pkgconf-2.9.95
spdxtool: clean up some minor memory safety issues
spdxtool: serialize requires.private as development-scoped dependencies
spdxtool: factor out spdx generation so that the fuzzer and CLI can share it
everywhere: use pkgconf_client_init_with_options
spdxtool: serialize: fix serialization of UTF-8 bytes
spdxtool: fix allocation-failure leaks in the JSON serializer
spdxtool: improve OOM handling
spdxtool: refactor serialization API to signal allocation failure
spdxtool: fix additional memory safety issues
spdxtool: use SOURCE_DATE_EPOCH for default creation time if set