repro-env 0.4.5 released

[kpcyrd]

Dear list,

I've tagged a release of repro-env 0.4.5 with updated dependencies, and a fix 
regarding the default zstd MAX_WINDOW_SIZE - pacman uses libarchive's defaults, 
libarchive uses libzstd's default limit of 128MiB, while ruzstd uses a default 
limit of 100MiB, causing unsuccessful decompression of some Arch Linux packages. 
This was also submitted as a patch to ruzstd that was merged successfully[1]. 
This was troubleshooted with the help of Tobias Stöckmann.

[1]: https://github.com/KillingSpark/zstd-rs/pull/119

repro-env implements dependency lockfiles "for GNU+Linux", for example it 
declares the following build environment for it's own release binary:

     [container]
     image = "docker.io/library/archlinux"

     [packages]
     system = "archlinux"
     dependencies = ["make", "musl", "rust-musl"]

And generates a version-resolved repro-env.lock that is committed to the 
repository. Because of this fact, the following instructions are sufficient to 
reproduce the pre-compiled binary attached to the Github release (on x86_64 and 
assuming both podman and a somewhat recent Rust compiler are available):

     git clone https://github.com/kpcyrd/repro-env
     cd repro-env
     git checkout v0.4.5
     make
     sha256sum target/x86_64-unknown-linux-musl/release/repro-env

This should result in a statically linked binary with the following sha256:

     d6a52bc7cfce4ff2e20dcdd01daf83968429f03f225178ef7f687f286a0d0ab4

As of today, the following projects are known to use repro-env:

- acme-redirect
- aps
- apt.vulns.xyz
- archlinux-userland-fs-cmp
- ic-gateway
- ic-http-lb
- lungo
- manora
- oniri
- repro-env
- rshijack
- sh4d0wup
- spytrap-adb

https://github.com/kpcyrd/repro-env#adoption

Sincerely,
kpcyrd