++, bug #692126.
 sys-devel/gcc cxx
 
+# Andreas K. Hüttel <dilfridge@gentoo.org> (2017-05-27)
+# Force default-PIE build on 17.0 profiles and later.
+# Moved here from releases/17.0 (2022-10-22)
+sys-devel/gcc pie
+
 # Andreas K. Hüttel <dilfridge@gentoo.org> (2019-04-14)
 # Make sure glibc static libs are installed for now. Not installing
 # them is an experimental feature and needs testing.

sdk_container/src/third_party/portage-stable/profiles/base/package.use.mask

@@ -486,7 +486,6 @@ dev-python/statsmodels doc
 # distribution and rely on external providers like libxcrypt.
 # Here we are following that path too.
 >=sys-libs/glibc-2.33-r2 crypt
-<sys-libs/libxcrypt-4.4.23-r1 split-usr system
 
 # Craig Andrews <candrews@gentoo.org> (2019-09-12)
 # OpenSSL (as of version 1.1.1) doesn't have APIs for QUIC support
@@ -639,10 +638,6 @@ sci-libs/linux-gpib php
 # Mask ruby20-only compatible packages
 ~media-libs/libcaca-0.99_beta19 ruby
 
-# Matthias Maier <tamiko@gentoo.org> (2017-05-11)
-# Globally mask pie use flag. Selectively unmask on specific profiles.
-sys-devel/gcc pie
-
 # Mike Gilbert <floppym@gentoo.org> (2017-02-16)
 # Multiple test failures.
 sys-boot/grub:2 test

sdk_container/src/third_party/portage-stable/profiles/base/package.use.stable.mask

@@ -4,6 +4,10 @@
 # This file requires eapi 5 or later. New entries go on top.
 # Please use the same syntax as in package.use.mask
 
+# Michał Górny <mgorny@gentoo.org> (2022-11-06)
+# Unmask the target on python-exec while it's masked elsewhere.
+dev-lang/python-exec -python_targets_python3_11
+
 # Marek Szuba <marecki@gentoo.org> (2022-09-25)
 # This depends on app-admin/ansible-molecule, which is not stable yet.
 # Moreover, all but the most recent versions of ansible-molecule

sdk_container/src/third_party/portage-stable/profiles/base/use.mask

@@ -4,6 +4,12 @@
 # This file is only for generic masks. For arch-specific masks (i.e.
 # mask everywhere, unmask on arch/*) use arch/base.
 
+# Matt Turner <mattst88@gentoo.org> (2022-11-11)
+# xf86-video-nv relies on function no longer present in the Xserver since v1.20
+# (released May 2018), and no user has noticed.
+# Bug #875053
+video_cards_nv
+
 # Brian Evans <grknight@gentoo.org> (2022-09-30)
 # PHP 8.2 is in RC
 php_targets_php8-2

sdk_container/src/third_party/portage-stable/profiles/base/use.stable.mask

@@ -8,11 +8,6 @@
 # Postgres:15 is not stable yet
 postgres_targets_postgres15
 
-# Michał Górny <mgorny@gentoo.org> (2022-05-08)
-# Mask until dev-lang/python:3.11 becomes stable.
-python_targets_python3_11
-python_single_target_python3_11
-
 # Sergei Trofimovich <slyfox@gentoo.org> (2020-04-13)
 # dev-vcs/darcs (dev-lang/ghc) has no stable keywords.
 darcs

sdk_container/src/third_party/portage-stable/profiles/features/musl/package.use.force

@@ -1,6 +1,10 @@
 # Copyright 1999-2022 Gentoo Authors.
 # Distributed under the terms of the GNU General Public License v2
 
+# Sam James <sam@gentoo.org> (2022-11-02)
+# The libxcrypt migration is optional for musl.
+sys-libs/libxcrypt -system -compat
+
 # Sam James <sam@gentoo.org> (2022-10-04)
 # net-misc/netkit-rsh is masked on musl and USE=-crypt depends on it
 sys-cluster/torque crypt
@@ -9,10 +13,6 @@ sys-cluster/torque crypt
 # The musl allocator works well with telegram
 net-im/telegram-desktop -jemalloc
 
-# Andreas K. Hüttel <dilfridge@gentoo.org> (2021-07-14)
-# Do not force system install for libxcrypt here
-<sys-libs/libxcrypt-4.4.28-r2 -system -compat
-
 # Force system-libevent use flag on mozilla packages, since the building of
 # bundled libevent cannot accomodate a system without sysctl.h
 # See bug 574830 for more info.

sdk_container/src/third_party/portage-stable/profiles/features/prefix/package.mask

@@ -1,13 +1,10 @@
-# Copyright 1999-2021 Gentoo Authors
+# Copyright 1999-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
 # Benda Xu <heroxbd@gentoo.org> (2019-08-20)
 # systemd is set to invade pid 1, which is not possible for Prefix.
 # The following are its reverse dependencies.
 sys-apps/systemd
-dev-libs/libreport
-app-admin/abrt
-app-admin/gnome-abrt
 app-admin/systemdgenie
 dev-python/python-systemd
 games-util/gamemode

sdk_container/src/third_party/portage-stable/profiles/features/selinux/package.mask

