r: remove unzip from makedepends

[oech3]

No description provided.

[ognevny]

cc @jeroen

[jeroen]

Maybe the installation process does not requires zip anymore and it can be removed alltogether?

[oech3]

Is it able to use bsdtar or $(command -v bsdunzip||command -v unzip) at upstream?
build() failed without unzip.

[jeroen]

What error do you get without unzip?

[oech3]

https://github.com/msys2/MINGW-packages/actions/runs/27536056731/job/81385659183#step:9:1012

[jeroen]

Ah right extracting the tzinfo db. I think any unzip will do. What is wrong with current unzip ?

[oech3]

#29993 (comment) is the log without bsdunzip hack. So current CI is nothing wrong (passing).

[jeroen]

What is the purpose of this PR? Why do we want to remove unzip from makedepends if the build uses unzip? I much prefer to just declare the dependency, rather than add hacks.

[oech3]

Because unzip is not actively maintained and has many CVEs. I want to remove it from repository in the future.

[jeroen]

Many packages and shell scripts require the unzip command. Maybe it would be better to update the libarchive pacakage to add a global copy or wrapper bsdunzip -> unzip and then have the libarchive package declare:

provides=("unzip")
replaces=("unzip")

[oech3]

Agreed. It is 6 pkg's runtime dep.