pkgconf-2.9.92
spdxtool: serialize requires.private as development-scoped dependencies
spdxtool: remove dead maximum_package_count code
spdxtool: wire up package maintainer entry to suppliedBy for now
spdxtool: fix allocation-failure leaks in the JSON serializer
spdxtool: improve OOM handling
spdxtool: refactor serialization API to signal allocation failure
spdxtool: use SOURCE_DATE_EPOCH for default creation time if set