@@ -1,3 +1,262 @@
-# Copyright 2011-2021 Gentoo Authors
+# Copyright 2011-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
+# Kenton Groombridge <concord@gentoo.org> (2022-11-02)
+# SELinux policies 2.20221101-r1 were published in error
+# as they do not include any policy changes since the
+# previous release. Please upgrade to 2.20221101-r2.
+=sec-policy/selinux-abrt-2.20221101-r1
+=sec-policy/selinux-accountsd-2.20221101-r1
+=sec-policy/selinux-acct-2.20221101-r1
+=sec-policy/selinux-afs-2.20221101-r1
+=sec-policy/selinux-aide-2.20221101-r1
+=sec-policy/selinux-alsa-2.20221101-r1
+=sec-policy/selinux-amanda-2.20221101-r1
+=sec-policy/selinux-amavis-2.20221101-r1
+=sec-policy/selinux-android-2.20221101-r1
+=sec-policy/selinux-apache-2.20221101-r1
+=sec-policy/selinux-apcupsd-2.20221101-r1
+=sec-policy/selinux-apm-2.20221101-r1
+=sec-policy/selinux-arpwatch-2.20221101-r1
+=sec-policy/selinux-asterisk-2.20221101-r1
+=sec-policy/selinux-at-2.20221101-r1
+=sec-policy/selinux-automount-2.20221101-r1
+=sec-policy/selinux-avahi-2.20221101-r1
+=sec-policy/selinux-awstats-2.20221101-r1
+=sec-policy/selinux-backup-2.20221101-r1
+=sec-policy/selinux-bacula-2.20221101-r1
+=sec-policy/selinux-base-2.20221101-r1
+=sec-policy/selinux-base-policy-2.20221101-r1
+=sec-policy/selinux-bind-2.20221101-r1
+=sec-policy/selinux-bitcoin-2.20221101-r1
+=sec-policy/selinux-bitlbee-2.20221101-r1
+=sec-policy/selinux-bluetooth-2.20221101-r1
+=sec-policy/selinux-brctl-2.20221101-r1
+=sec-policy/selinux-cachefilesd-2.20221101-r1
+=sec-policy/selinux-calamaris-2.20221101-r1
+=sec-policy/selinux-canna-2.20221101-r1
+=sec-policy/selinux-cdrecord-2.20221101-r1
+=sec-policy/selinux-ceph-2.20221101-r1
+=sec-policy/selinux-certbot-2.20221101-r1
+=sec-policy/selinux-cgmanager-2.20221101-r1
+=sec-policy/selinux-cgroup-2.20221101-r1
+=sec-policy/selinux-chromium-2.20221101-r1
+=sec-policy/selinux-chronyd-2.20221101-r1
+=sec-policy/selinux-clamav-2.20221101-r1
+=sec-policy/selinux-cloudinit-2.20221101-r1
+=sec-policy/selinux-collectd-2.20221101-r1
+=sec-policy/selinux-colord-2.20221101-r1
+=sec-policy/selinux-container-2.20221101-r1
+=sec-policy/selinux-corosync-2.20221101-r1
+=sec-policy/selinux-couchdb-2.20221101-r1
+=sec-policy/selinux-courier-2.20221101-r1
+=sec-policy/selinux-cpucontrol-2.20221101-r1
+=sec-policy/selinux-cpufreqselector-2.20221101-r1
+=sec-policy/selinux-cups-2.20221101-r1
+=sec-policy/selinux-cvs-2.20221101-r1
+=sec-policy/selinux-cyphesis-2.20221101-r1
+=sec-policy/selinux-daemontools-2.20221101-r1
+=sec-policy/selinux-dante-2.20221101-r1
+=sec-policy/selinux-dbadm-2.20221101-r1
+=sec-policy/selinux-dbskk-2.20221101-r1
+=sec-policy/selinux-dbus-2.20221101-r1
+=sec-policy/selinux-ddclient-2.20221101-r1
+=sec-policy/selinux-devicekit-2.20221101-r1
+=sec-policy/selinux-dhcp-2.20221101-r1
+=sec-policy/selinux-dictd-2.20221101-r1
+=sec-policy/selinux-dirmngr-2.20221101-r1
+=sec-policy/selinux-dirsrv-2.20221101-r1
+=sec-policy/selinux-distcc-2.20221101-r1
+=sec-policy/selinux-djbdns-2.20221101-r1
+=sec-policy/selinux-dkim-2.20221101-r1
+=sec-policy/selinux-dmidecode-2.20221101-r1
+=sec-policy/selinux-dnsmasq-2.20221101-r1
+=sec-policy/selinux-docker-2.20221101-r1
+=sec-policy/selinux-dovecot-2.20221101-r1
+=sec-policy/selinux-dpkg-2.20221101-r1
+=sec-policy/selinux-dracut-2.20221101-r1
+=sec-policy/selinux-dropbox-2.20221101-r1
+=sec-policy/selinux-entropyd-2.20221101-r1
+=sec-policy/selinux-evolution-2.20221101-r1
+=sec-policy/selinux-exim-2.20221101-r1
+=sec-policy/selinux-fail2ban-2.20221101-r1
+=sec-policy/selinux-fetchmail-2.20221101-r1
+=sec-policy/selinux-finger-2.20221101-r1
+=sec-policy/selinux-flash-2.20221101-r1
+=sec-policy/selinux-fprintd-2.20221101-r1
