quictls 3.0.9 (new formula)

[flier]

• Have you followed the guidelines for contributing?
• Have you ensured that your commits follow the commit style guide?
• Have you checked that there aren't other open pull requests for the same formula update/change?
• Have you built your formula locally with brew install --build-from-source <formula>, where <formula> is the name of the formula you're submitting?
• Is your test running fine brew test <formula>, where <formula> is the name of the formula you're submitting?
• Does your build pass brew audit --strict <formula> (after doing brew install --build-from-source <formula>)? If this is a new formula, does it pass brew audit --new <formula>?

---

The latest NodeJS (#89068 #89459) and Haproxy v2.8 use quictls to support the QUIC protocol.
The formula is is a copy of openssl, so can't pass the brew audit either.

$ brew audit --strict --new-formula --online quictls
quictls
  * line 90, col 5: Formulae in homebrew/core (except e.g. cryptography, libraries) should not run build-time checks
  * GitHub fork (not canonical repository)

Can we temporarily turn off this warning to run through the functional tests for each platform ?

[SMillerDev]

These should be two separate PRs

[Bo98]

We're phasing out OpenSSL 1.1.1 ahead of its upcoming EOL, so I don't think we should be adding a 1.1.1 for this.

[flier]

@carlocab Tests still fail because of full audit

[carlocab]

Yes, I can see that, thanks.

[carlocab]

I'm ok with merging this as-is.

We can add this to the allowlist to fix the make check/make test audit failure, but the fork failure can't be made to go away here.

Note, however, that I'm only ok with merging this as long as we do not use this as a dependency for other formulae. All formulae should continue to use upstream OpenSSL as long as that continues to be supported.

[flier]

I'm ok with merging this as-is.

We can add this to the allowlist to fix the make check/make test audit failure, but the fork failure can't be made to go away here.

Note, however, that I'm only ok with merging this as long as we do not use this as a dependency for other formulae. All formulae should continue to use upstream OpenSSL as long as that continues to be supported.

We're phasing out OpenSSL 1.1.1 ahead of its upcoming EOL, so I don't think we should be adding a 1.1.1 for this.

@Bo98 We may still need to use OpenSSL 1.1.x for a while until the performance issues are mitigated.

openssl/openssl#17627

[SMillerDev]

We may still need to use OpenSSL 1.1.x for a while until the performance issues are mitigated.

OpenSSL 3.x is what it is, performance issues and all and soon it'll be the only supported version and Homebrew plans to abide by that.

[github-actions]

@carlocab has requested bottles to be published to this PR.

[carlocab]

Apologies for the delay here. I was waiting for Homebrew/brew#15614 to land. There's some extra changes needed, but I'll follow-up on those. Let's get this merged.