main
Restrict-qualify glob and its functions
Update to protobuf-c 1.5.2
Add adminconfdir and --enable-adminconf to set it. Configuration paths in sudo are now a colon-separated list of files with the adminconfdir instance first (if enabled), followed by a sysconfdir instance.
Older OpenSSL doesn not use const cert for X509_get_subject_name()
Regenerate with protobuf-c 1.5.2
configure: Add check for O_NOFOLLOW definition in fcntl.h
Use #include <foo.h> instead of #include "foo.h" in most cases.
Add sudo_debug_exit_dev_t stub for fuzzing.
sudo_digest_getlen: return size_t, and 0 on error instead of -1
Rename __dso_public -> sudo_dso_public and move to config.h.
exec_mailer: use minimal environment for non-root mailer too
Add SPDX-License-Identifier to files.
Move strlcpy_no_slash() to libsudo_iolog to sudo_logsrvd can use it.
Give every printf-like function restrict qualifiers
Cast hook functions to sudo_hook_fn_t to fix C23 compile error.
Move OpenSSL compat defines to sudo_ssl_compat.h
Move contains_dot_dot() to libsudo_util.