+=sec-policy/selinux-ftp-2.20221101-r1
+=sec-policy/selinux-games-2.20221101-r1
+=sec-policy/selinux-gatekeeper-2.20221101-r1
+=sec-policy/selinux-git-2.20221101-r1
+=sec-policy/selinux-gitosis-2.20221101-r1
+=sec-policy/selinux-glusterfs-2.20221101-r1
+=sec-policy/selinux-gnome-2.20221101-r1
+=sec-policy/selinux-googletalk-2.20221101-r1
+=sec-policy/selinux-gorg-2.20221101-r1
+=sec-policy/selinux-gpg-2.20221101-r1
+=sec-policy/selinux-gpm-2.20221101-r1
+=sec-policy/selinux-gpsd-2.20221101-r1
+=sec-policy/selinux-gssproxy-2.20221101-r1
+=sec-policy/selinux-hddtemp-2.20221101-r1
+=sec-policy/selinux-hostapd-2.20221101-r1
+=sec-policy/selinux-icecast-2.20221101-r1
+=sec-policy/selinux-ifplugd-2.20221101-r1
+=sec-policy/selinux-inetd-2.20221101-r1
+=sec-policy/selinux-inn-2.20221101-r1
+=sec-policy/selinux-ipsec-2.20221101-r1
+=sec-policy/selinux-irc-2.20221101-r1
+=sec-policy/selinux-ircd-2.20221101-r1
+=sec-policy/selinux-irqbalance-2.20221101-r1
+=sec-policy/selinux-jabber-2.20221101-r1
+=sec-policy/selinux-java-2.20221101-r1
+=sec-policy/selinux-kdeconnect-2.20221101-r1
+=sec-policy/selinux-kdump-2.20221101-r1
+=sec-policy/selinux-kerberos-2.20221101-r1
+=sec-policy/selinux-kerneloops-2.20221101-r1
+=sec-policy/selinux-kismet-2.20221101-r1
+=sec-policy/selinux-ksmtuned-2.20221101-r1
+=sec-policy/selinux-ldap-2.20221101-r1
+=sec-policy/selinux-links-2.20221101-r1
+=sec-policy/selinux-lircd-2.20221101-r1
+=sec-policy/selinux-loadkeys-2.20221101-r1
+=sec-policy/selinux-logrotate-2.20221101-r1
+=sec-policy/selinux-logsentry-2.20221101-r1
+=sec-policy/selinux-logwatch-2.20221101-r1
+=sec-policy/selinux-lpd-2.20221101-r1
+=sec-policy/selinux-mailman-2.20221101-r1
+=sec-policy/selinux-makewhatis-2.20221101-r1
+=sec-policy/selinux-mandb-2.20221101-r1
+=sec-policy/selinux-matrixd-2.20221101-r1
+=sec-policy/selinux-mcelog-2.20221101-r1
+=sec-policy/selinux-memcached-2.20221101-r1
+=sec-policy/selinux-milter-2.20221101-r1
+=sec-policy/selinux-modemmanager-2.20221101-r1
+=sec-policy/selinux-mono-2.20221101-r1
+=sec-policy/selinux-mozilla-2.20221101-r1
+=sec-policy/selinux-mpd-2.20221101-r1
+=sec-policy/selinux-mplayer-2.20221101-r1
+=sec-policy/selinux-mrtg-2.20221101-r1
+=sec-policy/selinux-munin-2.20221101-r1
+=sec-policy/selinux-mutt-2.20221101-r1
+=sec-policy/selinux-mysql-2.20221101-r1
+=sec-policy/selinux-nagios-2.20221101-r1
+=sec-policy/selinux-ncftool-2.20221101-r1
+=sec-policy/selinux-networkmanager-2.20221101-r1
+=sec-policy/selinux-nginx-2.20221101-r1
+=sec-policy/selinux-node_exporter-2.20221101-r1
+=sec-policy/selinux-nslcd-2.20221101-r1
+=sec-policy/selinux-ntop-2.20221101-r1
+=sec-policy/selinux-ntp-2.20221101-r1
+=sec-policy/selinux-nut-2.20221101-r1
+=sec-policy/selinux-nx-2.20221101-r1
+=sec-policy/selinux-obfs4proxy-2.20221101-r1
+=sec-policy/selinux-oddjob-2.20221101-r1
+=sec-policy/selinux-oident-2.20221101-r1
+=sec-policy/selinux-openct-2.20221101-r1
+=sec-policy/selinux-openrc-2.20221101-r1
+=sec-policy/selinux-opensm-2.20221101-r1
+=sec-policy/selinux-openvpn-2.20221101-r1
+=sec-policy/selinux-pan-2.20221101-r1
+=sec-policy/selinux-pcscd-2.20221101-r1
+=sec-policy/selinux-phpfpm-2.20221101-r1
+=sec-policy/selinux-plymouthd-2.20221101-r1
+=sec-policy/selinux-podman-2.20221101-r1
+=sec-policy/selinux-policykit-2.20221101-r1
+=sec-policy/selinux-portmap-2.20221101-r1
+=sec-policy/selinux-postfix-2.20221101-r1
+=sec-policy/selinux-postgresql-2.20221101-r1
+=sec-policy/selinux-postgrey-2.20221101-r1
+=sec-policy/selinux-ppp-2.20221101-r1
+=sec-policy/selinux-prelude-2.20221101-r1
+=sec-policy/selinux-privoxy-2.20221101-r1
+=sec-policy/selinux-procmail-2.20221101-r1
+=sec-policy/selinux-psad-2.20221101-r1
+=sec-policy/selinux-publicfile-2.20221101-r1
