Summary

• Upgrade bundled zlib from 1.3.1.2 to 1.3.2
• Upgrade bundled utf8proc from 2.11.1 to 2.11.3
• Upgrade bundled double-conversion from 3.3.1 to 3.4.0
• Upgrade bundled wepoll from 1.5.4 to 1.5.8

Security fixes

zlib 1.3.2

Addresses findings from a 7ASecurity audit:

• Check for negative lengths in crc32_combine functions
• Copy only initialized window contents in inflateCopy (prevents reading uninitialized memory)
• Zero inflate state on allocation (prevents use of uninitialized memory)
• Copy only initialized deflate state in deflateCopy

utf8proc 2.11.3

• Fix out-of-bounds memory access when calling utf8proc_map with both UTF8PROC_CHARBOUND and UTF8PROC_COMPOSE

Non-security changes

• double-conversion 3.4.0: build-system improvements, pkg-config support, CMake alias
• wepoll 1.5.8: build improvements, VS2019 support, MinGW cross-compilation compatibility

Test plan

• Build on Linux (CMake + GNU Make)
• Build on Windows (CMake)
• Build on macOS (CMake + GNU Make)
• Run full test suite