component/curl: version up 8.4.0, including security fixes.

component/curl/buildout.cfg

@@ -19,8 +19,8 @@ parts =
 [curl]
 recipe = slapos.recipe.cmmi
 shared = true
-url = https://curl.se/download/curl-8.0.1.tar.xz
-md5sum = f6c2fdeb30ad30234378a56c28350845
+url = https://curl.se/download/curl-8.4.0.tar.bz2
+md5sum = 1a61fde1fe5c7db5c29c1196435188a5
 configure-options =
   --disable-static
   --disable-ech

[Jérome Perrin]

locally I have

2023-10-11 23:05:25 slapos[41267] INFO checking for libngtcp2_crypto_quictls options with pkg-config... no
2023-10-11 23:05:25 slapos[41267] INFO configure: error: --with-ngtcp2 was specified but could not find ngtcp2_crypto_quictls pkg-config file.

tests also seem failing

But isn't it something that @luke is updating in a branch ?

[Jérome Perrin]

Can we revert and prepare this changes in a branch ?

[Kazuhiko Shiozaki]

It should happen in [curl-http3] target only and it should be fixed with 9aa2e0d0.

(but I let @luke to check further for version changes in ngtcp2).