+=sec-policy/selinux-pulseaudio-2.20221101-r1
+=sec-policy/selinux-puppet-2.20221101-r1
+=sec-policy/selinux-pyzor-2.20221101-r1
+=sec-policy/selinux-qemu-2.20221101-r1
+=sec-policy/selinux-qmail-2.20221101-r1
+=sec-policy/selinux-quota-2.20221101-r1
+=sec-policy/selinux-radius-2.20221101-r1
+=sec-policy/selinux-radvd-2.20221101-r1
+=sec-policy/selinux-razor-2.20221101-r1
+=sec-policy/selinux-redis-2.20221101-r1
+=sec-policy/selinux-remotelogin-2.20221101-r1
+=sec-policy/selinux-resolvconf-2.20221101-r1
+=sec-policy/selinux-rngd-2.20221101-r1
+=sec-policy/selinux-rootlesskit-2.20221101-r1
+=sec-policy/selinux-rpc-2.20221101-r1
+=sec-policy/selinux-rpcbind-2.20221101-r1
+=sec-policy/selinux-rpm-2.20221101-r1
+=sec-policy/selinux-rssh-2.20221101-r1
+=sec-policy/selinux-rtkit-2.20221101-r1
+=sec-policy/selinux-rtorrent-2.20221101-r1
+=sec-policy/selinux-salt-2.20221101-r1
+=sec-policy/selinux-samba-2.20221101-r1
+=sec-policy/selinux-sasl-2.20221101-r1
+=sec-policy/selinux-screen-2.20221101-r1
+=sec-policy/selinux-secadm-2.20221101-r1
+=sec-policy/selinux-sendmail-2.20221101-r1
+=sec-policy/selinux-sensord-2.20221101-r1
+=sec-policy/selinux-shorewall-2.20221101-r1
+=sec-policy/selinux-shutdown-2.20221101-r1
+=sec-policy/selinux-skype-2.20221101-r1
+=sec-policy/selinux-slocate-2.20221101-r1
+=sec-policy/selinux-slrnpull-2.20221101-r1
+=sec-policy/selinux-smartmon-2.20221101-r1
+=sec-policy/selinux-smokeping-2.20221101-r1
+=sec-policy/selinux-snmp-2.20221101-r1
+=sec-policy/selinux-snort-2.20221101-r1
+=sec-policy/selinux-soundserver-2.20221101-r1
+=sec-policy/selinux-spamassassin-2.20221101-r1
+=sec-policy/selinux-squid-2.20221101-r1
+=sec-policy/selinux-sssd-2.20221101-r1
+=sec-policy/selinux-stunnel-2.20221101-r1
+=sec-policy/selinux-subsonic-2.20221101-r1
+=sec-policy/selinux-sudo-2.20221101-r1
+=sec-policy/selinux-sxid-2.20221101-r1
+=sec-policy/selinux-syncthing-2.20221101-r1
+=sec-policy/selinux-sysstat-2.20221101-r1
+=sec-policy/selinux-tboot-2.20221101-r1
+=sec-policy/selinux-tcpd-2.20221101-r1
+=sec-policy/selinux-tcsd-2.20221101-r1
+=sec-policy/selinux-telnet-2.20221101-r1
+=sec-policy/selinux-tftp-2.20221101-r1
+=sec-policy/selinux-tgtd-2.20221101-r1
+=sec-policy/selinux-thunderbird-2.20221101-r1
+=sec-policy/selinux-timidity-2.20221101-r1
+=sec-policy/selinux-tmpreaper-2.20221101-r1
+=sec-policy/selinux-tor-2.20221101-r1
+=sec-policy/selinux-tripwire-2.20221101-r1
+=sec-policy/selinux-ucspitcp-2.20221101-r1
+=sec-policy/selinux-ulogd-2.20221101-r1
+=sec-policy/selinux-uml-2.20221101-r1
+=sec-policy/selinux-unconfined-2.20221101-r1
+=sec-policy/selinux-uptime-2.20221101-r1
+=sec-policy/selinux-usbguard-2.20221101-r1
+=sec-policy/selinux-usbmuxd-2.20221101-r1
+=sec-policy/selinux-uucp-2.20221101-r1
+=sec-policy/selinux-uwimap-2.20221101-r1
+=sec-policy/selinux-uwsgi-2.20221101-r1
+=sec-policy/selinux-varnishd-2.20221101-r1
+=sec-policy/selinux-vbetool-2.20221101-r1
+=sec-policy/selinux-vdagent-2.20221101-r1
+=sec-policy/selinux-vde-2.20221101-r1
+=sec-policy/selinux-virt-2.20221101-r1
+=sec-policy/selinux-vlock-2.20221101-r1
+=sec-policy/selinux-vmware-2.20221101-r1
+=sec-policy/selinux-vnstatd-2.20221101-r1
+=sec-policy/selinux-vpn-2.20221101-r1
+=sec-policy/selinux-watchdog-2.20221101-r1
+=sec-policy/selinux-webalizer-2.20221101-r1
+=sec-policy/selinux-wine-2.20221101-r1
+=sec-policy/selinux-wireguard-2.20221101-r1
+=sec-policy/selinux-wireshark-2.20221101-r1
+=sec-policy/selinux-wm-2.20221101-r1
+=sec-policy/selinux-xen-2.20221101-r1
+=sec-policy/selinux-xfs-2.20221101-r1
+=sec-policy/selinux-xscreensaver-2.20221101-r1
+=sec-policy/selinux-xserver-2.20221101-r1
+=sec-policy/selinux-zabbix-2.20221101-r1
+=sec-policy/selinux-zfs-2.20221101-r1

