Fix macOS language-pack signing, load-path check and sysconfig data

The load-path check matched each dylib's own @_______ ID and so rejected
every signed build; it now looks only for the CPython sta

Fix macOS language-pack signing, load-path check and sysconfig data

The load-path check matched each dylib's own @_______ ID and so rejected
every signed build; it now looks only for the CPython staging prefix.

show more ...

macOS: harden application and disk image signing

Make strict signature verification fail packaging, honor configured
keychains for all artifacts, and limit process entitlements to executable
code. R

macOS: harden application and disk image signing

Make strict signature verification fail packaging, honor configured
keychains for all artifacts, and limit process entitlements to executable
code. Reject unresolved build-time Mach-O load paths before signing.

Use safe argument handling for signing and disk image creation, make
language-pack wrappers valid application bundles, and prevent them from
invalidating signed installations.

Relocate bundled Python's install names, preserve its Darwin sysconfig
data, and update the Spotlight importer for the Contents/program layout.

show more ...

Win10 msvc trunk (#498)

Build trunk on Windows with a modern MSVC

configure.ac required VS2008, but the bundled dependencies had moved past
what VC9 can compile -- boost 1.84 needs C++11, Python 3.

Win10 msvc trunk (#498)

Build trunk on Windows with a modern MSVC

configure.ac required VS2008, but the bundled dependencies had moved past
what VC9 can compile -- boost 1.84 needs C++11, Python 3.11 needs VS2017 or
newer -- so the configured compiler could not build the configured
dependencies, and no combination of the two worked. Every other platform had
already moved; Windows was the one left pinned.

This branch accepts a VS2015-or-newer toolset and the Windows 10 SDK, then
fixes what a modern compiler and SDK find: export lists, entry points, CRT
and manifest handling, and source conformance across the tree. Every
dependency builds, including Python, which trunk has never built on Windows
at all. The CLI/.NET binding is ported from Managed C++ to C++/CLI and its
bridgetest passes.

configure, bootstrap and build.pl now run to completion, and
instsetoo_native produces openoffice450.msi and openoffice450sdk.msi.

coinMp has been updated to the latest Version.

What this does not claim: the office has not been started, and
testtools/source/bridgetest still fails getCaughtException() in the x86 C++
bridge. Python is built without _ssl, _ctypes, _bz2, _lzma and _sqlite3, and
Platform SDK v7.0 is still required alongside the Windows 10 SDK. No other
platform's build is changed.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01UWgzQY2r1XwFvgeLPFWPsi

show more ...