sdk_container/src/third_party/portage-stable/profiles/features/wd40/package.mask

@@ -5,6 +5,8 @@
 app-admin/ansible
 app-admin/ansible-core
 >=app-antivirus/clamav-0.105.1
+app-backup/borgbackup
+app-backup/borgmatic
 app-crypt/acme
 app-crypt/certbot
 app-crypt/certbot-nginx
@@ -32,8 +34,10 @@ dev-python/openstacksdk
 dev-python/os-client-config
 dev-python/osc-lib
 dev-python/paramiko
+dev-python/pyfuse3
 >=dev-python/pyopenssl-22
 dev-python/pyspnego
+dev-python/pytest-trio
 dev-python/python-daemon
 dev-python/python-glanceclient
 dev-python/python-ironicclient
@@ -50,9 +54,10 @@ dev-python/spur
 dev-python/sshtunnel
 dev-python/tempest
 dev-python/trustme
->=dev-python/trio-0.22.0
+dev-python/trio
 dev-python/twine
 dev-python/watchfiles
+dev-python/watchgod
 dev-ros/roswtf
 dev-util/cargo-c
 dev-util/cbindgen

sdk_container/src/third_party/portage-stable/profiles/features/wd40/package.use.mask

@@ -13,6 +13,7 @@ dev-python/libtmux test
 dev-python/locket test
 dev-python/pyjwt test
 dev-python/python-keystoneclient test
+dev-python/python-socks test
 
 # Michał Górny <mgorny@gentoo.org> (2022-07-29)
 # More packages requiring dev-python/pyopenssl or its revdeps.

sdk_container/src/third_party/portage-stable/profiles/package.mask

@@ -33,6 +33,116 @@
 
 #--- END OF EXAMPLES ---
 
+# Jonas Stein <jstein@gentoo.org> (2022-11-13)
+# Dead upstream
+# Removal after 2023-01-01.  Bug #881249.
+net-mail/vchkuser
+
+# Matthew Smith <matthew@gentoo.org> (2022-11-13)
+# Please update to Erlang/OTP 25. Removal in 30 days.
+# Bug #864543
+<dev-lang/erlang-25
+<net-misc/rabbitmq-server-3.11.0
+
+# Ionen Wolkens <ionen@gentoo.org> (2022-11-11)
+# Had a handful of reports of unbootable systems with this new version.
+# Given it's a still-experimental new branch, mask for now in case.
+# Feel free to unmask if you've had no issues, but otherwise please
+# report to NVIDIA. https://bugs.gentoo.org/881025
+~x11-drivers/nvidia-drivers-525.53
+
+# Matt Turner <mattst88@gentoo.org> (2022-11-11)
+# Relies on function no longer present in the Xserver since v1.20
+# (released May 2018), and no user has noticed. Use xf86-video-nouveau instead.
+# Bug #875053
+# Removal on 2022-12-11
+x11-drivers/xf86-video-nv
+
+# Sam James <sam@gentoo.org> (2022-11-11)
+# Causes memory corruption when building x11-misc/colord on x86
+# bug #880865
+=media-libs/lcms-2.14-r2
+
+# Jaco Kroon <jaco@uls.co.za> (2022-11-05)
+# Some potentially breaking changes here, please check the UPGRADE.txt file.
+# Most important:  chan_sip no longer builds by default, if you've migrated to
+# PJSIP you should be OK and most likely you should be able to safely unmask.
+# For now to prevent accidental upgrades and to allow proper testing this will
+# be in place for minimum six months (2023-04-22).
+=net-misc/asterisk-20*
+=net-misc/asterisk-opus-20*
+=net-misc/asterisk-g729-20*
+
+# Arthur Zamarin <arthurzam@gentoo.org> (2022-11-04)
+# Upstream repository is gone. Uses internally python 2 code, which
+# we patch into python 3. Only ebuild uses snapshot tarball from the
+# dead repo. Doesn't use PEP517 mode. Has issues with python 3.11.
+# No reverse dependencies in tree.
+# Removal: 2022-12-04.  Bug #879613.
+dev-python/tempita
+
+# Michał Górny <mgorny@gentoo.org> (2022-11-04)
+# NIH version of dev-python/watchdog that was used by dev-python/uvicorn
+# only, and was replaced by rustified dev-python/watchfiles.
+# Removal on 2022-12-04.  Bug #879515.
+dev-python/watchgod
+
+# Matt Turner <mattst88@gentoo.org> (2022-11-01)
+# Added by a proxied maintainer in 2018 who then never touched it again before
+# disappearing. Doesn't build with Python 3.9. Depends on gnome-base/gconf.
+# Bugs #846233, #873877
+# Removal on 2022-12-01
+sci-electronics/drahnr-oregano
+
+# Matt Turner <mattst88@gentoo.org> (2022-11-01)
+# Dead slot. No reverse dependencies that are not masked for removal.
+# Removal on 2022-12-01
+x11-libs/gnome-pty-helper
+x11-libs/vte:0
+
+# Matt Turner <mattst88@gentoo.org> (2022-11-01)
+# No reverse dependencies. Depends on deprecated and unmaintained packages:
+# 	- media-libs/clutter
+# 	- media-libs/clutter-gst
+# 	- media-libs/clutter-gtk
+# 	- x11-libs/gtksourceview:2.0
+# 	- x11-libs/gtksourceview:3.0
+# 	- x11-libs/gtksourceview:4
+# 	- x11-libs/vte:0
+# Bug #877153
+# Removal on 2022-12-01
+dev-ruby/ruby-clutter
+dev-ruby/ruby-clutter-gdk
+dev-ruby/ruby-clutter-gstreamer
+dev-ruby/ruby-clutter-gtk
+dev-ruby/ruby-gdk3
+dev-ruby/ruby-gegl
+dev-ruby/ruby-gnome2
+dev-ruby/ruby-gnumeric
+dev-ruby/ruby-goffice
+dev-ruby/ruby-gsf
+dev-ruby/ruby-gstreamer
+dev-ruby/ruby-gtk3
+dev-ruby/ruby-gtksourceview
+dev-ruby/ruby-gtksourceview3
+dev-ruby/ruby-gtksourceview4
+dev-ruby/ruby-libsecret
+dev-ruby/ruby-rsvg
+dev-ruby/ruby-vte
+dev-ruby/ruby-vte3
+dev-ruby/ruby-webkit2-gtk
+dev-ruby/ruby-wnck3
+
+# Anton Fischl <github@fischl-online.de> (2022-10-23)
+# Version 3.1.* is not meant for production according to upstream
+=app-backup/burp-3.1*
+
+# David Seifert <soap@gentoo.org> (2022-10-31)
+# EAPI 6, last release over 17 years ago, requires <ghostscript-gpl-10
+# drivers, relies on -Wimplicit-function-declaration.
+# Removal on 2022-11-30. Bug #871216, #876382.
+media-gfx/peps
+
 # Matt Turner <mattst88@gentoo.org> (2022-10-30)
 # Dead package, last release 10 years ago. No reverse dependencies.
 # Removal on 2022-11-30
@@ -114,17 +224,6 @@ dev-python/eventlet
 # Bug #722092, #749900, #762169, #840656, #845381, #858392, #866701.
 dev-util/nvidia-cuda-sdk
 
-# Andrew Ammerlaan <andrewammerlaan@gentoo.org> (2022-10-17)
-# Hostile takeover ongoing, integrity cannot be guaranteed.
-# Use the release version only if you change the meta server setting.
-# Use games-action/multimc-bin or games-action/prismlauncher instead
-# to be completely safe.
-# https://bugs.gentoo.org/877495
-#
-# Update (2022-10-20)
-# Removal in 15 days, please install games-action/prismlauncher instead
-games-action/polymc
-
 # Michał Górny <mgorny@gentoo.org> (2022-10-17)
 # Unmaintained since 2018.  Requires dev-python/nose.  No revdeps left.
 # Removal on 2022-11-16.  Bug #877375.
@@ -149,15 +248,6 @@ dev-python/nose_warnings_filters
 # Removal on 2022-11-14
 x11-terms/lilyterm
 
-# Matt Turner <mattst88@gentoo.org> (2022-10-14)
-# Unmaintained upstream with last commit in 2013. No reverse dependencies.
-# Depends on unmaintained packages:
-# 	- x11-libs/gtk+:2
-# 	- x11-libs/vte:0
-# Bugs #769131, #875704.
-# Removal on 2022-11-14
-x11-misc/gtkdialog
-
 # Matt Turner <mattst88@gentoo.org> (2022-10-14)
 # Unmaintained upstream. Last release in 2008. Only reverse dependency is
 # gnome-mud, which is masked for removal.
@@ -186,12 +276,6 @@ games-mud/gnome-mud
 # Removal on 2022-11-13
 net-misc/spread
 
-# Matt Turner <mattst88@gentoo.org> (2022-10-12)
-# Unmaintained and archived upstream. Last release in 2017.
-# Bug #597960.
-# Removal on 2022-11-12
-net-im/empathy
-
 # Sam James <sam@gentoo.org> (2022-10-12)
 # Upstream has withdrawn these releases because of a (yet unexplained)
 # "significant regression".
@@ -223,10 +307,6 @@ dev-python/setuptools-declarative-requirements
 # Removal on 2022-11-07.  Bug #834656.
 dev-python/kazoo
 
-# Matt Turner <mattst88@gentoo.org> (2022-10-07)
-# Unstable release. Masked for testing.
->=x11-libs/cairo-1.17
-
 # Sam James <sam@gentoo.org> (2022-10-07)
 # Ancient K&R C codebase which fails to compile with modern Clang; surface
 # level fixes are doable, but then get into various dangerous constructs
@@ -235,13 +315,6 @@ dev-python/kazoo
 # Use media-sound/mpd if looking for a modern alternative. Removal on 2022-11-07.
 media-sound/rplay
 
-# Matt Turner <mattst88@gentoo.org> (2022-10-01)
-# Unmaintained upstream. Last commit was 10 years ago today.
-# Unclear if it does anything useful. Many open bugs: #584352, #833102,
-# #852728, #866557, #875278.
-# Removal on 2022-11-05
-x11-libs/libva-vdpau-driver
-
 # Michał Górny <mgorny@gentoo.org> (2022-10-05)
 # Originally added for dev-python/rapidfuzz.  Now the algorithm has been
 # inlined into rapidfuzz, and the package is semi-deprecated.
@@ -274,57 +347,11 @@ dev-python/jarowinkler
 =sys-apps/portage-3.0.37
 =sys-apps/portage-3.0.38
 
-# Matt Turner <mattst88@gentoo.org> (2022-10-01)
-# Depends on lots of unmaintained packages:
-# 	- app-text/gnome-doc-utils
-# 	- dev-libs/libunique:1
-# 	- dev-util/gob
-# 	- x11-libs/gtk+:2
-# Last commit to upstream repository in 2015. Most plugins saw their last
-# upstream commit 10+ years ago. Unmaintained in Gentoo since 2016. Many open
-# bugs: #582138, #686800, #689364, #721246, #799263, #808447, #808450, #808456,
-# #831024.
-# Removal on 2022-11-01
-media-sound/gmpc
-media-plugins/gmpc-alarm
-media-plugins/gmpc-albumview
-media-plugins/gmpc-avahi
-media-plugins/gmpc-awn
-media-plugins/gmpc-discogs
-media-plugins/gmpc-extraplaylist
-media-plugins/gmpc-jamendo
-media-plugins/gmpc-last-fm
-media-plugins/gmpc-libnotify
-media-plugins/gmpc-lyrics
-media-plugins/gmpc-lyricwiki
-media-plugins/gmpc-magnatune
-media-plugins/gmpc-mdcover
-media-plugins/gmpc-mmkeys
-media-plugins/gmpc-mserver
-media-plugins/gmpc-playlistsort
-media-plugins/gmpc-shout
-media-plugins/gmpc-tagedit
-
-# Matt Turner <mattst88@gentoo.org> (2022-10-01)
-# Metapackage that has outlived its purpose. Made some sense in the immediate
-# aftermath of X.Org modularization 15 years ago.
-# Use these instead if desired:
-# - x11-base/xorg-apps
-# - x11-base/xorg-fonts
-# Removal on 2022-11-01. Bugs #755233, #872119.
-x11-base/xorg-x11
-
 # Brian Evans <grknight@gentoo.org> (2022-09-30)
 # Mask RC versions for initial testing
 <dev-lang/php-8.2.0:8.2
 virtual/httpd-php:8.2
 
-# Michał Górny <mgorny@gentoo.org> (2022-09-29)
-# Unfetchable mirror-restricted distfile.  No action from maintainer
-# in over a year.
-# Removal on 2022-10-29.  Bug #789477.
-games-simulation/bcs-demo
-
 # Stephan Hartmann <sultan@gentoo.org> (2022-09-29)
 # Dev channel releases are only for people who
 # are developers or want more experimental features
@@ -336,42 +363,10 @@ games-simulation/bcs-demo
 =app-shells/bash-5.2*
 =sys-libs/readline-8.2*
 
-# Michał Górny <mgorny@gentoo.org> (2022-09-26)
-# Bundles a vulnerable version of dev-libs/expat.  The current Gentoo
-# version is from 2014, pending bump to the last upstream release
-# from 2016.  Effectively unmaintained.  EAPI 6.
-# Removal on 2022-10-26.  Bug #253517.
-games-sports/torcs
-
-# Piotr Karbowski <slashbeast@gentoo.org> (2022-09-25)
-# No package in tree depends on dev-python/ssh2-python. Masked for removal.
-# Removal on 2022-10-25.
-dev-python/ssh2-python
-
 # John Helmert III <ajak@gentoo.org> (2022-09-18)
 # Unfixed root privilege escalation, bug #631552
 sys-cluster/slurm
 
-# Michał Górny <mgorny@gentoo.org> (2022-09-18)
-# Obsolete in favor of building via PEP517 mode.  Buggy.  No revdeps
-# left in ::gentoo.
-# Removal on 2022-10-18.  Bug #871522.
-dev-python/pyproject2setuppy
-
-# Pacho Ramos <pacho@gentoo.org> (2022-09-18)
-# ABRT environment keeps breaking more and more on non-Fedora systems.
-# Removal: 2022-10-18.  Bugs #849305, #849092, #849095, #713858.
-app-admin/abrt
-app-admin/gnome-abrt
-dev-libs/libreport
-dev-libs/satyr
-
-# Pacho Ramos <pacho@gentoo.org> (2022-09-18)
-# Unmaintained for a long time and unneeded with current pulseaudio and
-# pipewire versions.
-# Removal: 2022-10-18.
-media-sound/pulseaudio-modules-bt
-
 # Mike Gilbert <floppym@gentoo.org> (2022-09-12)
 # repoman is no longer maintained and has been removed from the portage
 # git repository. Please use dev-util/pkgcheck and dev-util/pkgdev instead.
@@ -388,11 +383,6 @@ app-portage/repoman
 # https://bugs.gentoo.org/868567
 =sys-apps/gawk-5.2.0
 
-# Marc Schiffbauer <mschiff@gentoo.org> (2022-09-02)
-# Dead upstream, open bugs, removal in 30 days
-# bugs #829447, #836227, #862504
-mail-filter/sigh
-
 # hololeap <hololeap@protonmail.com> (2022-08-21)
 # doctest-parallel does not currently work with Setup.hs (used internally by
 # haskell-cabal.eclass)
@@ -413,6 +403,7 @@ dev-python/PyQt6
 dev-python/PyQt6-WebEngine
 dev-qt/qt5compat:6
 dev-qt/qtbase:6
+dev-qt/qtcharts:6
 dev-qt/qtdeclarative:6
 dev-qt/qtimageformats:6
 dev-qt/qtlocation:6
@@ -513,10 +504,6 @@ dev-util/patdiff:0/0.15
 sys-devel/automake:1.13
 sys-devel/automake:1.15
 
-# Anton Fischl <github@fischl-online.de> (2022-02-23)
-# Version 2.5.* is not meant for production according to upstream
-=app-backup/burp-2.5*
-
 # Maciej Barć <xgqt@gentoo.org> (2022-02-20)
 # Masked for testing, builds and passes tests but randomly segfaults,
 # meaningless backtrace, debugging (flags, symbols) do not help
@@ -577,6 +564,7 @@ sys-devel/automake:1.11
 >=app-arch/file-roller-43
 >=app-backup/deja-dup-43
 >=app-crypt/seahorse-43
+>=app-misc/bijiben-40.1-r1
 >=app-misc/tracker-3.4.0-r1
 >=app-misc/tracker-miners-3.4.0-r1
 >=app-text/gtranslator-42
@@ -677,12 +665,6 @@ media-plugins/kodi-game-libretro-dosbox
 # bug #705554, bug #689408.
 >=dev-scheme/guile-3.0.4
 
-# Lars Wendler <polynomial-c@gentoo.org> (2019-11-14)
-# Breaks archives containing relative paths
-# when being called with --no-absolute-filenames
-# bug #700020
-=app-arch/cpio-2.13
-
 # Matt Turner <mattst88@gentoo.org> (2019-09-01)
 # TeXmacs is the only remaining package in tree that requires guile-1.8, which
 # is unsupported upstream. A TeXmacs port to Guile-2 has been in progress for a

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/arm64/eapi

@@ -0,0 +1 @@
+5

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/arm64/gcc/eapi

@@ -0,0 +1 @@
+5

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/arm64/gcc/parent

@@ -0,0 +1,2 @@
+..
+../../../features/fsf-gcc-nold

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/arm64/gcc/use.mask

@@ -0,0 +1,5 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# SSP seems to cause asm/assembly errors with GCC, so disable it
+ssp

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/arm64/make.defaults

@@ -0,0 +1,5 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+CHOST="arm64-apple-darwin22"
+CHOST_arm64="${CHOST}"

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/arm64/parent

@@ -0,0 +1,2 @@
+..
+../../arch/arm64

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/eapi

@@ -0,0 +1 @@
+5

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/make.defaults

@@ -0,0 +1,4 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+MACOSX_DEPLOYMENT_TARGET="13.0"

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/package.use.mask

@@ -0,0 +1,7 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# Fabian Groffen <grobian@gentoo.org> (2011-04-10)
+# as long as util-linux installs uuid.h which breaks the system headers
+# (hence we don't) we can't do uuid support here
+x11-libs/libSM -uuid

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/parent

@@ -0,0 +1 @@
+..

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/profile.bashrc

@@ -0,0 +1,4 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+export MACOSX_DEPLOYMENT_TARGET=13.0

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/x64/eapi

@@ -0,0 +1 @@
+5

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/x64/gcc/eapi

@@ -0,0 +1 @@
+5

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/x64/gcc/parent

@@ -0,0 +1,2 @@
+..
+../../../features/fsf-gcc-ld64

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/x64/make.defaults

@@ -0,0 +1,5 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+CHOST="x86_64-apple-darwin22"
+CHOST_amd64="${CHOST}"

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/x64/parent

@@ -0,0 +1,2 @@
+..
+../../arch/x64

sdk_container/src/third_party/portage-stable/profiles/prefix/darwin/macos/13.0/x64/use.mask

@@ -0,0 +1,30 @@
+# Copyright 1999-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+# This file masks out USE flags that are simply NOT allowed in the default
+# x86 profile.  This works, for example, if another architecture's
+# profile have a USE flag associated with (such as altivec, mmx, etc).
+
+# Unmask x86 instruction sets
+-cpu_flags_x86_mmx
+-cpu_flags_x86_mmxext
+-cpu_flags_x86_sse
+-cpu_flags_x86_sse2
+-cpu_flags_x86_ssse3
+-svga
+
+# Unmask nvidia XvMC support
+-nvidia
+
+# Unmask dev-db/oracle-instantclient-basic support
+-oci8-instant-client
+
+# Modular X: unmask for architectures on which they are available
+-input_devices_synaptics
+-input_devices_vmmouse
+-input_devices_wacom
+-video_cards_nvidia
+-video_cards_vmware
+
+# ibm is only used for ppc64 stuff
+ibm

sdk_container/src/third_party/portage-stable/profiles/profiles.desc

@@ -388,10 +388,12 @@ x64-macos		prefix/darwin/macos/11.0/x64			exp
 x64-macos		prefix/darwin/macos/11.0/x64/gcc		exp
 x64-macos		prefix/darwin/macos/12.0/x64			exp
 x64-macos		prefix/darwin/macos/12.0/x64/gcc		exp
+x64-macos		prefix/darwin/macos/13.0/x64/gcc		exp
 arm64-macos		prefix/darwin/macos/11.0/arm64			exp
 arm64-macos		prefix/darwin/macos/11.0/arm64/gcc		exp
 arm64-macos		prefix/darwin/macos/12.0/arm64			exp
 arm64-macos		prefix/darwin/macos/12.0/arm64/gcc		exp
+arm64-macos		prefix/darwin/macos/13.0/arm64/gcc		exp
 
 # Solaris Profiles
 sparc-solaris		prefix/sunos/solaris/5.11/sparc			exp

sdk_container/src/third_party/portage-stable/profiles/releases/17.0/make.defaults

@@ -1,5 +1,2 @@
-# Copyright 1999-2013 Gentoo Foundation
+# Copyright 1999-2022 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-
-# Adding this one, since it makes sense.
-USE="bzip2"

sdk_container/src/third_party/portage-stable/profiles/releases/17.0/package.use.force

@@ -1,6 +1,2 @@
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2022 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-
-# Andreas K. Hüttel <dilfridge@gentoo.org> (2017-05-27)
-# Force default-PIE build on 17.0 profiles.
-sys-devel/gcc pie

sdk_container/src/third_party/portage-stable/profiles/releases/17.0/package.use.mask

@@ -1,6 +1,2 @@
 # Copyright 2017-2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
-
-# Andreas K. Hüttel <dilfridge@gentoo.org> (2017-05-27)
-# Unmask default-PIE on 17.0 profiles.
-sys-devel/gcc -pie

sdk_container/src/third_party/portage-stable/profiles/releases/23.0/eapi

@@ -0,0 +1 @@
+5

sdk_container/src/third_party/portage-stable/profiles/releases/23.0/make.defaults

@@ -0,0 +1,11 @@
+# Copyright 1999-2022 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# This just makes sense nowadays, if only for distfiles...
+USE="xz zstd"
+
+# bug 831045
+USE="${USE} -cli"
+
+# bug 849875
+USE="${USE} -dri"

sdk_container/src/third_party/portage-stable/profiles/releases/23.0/package.use.force

@@ -0,0 +1,2 @@
+# Copyright 1999-2022 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2

sdk_container/src/third_party/portage-stable/profiles/releases/23.0/package.use.mask

@@ -0,0 +1,2 @@
+# Copyright 2017-2022 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2

sdk_container/src/third_party/portage-stable/profiles/releases/23.0/package.use.stable.mask

@@ -0,0 +1,2 @@
+# Copyright 1999-2022 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2

sdk_container/src/third_party/portage-stable/profiles/releases/23.0/parent

@@ -0,0 +1 @@
+..

sdk_container/src/third_party/portage-stable/profiles/releases/make.defaults

@@ -1,6 +1,2 @@
-# Copyright 1999-2013 Gentoo Foundation
+# Copyright 1999-2022 Gentoo Foundation
 # Distributed under the terms of the GNU General Public License v2
-
-# These USE flags are what is common between the various sub-profiles. Stages 2
-# and 3 are built against these, so be careful what you add.
-USE="acl gdbm nptl unicode"

sdk_container/src/third_party/portage-stable/profiles/updates/4Q-2022

@@ -7,3 +7,4 @@ move dev-python/swagger-spec-validator dev-python/swagger_spec_validator
 move dev-python/zeroconf dev-python/python-zeroconf
 move dev-python/zstandard dev-python/python-zstandard
 move dev-python/retworkx dev-python/rustworkx
+move dev-python/libsass dev-python/libsass-python